nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf5ffffff]}}, 0x1c) 23:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x10000000000000, 0x100000001) 23:17:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1522.865651] binder: 32299:32300 got transaction with invalid offset (56, min 0 max 0) or object. [ 1522.876725] binder: 32299:32300 transaction failed 29201/-22, size 0-16 line 3033 [ 1522.888431] input: syz0 as /devices/virtual/input/input17 23:17:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf0ffff, 0x100000001) 23:17:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0xc1, 0x5, 0x800, 0xff}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000340)={r3, 0x8, 0x8}, 0x8) accept(r1, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000380)="a291251d588f7058f74172c8695d5ff5d9aec2a7ff11b26ebe9348fa307001be6c45a71f5600935526bf85a656a2da404ecb0e654bbbaef049bbf3b2353c8470f10591ed9aec", 0x46) [ 1522.918138] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1522.918138] [ 1522.948051] binder_alloc: binder_alloc_mmap_handler: 32299 20003000-20006000 already mapped failed -16 [ 1522.964760] binder: BINDER_SET_CONTEXT_MGR already set [ 1522.978507] binder_alloc: 32299: binder_alloc_buf, no vma [ 1522.998199] binder: 32299:32300 ioctl 40046207 0 returned -16 [ 1523.010205] binder: undelivered TRANSACTION_ERROR: 29201 23:17:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1523.029481] binder: 32299:32310 transaction failed 29189/-3, size 0-16 line 2970 [ 1523.050264] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1523.050264] 23:17:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf0110000, 0x100000001) 23:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1523.099015] binder: undelivered TRANSACTION_ERROR: 29189 [ 1523.115655] input: syz0 as /devices/virtual/input/input18 23:17:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1523.291944] binder_alloc: binder_alloc_mmap_handler: 32340 20003000-20006000 already mapped failed -16 [ 1523.324768] binder: BINDER_SET_CONTEXT_MGR already set [ 1523.332527] binder: 32340:32349 ioctl 40046207 0 returned -16 [ 1523.340123] binder: undelivered TRANSACTION_ERROR: 29189 [ 1523.345867] binder: undelivered TRANSACTION_ERROR: 29201 [ 1523.384131] input: syz0 as /devices/virtual/input/input19 [ 1523.423623] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct 23:17:47 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x5000000]}}, 0x1c) 23:17:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x2000, 0x100000001) 23:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1523.423623] 23:17:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x7, 0x800) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/213) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x891f, &(0x7f00000001c0)={'ipddp0\x00', @ifru_settings={0x7f, 0x8, @cisco=&(0x7f0000000180)={0x2, 0x4}}}) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000040)={'ip6gretap0\x00', 0x5}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f0000000240)=0xc) [ 1523.502380] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1523.502380] [ 1523.532976] binder_alloc: binder_alloc_mmap_handler: 32365 20003000-20006000 already mapped failed -16 [ 1523.549849] binder: BINDER_SET_CONTEXT_MGR already set [ 1523.555353] binder: 32365:32369 ioctl 40046207 0 returned -16 23:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)="7265697365726673fd", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1523.645698] input: syz0 as /devices/virtual/input/input20 23:17:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x3000000, 0x100000001) [ 1523.738087] binder_alloc: binder_alloc_mmap_handler: 32382 20003000-20006000 already mapped failed -16 [ 1523.769552] binder: BINDER_SET_CONTEXT_MGR already set 23:17:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1523.783246] binder: 32382:32385 ioctl 40046207 0 returned -16 23:17:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x22) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000001c0)=0x85, 0x11d) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = semget(0x2, 0x0, 0x81) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000340)=0x101) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000003c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r3, &(0x7f00000002c0), 0x10000000000443) r4 = gettid() sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @loopback}, &(0x7f0000000140)=0x8) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000180)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) accept(r1, 0x0, &(0x7f0000000380)=0x9e67df0d92739c1d) ioctl(r3, 0xff, &(0x7f0000000200)="d899a7608f8433f34b9b5c8f8fd24203e317439088b08733") 23:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1523.911048] input: syz0 as /devices/virtual/input/input21 23:17:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1000000, 0x100000001) [ 1523.972140] binder_alloc: binder_alloc_mmap_handler: 32412 20003000-20006000 already mapped failed -16 [ 1524.004161] binder: BINDER_SET_CONTEXT_MGR already set [ 1524.031072] binder: 32412:32414 ioctl 40046207 0 returned -16 [ 1524.082869] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:17:48 executing program 4: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:17:48 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)="7265697365726673fc", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf401000000000000, 0x100000001) 23:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f00000001c0)=""/102, &(0x7f0000000240)=0x66) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000180)=0x8) sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:17:48 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xff000000]}}, 0x1c) 23:17:48 executing program 4: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1524.471297] binder_transaction: 4 callbacks suppressed [ 1524.471312] binder: 32434:32436 got transaction with invalid offset (56, min 0 max 0) or object. [ 1524.510794] binder_alloc: binder_alloc_mmap_handler: 32434 20003000-20006000 already mapped failed -16 [ 1524.522694] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1524.522702] binder_alloc: 32434: binder_alloc_buf, no vma [ 1524.526810] binder: BINDER_SET_CONTEXT_MGR already set [ 1524.561364] binder: 32434:32436 ioctl 40046207 0 returned -16 23:17:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x300000000000000, 0x100000001) 23:17:48 executing program 4: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:49 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1524.680775] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1524.770041] binder: 32465:32468 got transaction with invalid offset (56, min 0 max 0) or object. [ 1524.817239] binder: BINDER_SET_CONTEXT_MGR already set [ 1524.829234] binder_alloc: 32465: binder_alloc_buf, no vma [ 1524.835753] binder: 32465:32468 ioctl 40046207 0 returned -16 [ 1524.900033] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1524.900033] [ 1525.010197] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1525.010197] 23:17:49 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf00]}}, 0x1c) 23:17:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x600000000000000, 0x100000001) 23:17:49 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={[], 0x1000, 0x6f, 0x5, 0x6, 0x101, r1}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept(r2, &(0x7f0000000180)=@l2, &(0x7f0000000040)=0x80) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r4 = accept4(r2, 0x0, &(0x7f00000000c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000380)) fsetxattr$security_smack_entry(r4, &(0x7f0000000300)='security.SMACK64\x00', &(0x7f0000000340)=')\x00', 0x2, 0x2) sendfile(r4, r2, &(0x7f0000000240), 0x10000000000443) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x8, 0x20}, 0xc) accept(r4, 0x0, &(0x7f0000000080)) 23:17:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:49 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) r3 = accept(r1, 0x0, &(0x7f0000000080)) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000300)="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") [ 1525.234234] input: syz0 as /devices/virtual/input/input23 [ 1525.251721] binder: 32492:32502 got transaction with invalid offset (56, min 0 max 0) or object. [ 1525.281960] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1525.281960] [ 1525.302089] binder: BINDER_SET_CONTEXT_MGR already set 23:17:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x2000000000000000, 0x100000001) 23:17:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1525.331287] binder_alloc: 32492: binder_alloc_buf, no vma [ 1525.337092] binder: 32492:32502 ioctl 40046207 0 returned -16 23:17:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1525.400623] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1525.400623] 23:17:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x6b6b6b00000000, 0x100000001) 23:17:49 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1525.484778] input: syz0 as /devices/virtual/input/input24 [ 1525.508914] binder: 32527:32530 got transaction with invalid offset (56, min 0 max 0) or object. [ 1525.561483] binder: BINDER_SET_CONTEXT_MGR already set [ 1525.576233] binder_alloc: 32527: binder_alloc_buf, no vma [ 1525.582959] binder: 32527:32530 ioctl 40046207 0 returned -16 [ 1525.674607] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1525.706027] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1525.706027] [ 1525.783278] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1525.783278] 23:17:50 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xfc]}}, 0x1c) 23:17:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x10000000, 0x100000001) 23:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) readahead(r0, 0xf59, 0x0) 23:17:50 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1526.027530] binder: 32563:32567 got transaction with invalid offset (56, min 0 max 0) or object. [ 1526.043838] input: syz0 as /devices/virtual/input/input25 [ 1526.054685] binder: BINDER_SET_CONTEXT_MGR already set [ 1526.061557] binder_alloc: 32563: binder_alloc_buf, no vma [ 1526.067270] binder: 32563:32567 ioctl 40046207 0 returned -16 23:17:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x8000000, 0x100000001) 23:17:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1526.131537] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1526.131537] [ 1526.214774] binder: 32583:32584 got transaction with invalid offset (56, min 0 max 0) or object. [ 1526.237633] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1526.237633] [ 1526.243869] binder_transaction: 18 callbacks suppressed [ 1526.243886] binder: 32583:32584 transaction failed 29201/-22, size 0-16 line 3033 23:17:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1000000000000000, 0x100000001) [ 1526.292959] input: syz0 as /devices/virtual/input/input26 [ 1526.313666] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1526.313684] binder_alloc: binder_alloc_mmap_handler: 32583 20003000-20006000 already mapped failed -16 23:17:50 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1526.358182] binder: BINDER_SET_CONTEXT_MGR already set [ 1526.365717] binder: 32583:32584 ioctl 40046207 0 returned -16 [ 1526.384878] binder_alloc: 32583: binder_alloc_buf, no vma [ 1526.425010] binder: 32583:32604 transaction failed 29189/-3, size 0-16 line 2970 [ 1526.484818] input: syz0 as /devices/virtual/input/input27 [ 1526.561677] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1526.561677] 23:17:50 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x5455010000000000]}}, 0x1c) 23:17:50 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) 23:17:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xff0f000000000000, 0x100000001) 23:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1526.651362] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1526.651362] 23:17:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1526.719639] binder: 32629:32631 got transaction with invalid offset (56, min 0 max 0) or object. [ 1526.745637] binder: 32629:32631 transaction failed 29201/-22, size 0-16 line 3033 [ 1526.754439] input: syz0 as /devices/virtual/input/input28 [ 1526.781359] binder_alloc: binder_alloc_mmap_handler: 32629 20003000-20006000 already mapped failed -16 [ 1526.813085] binder: BINDER_SET_CONTEXT_MGR already set [ 1526.818668] binder: 32629:32631 ioctl 40046207 0 returned -16 23:17:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x20000000, 0x100000001) [ 1526.841602] binder_alloc: 32629: binder_alloc_buf, no vma [ 1526.873364] binder: 32629:32642 transaction failed 29189/-3, size 0-16 line 2970 [ 1526.882157] binder_release_work: 18 callbacks suppressed 23:17:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1526.882164] binder: undelivered TRANSACTION_ERROR: 29201 23:17:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1526.915817] binder: undelivered TRANSACTION_ERROR: 29189 [ 1526.936689] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1526.936689] [ 1526.969302] input: syz0 as /devices/virtual/input/input29 23:17:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xd000000, 0x100000001) [ 1527.014802] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1527.014802] [ 1527.033886] binder: 32655:32658 got transaction with invalid offset (56, min 0 max 0) or object. [ 1527.056055] binder: 32655:32658 transaction failed 29201/-22, size 0-16 line 3033 23:17:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\a', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1527.103002] binder_alloc: binder_alloc_mmap_handler: 32655 20003000-20006000 already mapped failed -16 [ 1527.134372] binder: BINDER_SET_CONTEXT_MGR already set [ 1527.157701] binder: 32655:32658 ioctl 40046207 0 returned -16 [ 1527.159339] binder_alloc: 32655: binder_alloc_buf, no vma [ 1527.199242] binder: undelivered TRANSACTION_ERROR: 29201 [ 1527.210170] binder: 32655:32672 transaction failed 29189/-3, size 0-16 line 2970 [ 1527.221514] input: syz0 as /devices/virtual/input/input30 [ 1527.234548] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1527.241331] binder: undelivered TRANSACTION_ERROR: 29189 23:17:51 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x54550100]}}, 0x1c) 23:17:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @remote, 0x7}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000009c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000cc0)={0x0, 0x7}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000d40)={0x0, 0x1, 0x30, 0xfffffffffffffeff, 0x9}, &(0x7f0000000d80)=0x18) sendmmsg$inet_sctp(r2, &(0x7f0000000e80)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x4, @mcast2, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000300)="1d9f99102b4aba09d546c8ce9e090ee8d77ecd45a0224d8ff4de88bfce68eedd52ffb2dc07ecebaa53e19c8e90bc5054d4013c465c047e3e38ed291492d1b1c6717920a0c4a57738f4958e520e0d16582bfcb91b1821e968035e66a96160d0b94ce2d0fb8dcd3807f226f664c6779a180e81e6ab603fef39ec777318ae52f41c5a0801dd7ddf63683154c5a76dcfa38f2e14c518c9747f5d8704625d8a528611dfef62dce076c5eb65a652050c57e24b821aa4a5588fcc2dc563ef5296d1caf42475105c50a441dc051007861fa2e6b2a2b348b7", 0xd4}, {&(0x7f0000000200)="5f4b9e5afb2b8d1227922e9bc3650716a2f71404b9f555b2d684718769695d5abfd7e13a116d9dca8166f91990098b6922a988f51ae07db1a1a81006908254369ada156f65e797c588f7666dbb3af83259dd1e0327b7531dde60759d809a49363d31cf1c1bc1313df30325dc309162b5d6e79d7aa4ab06e1c98aac4676301e3d82ded4c2dcb09764b3a89aae4e9e17652a35ac16c1c33892801eeddc418a68a21dcf00c3761386d135959fe5e924bd09704a8e", 0xb3}, {&(0x7f0000000400)="5bd747bec93a3084d991af647ddb5e8423a8313e92cf5fe361e53209451b13c55e4f9390ec58fe157010354db327d7eb97b85d551a3b99c0f2ed929ae7d6f1906561ea91c6d74f91c98398f52e2d0c2ca1d167e6844133fba025847872472683df46f5a4b9c6d24d9a9076006eb15ec470520b0bf8462b502e8ebb4091a5a03ecb63341568d991befd7f9c49cf584a3036ef12fef4a9b0e9f01a8d4dc61828152653b19486d4a7324eeedfdfacee54950eac5d358d7ba1e9d1bb29bd87e50254bd7050e9606d245789ef86b5ca1a848cc5dbfe6824bc72c0", 0xd8}, {&(0x7f0000000500)="c8a6a360e6bf7f3b3176df4e70eba65909be", 0x12}, {&(0x7f0000000540)="b215e47fd1cae42e7513f6ff6c8f533363daa637d2e642eea2fb425e74a297028a2149c1de6affd5fb", 0x29}, {&(0x7f0000000580)="f3d0ea6b9a7bd42df7ade881cccae99170ee7d7396179b7660e8e5cb4d77035c4417ee4f85afc6df3cc59cd8af2bda090eff85448481bcf393a4542ef531b4edbad59adcd0", 0x45}, {&(0x7f0000000600)="ac9c0ba77bfead89dbcfd1780af125e50796a6491286f61c5373beb5a7bbd426b09e9fba1d5b531f30e43b7109bf87a925c4293600da85ac505578ed17e991c547ac1d3b9d4f652ca8c243b5274ee6e02f4939ae48f0e5f4e366e3aa48e530cebdf7e5fe4390920bf79853a01f3fd74a03f176b0c1ab980fabe5fb02", 0x7c}, {&(0x7f0000000680)="0e6fb43fc6f6850228370c8af7ab4877a29f311a46a24584770ce524384790765a1d51642d65b345c61b8750857057ddcc130277a4a479e3e0d8184d9ee453acf607549a1e127ef05907cf8081d04e246fdb464cffe6f7ff95a732b2b50516358952a2724e6e6b47031fba2b7421ba4566c526e95ae21f76680e3fd8e01ccb3f862ec328", 0x84}], 0x8, &(0x7f00000008c0)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x3906, 0x8, 0x8001, 0x1, 0x4, 0x9, 0x1, r3}}, @init={0x18, 0x84, 0x0, {0x41, 0x7f, 0x7, 0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x9, 0x83}}], 0x60, 0x805}, {&(0x7f0000000940)=@in={0x2, 0x4e22}, 0x10, &(0x7f0000000980), 0x0, &(0x7f0000000ac0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xffffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0xf8, 0x6, 0x1, 0x3, 0xba7, 0x7c96, 0x1ff, r4}}, @sndinfo={0x20, 0x84, 0x2, {0xec, 0x2, 0x4, 0x8, r5}}], 0x68, 0x1}, {&(0x7f0000000b40)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)="395a2f6740338d4c37763e78e122612a466313e1f923d1f98e5ca418c13279e40435e44cb3fe210dbd82b9043a7a66f82290e6e4f2d5a44c246f868a8a743a534abdfb7cb2132223bc0eaaa3a7444750142102fa354d4ba95a36db44c664f8d20fd07aa0c7b4a3656fe11e0208ec09e0de8bfc7a054eccb04eb50a46bde1e22d1b8216ac25d55b3b7f46b07b8a85154a00323d0b47b0f6ac5919770997490bc318157383fbbbbd7fc67b996866febefb4dce0b4430b0e91cac2b3ada93f55fe37afdf12b85f2400b0b484d7ea48860618879ad1fcc696f597d2bb70ca326c5a2f44144b458b763369ba82a853be4f85ee62d9305", 0xf4}], 0x1, &(0x7f0000000dc0)=[@sndrcv={0x30, 0x84, 0x1, {0x4c, 0x3, 0x8000, 0x2, 0xc1, 0x8001, 0x7, 0x0, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x8, 0x8, 0x401, 0x0, 0x5, 0x7, 0x101, r7}}, @authinfo={0x18, 0x84, 0x6, {0xc36}}, @init={0x18, 0x84, 0x0, {0x8, 0x3, 0x7fffffff, 0x7}}], 0x90, 0x4045}], 0x3, 0x8080) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000180)={0x3, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ioprio_get$pid(0x0, r8) accept(r1, 0x0, &(0x7f0000000080)) 23:17:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf011, 0x100000001) 23:17:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1527.680331] input: syz0 as /devices/virtual/input/input31 [ 1527.688197] binder: 32700:32707 got transaction with invalid offset (56, min 0 max 0) or object. [ 1527.704689] binder: 32700:32707 transaction failed 29201/-22, size 0-16 line 3033 [ 1527.716961] binder_alloc: binder_alloc_mmap_handler: 32700 20003000-20006000 already mapped failed -16 23:17:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1527.741060] binder: BINDER_SET_CONTEXT_MGR already set [ 1527.746631] binder: 32700:32707 ioctl 40046207 0 returned -16 [ 1527.755673] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1527.755673] [ 1527.769890] binder_alloc: 32700: binder_alloc_buf, no vma [ 1527.787235] binder: undelivered TRANSACTION_ERROR: 29201 [ 1527.807150] binder: 32700:32709 transaction failed 29189/-3, size 0-16 line 2970 [ 1527.823646] binder: undelivered TRANSACTION_ERROR: 29189 23:17:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xe803000000000000, 0x100000001) 23:17:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1527.855468] input: syz0 as /devices/virtual/input/input32 [ 1527.936582] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1527.936582] 23:17:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1527.977109] binder: 32729:32731 got transaction with invalid offset (56, min 0 max 0) or object. 23:17:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x5000000, 0x100000001) 23:17:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) [ 1528.039609] binder: 32729:32731 transaction failed 29201/-22, size 0-16 line 3033 [ 1528.099937] input: syz0 as /devices/virtual/input/input33 [ 1528.100440] binder_alloc: binder_alloc_mmap_handler: 32729 20003000-20006000 already mapped failed -16 [ 1528.135988] binder: BINDER_SET_CONTEXT_MGR already set [ 1528.143909] binder: 32729:32731 ioctl 40046207 0 returned -16 [ 1528.147510] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1528.173678] binder_alloc: 32729: binder_alloc_buf, no vma [ 1528.179854] binder: 32729:32747 transaction failed 29189/-3, size 0-16 line 2970 [ 1528.189851] binder: undelivered TRANSACTION_ERROR: 29189 [ 1528.196460] binder: undelivered TRANSACTION_ERROR: 29201 23:17:52 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x5400]}}, 0x1c) 23:17:52 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xff0f, 0x100000001) 23:17:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)) [ 1528.524241] binder_alloc: binder_alloc_mmap_handler: 32757 20003000-20006000 already mapped failed -16 [ 1528.553653] input: syz0 as /devices/virtual/input/input34 [ 1528.564788] binder: BINDER_SET_CONTEXT_MGR already set [ 1528.575477] binder: 32757:32762 ioctl 40046207 0 returned -16 [ 1528.575966] binder: undelivered TRANSACTION_ERROR: 29189 [ 1528.587352] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1528.587352] [ 1528.610319] binder: undelivered TRANSACTION_ERROR: 29201 23:17:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xffffffff000, 0x100000001) [ 1528.742268] binder_alloc: binder_alloc_mmap_handler: 311 20003000-20006000 already mapped failed -16 23:17:53 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfsz', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1528.782654] binder: BINDER_SET_CONTEXT_MGR already set [ 1528.788230] binder: 311:312 ioctl 40046207 0 returned -16 23:17:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1528.940699] input: syz0 as /devices/virtual/input/input36 [ 1528.985992] binder_alloc: binder_alloc_mmap_handler: 333 20003000-20006000 already mapped failed -16 [ 1529.001245] binder: BINDER_SET_CONTEXT_MGR already set [ 1529.006698] binder: 333:338 ioctl 40046207 0 returned -16 [ 1529.089201] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:17:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xa00]}}, 0x1c) 23:17:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xe, 0x100000001) 23:17:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x10000, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r3, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) 23:17:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:53 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\b', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1529.427922] input: syz0 as /devices/virtual/input/input37 [ 1529.440550] binder_alloc: binder_alloc_mmap_handler: 357 20003000-20006000 already mapped failed -16 [ 1529.462872] binder: BINDER_SET_CONTEXT_MGR already set [ 1529.468344] binder: 357:361 ioctl 40046207 0 returned -16 23:17:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1529.514225] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:17:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:53 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1529.628511] input: syz0 as /devices/virtual/input/input38 [ 1529.708144] binder_transaction: 4 callbacks suppressed [ 1529.708158] binder: 381:383 got transaction with invalid offset (56, min 0 max 0) or object. [ 1529.734843] binder_alloc: binder_alloc_mmap_handler: 381 20003000-20006000 already mapped failed -16 23:17:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002300)={0x0, 0x4b, "211fa25dc635c21a82a547884fede619bc81506724b6d72e0995f3acd94fc5202f0dc2038c35894ab88e0c9dbd10f4ec6d193ea94fceda45ad02558272ef1ee4c075d83c1e324d7a674be1"}, &(0x7f0000002380)=0x53) sendmsg$inet_sctp(r1, &(0x7f0000002440)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xdba, @dev={0xfe, 0x80, [], 0xb}, 0x1000}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="0972800f0d871091d0e9c79c5a0ec33761c3f9183465c4dab443f50f7206f7a252d883419c5454d4a4ce8af336c07bf5629162e8b28729af28ab1ff76e85755ee851800642404043a9db43a30328d96c1a83218f7a177eb8260f3ce271f367ba7301772d64d2d9f2019546a152e909be9bbc6c73db0c3302cece69568e8b74b06dba13cd5394a865f6cfa8f459dd93455ea8684b3149f050ca08ecc7689021bd336aed07315987df6c478f34814394add892a9053c10a93d2c9c9aa8360a", 0xbe}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000240)="7879dada157fa99968df4e5a6c2444a11d7e5f83707e7e031981ed997b91bb9fc28f29b78ed0bc99928f19ba1f08ddc2a20109", 0x33}], 0x4, &(0x7f00000023c0)=[@authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x401, 0x4, 0x8000, 0x1, 0x5, 0x200, 0x2, 0xffffffffffffffff, r3}}], 0x48, 0xc004}, 0x4000) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000002480)={'syzkaller1\x00', 0x8}) sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:17:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1529.776960] binder: BINDER_SET_CONTEXT_MGR already set [ 1529.783792] binder: 381:383 ioctl 40046207 0 returned -16 [ 1529.811124] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1529.811132] binder_alloc: 381: binder_alloc_buf, no vma 23:17:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x6000000000000000, 0x100000001) [ 1529.884863] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1529.884863] [ 1530.046365] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1530.046365] 23:17:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x5400000000000000]}}, 0x1c) 23:17:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:54 executing program 4: setrlimit(0x7, &(0x7f000000f000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x8eb, 0x0, 0x0}, 0x2c) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080), 0x4) 23:17:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xe000000, 0x100000001) 23:17:54 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) [ 1530.315771] binder: 424:433 got transaction with invalid offset (56, min 0 max 0) or object. [ 1530.328343] audit: type=1400 audit(1539991074.599:99): avc: denied { map_read map_write } for pid=425 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1530.338742] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1530.338742] 23:17:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)}, 0xc100) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="b1", 0x1}], 0x1, &(0x7f0000000080)}, 0x0) 23:17:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf401, 0x100000001) [ 1530.377142] binder: BINDER_SET_CONTEXT_MGR already set [ 1530.386481] binder_alloc: 424: binder_alloc_buf, no vma [ 1530.392255] binder: 424:433 ioctl 40046207 0 returned -16 23:17:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) geteuid() getresgid(&(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) r3 = dup2(r2, r1) futex(&(0x7f0000000500), 0x0, 0x0, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000940)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000003c0), &(0x7f0000000440), 0x0, 0xfffffffffffffffd) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000140), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)={'broute\x00'}, &(0x7f0000000340)=0x78) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1530.510112] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1530.510112] [ 1530.552270] binder: 456:458 got transaction with invalid offset (56, min 0 max 0) or object. [ 1530.578018] binder: BINDER_SET_CONTEXT_MGR already set [ 1530.590548] binder: 456:458 ioctl 40046207 0 returned -16 23:17:54 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1530.598001] binder_alloc: 456: binder_alloc_buf, no vma 23:17:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1530.738199] binder: 473:475 got transaction with invalid offset (56, min 0 max 0) or object. [ 1530.782748] binder: BINDER_SET_CONTEXT_MGR already set [ 1530.793102] binder_alloc: 473: binder_alloc_buf, no vma [ 1530.809368] binder: 473:475 ioctl 40046207 0 returned -16 [ 1530.815042] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1530.815042] [ 1530.834287] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1530.905568] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1530.905568] 23:17:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xfec0000000000000]}}, 0x1c) 23:17:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:55 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f000000aa00)=""/236) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) sendmmsg(r0, &(0x7f000000a840)=[{{&(0x7f0000000180)=@sco={0x1f, {0x0, 0x7, 0x6, 0x0, 0x4, 0x8e42}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="2d2e1c6e11d1b0b3daf3a0fe09ef891348d43d0765bc10779db781b09a3718f15d6391063fb5714fe06ddbebce953426edac151de3e2523d1f54b5bf6eadadbe526a2a3872469cbc1f165ee0dcce7ac681ff53bd7bad13db53486fcae8deae53f765a44a248dfa82693291deb7be08f291b2772c7f4100da", 0x78}, {&(0x7f0000000300)="bfa9f3f3102b8a345b8efb847690b3f7006ec3a754d9ed07a206ae0319eeb5d2ecaa1c5733db40cdf603a1a352ac936f7305e8d620527dccbd9a7a22761df364c75438a896aeafd56d90b0ea032a936cd2efa596eb1d197ee96a6175597fa5713f5ef8f6862ec9e8821d66fa4ba704e80f1859e204def756b19646441e7210bd0517a053465022be59a7d627a9cd6b8216965803631f776ab9ae7df56c5f269c0030f45faf0b5080b6edb2220ecf44aa4d763e1519fa98d22949c7b7b290a1d8911129e1492dc9763a0bc821b682d752e938e88888d3d113c3a15195f729435b00fd5a2efe37007d57d6", 0xea}, {&(0x7f0000000400)="57e5030f8d770766e1c7213dddb4a6b4a271105481b8c8e2058ffa1faf72920ba1f91f842a325279a59f36c38f97867393fc335f8a2c87f7eb46c651e5a4b6f779a0d3fa2c2aa984cbc23b7e64ea9c2671c72015be2608787e19b38ed71c1f6afe6de14be110baf8fed266ad9c9a45deb004e331f21fb358efa94e073423f082f73db6662bcc11352f7d97c3c7ca684fce19f306f4d8cfba41fd29a32cfe9126d3d1ebd03b7f5df11a23d0a79a", 0xad}, {&(0x7f0000000040)}, {&(0x7f00000004c0)="9da4e33a5246f2e317c3bfe1419eb7beb84ec8a7ba7b44efbba5f10a24ce36167df46faa6720bffd502ceeb709e16c7739977aa54a10b4bb39a26f457d53178c11f23260b5b7ef40259552056febc94264ef866d76d27407e313e6743865d8959e46a56865ca73cd60f34e0486227d5ddee9b5deb68f1bacdd0201afb15f57b98e32d8f1a5e3d0d8a9092c54a589f1dd0f2d04f209f73f0341fff87f0a3fe96bbbd9db7da0ea700d5f0c5e6d065903a6d8d4c719992bf54532cfd7f66dbbe82c8b3fd521e583322ef4a92110d692a70552f599738d46", 0xd6}], 0x5, &(0x7f0000000640)=[{0x1010, 0x1ff, 0x8001, "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"}], 0x1010, 0x4000}, 0x81}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000000280)="a75ec5bd0909840b4104d0188e7afa3676c609dfa3597ef96a5664cb8adaaedc17a920a9d87dcab6deafb7be", 0x2c}, {&(0x7f0000003680)="81dde0b927a98a0fa935798ebb20bed4bce500865b71ae7d57199937fdaddeb4258fb1d32e88b9eb0c8e44a7d3ac5e191cf3b7181857b583d3c37455518fae61b1a87b3c6a3515f33155f8185a575b93498779df03c25389f2d94cfc377293c381195eabbfb77c95188807ab5e93fb5eb0dc17bb50b1500004ceea6c8225d3e793b47beb", 0x84}, {&(0x7f0000003740)="e65e670c6489ae0e612ebc5cc541076b0fd54ee22d5f3976643e61aff10a0c57", 0x20}, {&(0x7f0000003780)="7971d75431032b45719eb1d3007a51f006652a6246a25640c92db6b91017be39273ece7e4cb516699bafca809a4699b3d84c1cc50e53814f7fd17ca71f59b36ba9216ddc27e19145485342b43d953d8050e3a9a2565931eb54ec111e1044e31b12eea80700326ff7d429dc77ebc85f32d47e69e21c6983dd483a9843233f3d813d25f98a73bba86727e59a087b5aa37e61fa9c8570c8a8ab283a3c1dcdf09607ed513f4ace87a5bbbaea33d9fb37f46401b5c5ebaa98a3dba8", 0xb9}, {&(0x7f0000003840)="1a59547e654aa2f5b04d27f1d839ed646afd3f4d9ab2e11ea18b0c839c174e2fd94231db956a12d2bcdd333ccc49beabc655987cf4c4f4d1c11de8df3b87f4a8928b1f9d9e05a3bfcd98a7a9bd49134863c45257eb95e5af019129a3b6b5cdc1a909462d6056da0e6ae81f8ae1defe2fb48e675b4cb28856318aef8f539dd5e618fdf5375d14dd89c9fce596fbeae8a905edf9b76dd2c5bed0a9e177a371f5778f0e48276f60cc6d8d540d5f17da0e807f800d098bdc7680ff73b7583209cdf7d120e55d0d", 0xc5}, {&(0x7f0000003940)="e84811e2a20544a1c82e80415156b37384a9326e700788f48675c5fae22c8477334ce051ccd112bae884ce45bfac1b52ce50658574e294bee9a46d6df2bdd684bf677da36203306c427173eeb563f781aad6ddd8c406c1a64f768c83f56e5f4038bd7ec49cb46f04b2ac05a531e6fac0336d85ae78377ed39ef7ab90944f1c4f640aa461be3f4a483185646c9ad57837834e", 0x92}], 0x8, &(0x7f0000003a80)=[{0x60, 0x10a, 0x1, "29e00eb26d405f06661dc1aed83099e37badf5fd9d9b750deb1e1612f574c0d56196b860474c5495a541f5ee4cd865bd4d54ed085d948806f63f4634a773294526f6c1fbef53155445f6"}], 0x60, 0x20000000}, 0x771}, {{&(0x7f0000003b00)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000003b80)="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", 0x1000}, {&(0x7f0000004b80)="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", 0xff3f}, {&(0x7f0000005b80)="62fbb3561ea22e64b56e27452a116c901df7338bf36e6571001016cc182f885a86bc240ac43049a73caefb653d3d5cdba5012d7ee6558f979ab92d934b090f69bd1d63b1723f503a2f551552e0a856e85799a089a4a78c38e03d72e936e858cb347536ac774da6309232afd1de993978e20b73265d6c8b621f56c264c226950834aa020ba239c73e8acd21669f05f7a7312de6e19fdc2aa3ed6b316f49808e88a36f0d50570562e485c9afdb13", 0xad}, {&(0x7f0000005c40)="61ef5e650648bce5dcce7f1ab6a854a5", 0x10}, {&(0x7f0000005c80)="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", 0x1000}], 0x5, &(0x7f0000006d00)=[{0x60, 0x11, 0x3f, "f90233aa0f00d9ef964ea0ae88035b5e9df8791e200615387e19bfe1a160a27d99691f917506e3ce11c5b99dd126ac65539aee9076647b0ecbe7d8acb4a5959777627394a83d0227a6dc28"}, {0x58, 0x10e, 0xfffffffffffff1df, "f8d6a78406fc90769b392b2b97edd928209e3045227b7e7aa24928c6cd8007665cdb429691f6c6cdd9b1e9d87dcdb537fcfac395bc6aac1d72fe9d07f986bfc05d"}, {0x18, 0x1ff, 0x1, 'Tfg'}, {0x18, 0x10b, 0x2, "4378e12e85ba8f"}, {0xc0, 0x11f, 0x0, "9b0b29e8f682ec77959aed9bedab002315a6858e798e977a4586bfbef4a99fa4d5b8c1e573f7208efc76717e8c738d934df131d7173191c3c8ef08eb6611b5db4c31e881fc46ddcedd5ea7f18a2a9c4fdf8e0dae939d955b5481a9d3943e73fa1ab9138baf7db76271823314310d9891924a6c9b14d495858d029057644b3b9839792306d1124a941c3d7d6f9411947991f3558b04b7cbcd0becde38daa057314bf8a808f8932178ea96cd4f"}, {0x98, 0x117, 0x5, "183a6fd56c96d20101559f20fd456c780d33d6502de061fde3770864f8d0fdd2a56c0c67726cd41162e041a586899887cbe0a9e4f4b01e599b827b5f609a93b9e364ce1039ca14a2258518929120f36e494b7d8057ad1ef4cf17c17032b60a987c149984f3f704592db4525611650c8213e1a5581a82e5e43206de7b378f466484af0fd8"}], 0x240, 0x4000001}, 0x3f}, {{0x0, 0x0, &(0x7f000000a7c0)=[{&(0x7f0000006f40)='r', 0x1}, {&(0x7f0000006f80)="3b9cf18bfdf0be7670d3dd511b0e0d88410e3645763d563b347bd88da42aad9e9c6d9a5c91c68f7a63c82285cd2aa9070b23d0", 0x33}, {&(0x7f0000006fc0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x11}}, {{&(0x7f0000008000)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'rose0\x00'}}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000008080)="7d75a2e7da313d12815af704b584486669a2f705e2508127d897f03a1229a93ae41b73274aeb1da01ee414f0fa8d84f5ccd28d026870e8e59022cf5f8a0394a2051e641690a7810f5257443fcc4fae97a777b5ad44ebe7458de8a0969b78c75504585c685bd0c30066117152ab0986846fee69cefc6deed8df9f6617edc0230d684fb5b3619de493c22b6800e4ac6fa9144ba110a58ba4c45470a9f27b8856ed744ec6c572ae45d9fc46ba11c83acf8a6c98f5d89cd7e88704ff613fe33488bcafcc001c67e33bdee42d1ab1c7b03746d7016c894f268772250b85f7d88f329d2ce47307d55e7103ea5643782a52558a41", 0xf1}, {&(0x7f0000008180)="67e102", 0x3}], 0x2, &(0x7f0000008200)=[{0x1010, 0x110, 0x3, "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"}], 0x1010, 0x20000000}, 0x5}, {{0x0, 0x0, &(0x7f0000009440)=[{&(0x7f0000009240)="be927b330a6f522b6d30f76e28da3c616e68a0483f11fae76c78328d30a34393c49b75787f4c16a3a4a52ea198fc75d4a2a72966c59a2cb97421e852085d5703e2b48c9c14", 0x45}, {&(0x7f00000092c0)="baf3a5722d69115eaedb817ef99d3dd49a4b0262feee150991f7460a875bfacee12fa57462e62a9a84e2db96ce12ad1bd720cafa4194456f430afde9c14426ff", 0x40}, {&(0x7f0000009300)="29e3d87ec5ac4d2a05e5711f824eb9904d8cb1abe163ca44ef18962406509d6efe52a578705a853f534e15e35eae76847680a65e199d66214a6accfa7e79b1221853e335a8be52fda86ec563389184bea4d8bef1d19a68d0d81ceea565cbbe5ecc4d9e3163d2836f25fb13810233c3d26b23b30c2fc1ef4b7f940e28e39e009fd830fe1febac913fba052d65a9a9b83ec6dcf4c6534de3e0c63b505d2de1be5a7abb4a53641974a58f49d95ef438e328b2ced0bce5eb3dfc", 0xb8}, {&(0x7f00000093c0)="0422b1beecb6dd2b0e9391e307a041268c564bac470912df3ae5779ac6db2fa779d1eced30834fa49db99a4e581c84b55012f9d9b32899fd8f54005be49de9d2ab40dae7aac95c224a933f7d908c28efec77705a5eb1f46ca8cc9992d313dc0f0efbc98fdfd253989c34cc24765cca67cb5174e66161bf42cae1cbaeff539827", 0x80}], 0x4, &(0x7f0000009480)=[{0x70, 0x11f, 0x89c4, "7b693f850f8495f68bd0a9268ccf5e4157eb6bf6e22712493432517f71305f1be8f2988cf56ecf492db659541075ef8eff590924b9d82972257bbd7b57d35d5854551ad65ebcb1495b1b41847354ac2ba013e1fbaa48fe9e90ee6d9528"}, {0x88, 0x117, 0x97, "514cfa37d461bf760ac7dba32f4f90d025cf1f9fb57d8a4cc00facf671cc260c1612109352f987421a70e34f40a94e17e205ed298fe54a1f7a6127923762550fc7d8689a59f4b7277a4c240fd232fb2ac1a937158c1f62c339b227b4262c48cb1aa40aa230a66a16cd8b1b05cb57a81b10ccb11ae4a946"}, {0xc0, 0x113, 0x1, "81195bc448e9dd4ec4a645ce6545431f0e7224736ebbbc7d902f3fe3ef23acc70901865e42bd4abcd2c0fc7141c9a9db89ef8ee49c17d746f157394cc87686c2cdce193a9810fd50f30f9d7ccb3cb2beec73047f00673d573e4bbc8f48b8fad0847f70a839507f1c0eaef1cae0a5bc05d86bd079d1d3cd45b1ce76acdd13faf48c9d9129da83e21558ef9c4d5f7b3a072492e22d7be8d3f13fdb4fb9dd4783547e2a24f00ecbe21d5e65c71c3f"}, {0xc0, 0x112, 0x0, "a28e8c2fdd1e564b5670a4a59936ac7bf750d6fa9e11b1c78e92d8e0da481ce1f4bd6ff7ab522a3c383ede4e7a17de3547b80f4f6c5bcb96f97b53b21fdf6b56eb42f16ef740742aecd097774f41825e223c7c8430b3b408d72f863542f4c2d83edea9a8432ea111851e06b93c8196b84ffcfa20bc68d2db9a1d2167b37acbeb89e44ea5d3d88050c4726a68c1e27c394ba46a68b404b394c7fba82e2fd87d62f1c8fff36335a3132b"}, {0x1010, 0xff, 0x4, "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"}], 0x1288, 0x10}, 0x1}, {{&(0x7f000000a740)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f000000a800)=[{&(0x7f000000a7c0)}], 0x1, 0x0, 0x0, 0x20000000}, 0x9}], 0x7, 0x4) accept(r1, 0x0, &(0x7f0000000080)) 23:17:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x11f0, 0x100000001) [ 1531.054525] binder: 499:501 got transaction with invalid offset (56, min 0 max 0) or object. [ 1531.066088] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.072102] binder: 499:501 ioctl 40046207 0 returned -16 [ 1531.077854] binder_alloc: 499: binder_alloc_buf, no vma 23:17:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1531.107214] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1531.107214] [ 1531.185496] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1531.185496] [ 1531.191310] binder: 510:513 got transaction with invalid offset (56, min 0 max 0) or object. [ 1531.219475] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.226042] binder_alloc: 510: binder_alloc_buf, no vma 23:17:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r1, r3, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x85ec, 0x440280) 23:17:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x4000000000000000, 0x100000001) [ 1531.239439] binder: 510:513 ioctl 40046207 0 returned -16 [ 1531.240040] binder_transaction: 19 callbacks suppressed [ 1531.240058] binder: 510:517 transaction failed 29189/-3, size 0-16 line 2970 23:17:55 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000300), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x26, &(0x7f0000000180)="7e65742f697076dd15f2617574650025a6ef92bd3ccecf4a160d2c99acccf389ea7945edd262", 0xffffffffffffffff}, 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x800, 0x84902) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x80000001, 0x3, 0x8000, 0x200, 0x0, 0x5699, 0x3000, 0x2, 0x7, 0x800, 0x6, 0x9, 0x80000000, 0x4, 0x8001, 0x6, 0x0, 0x10001, 0xffff, 0x8, 0xff, 0x2, 0x20, 0x8001, 0x7f, 0x2, 0x7fff, 0x8, 0x401, 0x5, 0x586d, 0x4, 0x9, 0x9, 0x8001, 0x1c1, 0x0, 0x8b, 0x0, @perf_config_ext={0x1, 0x7}, 0x80, 0x0, 0x400, 0x2, 0x7, 0x80000001, 0x2}, r2, 0x3, r3, 0xb) r4 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={0x8000}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000380)=""/191) r5 = getpgid(r4) r6 = syz_open_procfs(r5, &(0x7f00000001c0)="7e65742f697076dd15f2617574650025a6ef92bd3ccecf4a160d2c99acccf389ea7945edd262") sendfile(r1, r6, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:17:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x40000000, 0x100000001) [ 1531.423262] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1531.423262] [ 1531.493989] binder: 536:540 got transaction with invalid offset (56, min 0 max 0) or object. [ 1531.515326] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1531.516759] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.533372] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1531.533372] [ 1531.555263] binder: 536:540 transaction failed 29201/-22, size 0-16 line 3033 [ 1531.586766] binder_alloc_mmap_handler: 5 callbacks suppressed [ 1531.586783] binder_alloc: binder_alloc_mmap_handler: 536 20003000-20006000 already mapped failed -16 [ 1531.606241] binder_alloc: 536: binder_alloc_buf, no vma [ 1531.616350] binder: 539:552 transaction failed 29189/-3, size 0-16 line 2970 [ 1531.624152] binder: 539:547 ioctl 40046207 0 returned -16 [ 1531.626005] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.635581] binder: 536:540 ioctl 40046207 0 returned -16 [ 1531.664308] binder_alloc: 536: binder_alloc_buf, no vma [ 1531.678096] binder: 536:555 transaction failed 29189/-3, size 0-16 line 2970 23:17:56 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)="726569736572667310", &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf000, 0x100000001) 23:17:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3b, @multicast2, 0x4e23, 0x2, 'lblc\x00', 0x8, 0x21, 0x12}, 0x2c) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000180), 0x4) accept(r1, 0x0, &(0x7f0000000080)) 23:17:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf000000]}}, 0x1c) 23:17:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1531.869485] binder: 567:571 got transaction with invalid offset (56, min 0 max 0) or object. [ 1531.887867] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.901095] binder: 566:574 ioctl 40046207 0 returned -16 [ 1531.903346] binder: 567:571 transaction failed 29201/-22, size 0-16 line 3033 [ 1531.916910] binder: 566:574 got transaction with invalid offset (56, min 0 max 0) or object. [ 1531.933618] binder: 566:574 transaction failed 29201/-22, size 0-16 line 3033 [ 1531.948214] binder_release_work: 21 callbacks suppressed [ 1531.948221] binder: undelivered TRANSACTION_ERROR: 29201 [ 1531.966922] binder_alloc: binder_alloc_mmap_handler: 567 20003000-20006000 already mapped failed -16 [ 1531.992925] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.998462] binder: 567:571 ioctl 40046207 0 returned -16 [ 1532.007526] binder_alloc: 567: binder_alloc_buf, no vma 23:17:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xa, 0x100000001) [ 1532.014541] binder: 567:581 transaction failed 29189/-3, size 0-16 line 2970 [ 1532.029579] binder: undelivered TRANSACTION_ERROR: 29189 [ 1532.035982] binder: undelivered TRANSACTION_ERROR: 29201 23:17:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x5e01, 0x100000001) 23:17:56 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfffffdfc, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1532.152333] binder: 593:594 got transaction with invalid offset (56, min 0 max 0) or object. [ 1532.177206] binder: 593:594 transaction failed 29201/-22, size 0-16 line 3033 23:17:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x1b, 0x1, 0x80, 0x100000000, 0x6, 0x5, 0x10001}}, 0x50) sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1532.225724] binder_alloc: binder_alloc_mmap_handler: 593 20003000-20006000 already mapped failed -16 [ 1532.268028] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.273978] binder: 593:594 ioctl 40046207 0 returned -16 [ 1532.295736] binder_alloc: 593: binder_alloc_buf, no vma [ 1532.318623] binder: 593:606 transaction failed 29189/-3, size 0-16 line 2970 [ 1532.334425] binder: undelivered TRANSACTION_ERROR: 29201 [ 1532.344325] binder: undelivered TRANSACTION_ERROR: 29189 [ 1532.354288] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:17:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1532.384549] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1532.384549] [ 1532.454454] binder: 613:617 transaction failed 29201/-22, size 0-16 line 3033 [ 1532.484196] binder_alloc: binder_alloc_mmap_handler: 613 20003000-20006000 already mapped failed -16 23:17:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1f4, 0x100000001) [ 1532.500494] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.505832] binder: 614:619 ioctl 40046207 0 returned -16 [ 1532.513874] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1532.513874] [ 1532.518249] binder: undelivered TRANSACTION_ERROR: 29189 [ 1532.532847] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.538165] binder: 613:617 ioctl 40046207 0 returned -16 23:17:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1532.558239] binder: undelivered TRANSACTION_ERROR: 29189 [ 1532.578137] binder: undelivered TRANSACTION_ERROR: 29201 [ 1532.703948] binder: undelivered TRANSACTION_ERROR: 29201 [ 1532.722230] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.733669] binder: 633:635 ioctl 40046207 0 returned -16 [ 1532.755864] binder_alloc: binder_alloc_mmap_handler: 633 20003000-20006000 already mapped failed -16 [ 1532.769325] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.775636] binder: 633:635 ioctl 40046207 0 returned -16 [ 1532.787252] binder: undelivered TRANSACTION_ERROR: 29189 23:17:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:57 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6c000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x9, 0x100000001) 23:17:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0xfffffffffffffffe) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xc4, 0x40000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000340)) accept(r2, 0x0, &(0x7f0000000080)) 23:17:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xe000000]}}, 0x1c) [ 1533.132410] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1533.139490] binder: BINDER_SET_CONTEXT_MGR already set [ 1533.162069] binder_alloc: binder_alloc_mmap_handler: 651 20003000-20006000 already mapped failed -16 [ 1533.190947] binder: 652:658 ioctl 40046207 0 returned -16 [ 1533.196636] binder: BINDER_SET_CONTEXT_MGR already set [ 1533.202519] binder: 651:653 ioctl 40046207 0 returned -16 [ 1533.209681] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1533.209681] 23:17:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x8000002000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1533.327492] REISERFS warning (device loop1): reiserfs_fill_super: Cannot allocate commit workqueue 23:17:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1100000000000000, 0x100000001) 23:17:57 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4c000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1533.368507] binder_alloc: binder_alloc_mmap_handler: 674 20003000-20006000 already mapped failed -16 [ 1533.378716] binder: BINDER_SET_CONTEXT_MGR already set [ 1533.401665] binder: 674:675 ioctl 40046207 0 returned -16 23:17:57 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@l2={0x1f, 0x6, {0x8, 0x8b91, 0x1, 0x1ff, 0x9, 0xc99e}, 0x101, 0xff}, {&(0x7f0000000180)=""/15, 0xf}, &(0x7f00000001c0), 0x8}, 0xa0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) 23:17:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)=0x600000000000000) 23:17:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xd00, 0x100000001) [ 1533.583056] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1533.583056] 23:17:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x68000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1533.684143] binder_alloc: binder_alloc_mmap_handler: 695 20003000-20006000 already mapped failed -16 [ 1533.710912] binder: BINDER_SET_CONTEXT_MGR already set [ 1533.716498] binder: 695:703 ioctl 40046207 0 returned -16 23:17:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xfec0]}}, 0x1c) 23:17:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf0ffffff0f0000, 0x100000001) [ 1533.842830] binder_alloc: binder_alloc_mmap_handler: 709 20003000-20006000 already mapped failed -16 [ 1533.866209] binder: BINDER_SET_CONTEXT_MGR already set [ 1533.880095] binder: 709:711 ioctl 40046207 0 returned -16 23:17:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000180)=0xe, 0x800) sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:17:58 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1533.906585] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1533.906585] 23:17:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:17:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xc4670000, 0x100000001) [ 1534.052267] FAULT_INJECTION: forcing a failure. [ 1534.052267] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.064109] CPU: 1 PID: 735 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1534.071231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.080630] Call Trace: [ 1534.083234] dump_stack+0x1c4/0x2b4 [ 1534.086894] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1534.092131] should_fail.cold.4+0xa/0x17 [ 1534.092165] ? __mutex_lock+0x85e/0x1700 [ 1534.092189] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1534.092207] ? mark_held_locks+0x130/0x130 [ 1534.092232] ? graph_lock+0x170/0x170 [ 1534.092250] ? dput.part.26+0x26d/0x790 [ 1534.092282] ? graph_lock+0x170/0x170 [ 1534.092295] ? graph_lock+0x170/0x170 [ 1534.092324] ? graph_lock+0x170/0x170 [ 1534.092358] ? find_held_lock+0x36/0x1c0 [ 1534.092378] ? __lock_is_held+0xb5/0x140 [ 1534.092425] ? ___might_sleep+0x1ed/0x300 [ 1534.092447] ? arch_local_save_flags+0x40/0x40 [ 1534.092478] ? rcu_bh_qs+0xc0/0xc0 [ 1534.092506] __should_failslab+0x124/0x180 [ 1534.092528] should_failslab+0x9/0x14 [ 1534.092547] __kmalloc+0x2d4/0x760 [ 1534.092572] ? input_mt_init_slots+0xe5/0x4a0 [ 1534.092601] input_mt_init_slots+0xe5/0x4a0 [ 1534.110104] uinput_ioctl_handler.isra.10+0x2049/0x2540 [ 1534.110126] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1534.110163] ? ___might_sleep+0x1ed/0x300 [ 1534.110182] ? arch_local_save_flags+0x40/0x40 [ 1534.110203] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1534.194437] uinput_ioctl+0x4c/0x60 [ 1534.198120] ? uinput_compat_ioctl+0x90/0x90 [ 1534.202538] do_vfs_ioctl+0x1de/0x1720 [ 1534.206439] ? ioctl_preallocate+0x300/0x300 [ 1534.210864] ? selinux_file_mprotect+0x620/0x620 [ 1534.215631] ? __sb_end_write+0xd9/0x110 [ 1534.219701] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1534.225251] ? fput+0x130/0x1a0 [ 1534.228537] ? do_syscall_64+0x9a/0x820 [ 1534.232532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1534.238071] ? security_file_ioctl+0x94/0xc0 [ 1534.242488] ksys_ioctl+0xa9/0xd0 [ 1534.245957] __x64_sys_ioctl+0x73/0xb0 [ 1534.249865] do_syscall_64+0x1b9/0x820 [ 1534.253762] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1534.259129] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1534.264072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1534.268936] ? trace_hardirqs_on_caller+0x310/0x310 [ 1534.273972] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1534.278993] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1534.284028] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1534.288883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1534.294085] RIP: 0033:0x457569 [ 1534.297283] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1534.316183] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.323903] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1534.331171] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1534.338451] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1534.345739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1534.353022] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 [ 1534.378206] binder_alloc: binder_alloc_mmap_handler: 732 20003000-20006000 already mapped failed -16 23:17:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x15e, 0x100000001) [ 1534.399176] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1534.399176] [ 1534.399833] binder: BINDER_SET_CONTEXT_MGR already set [ 1534.418170] binder: 732:734 ioctl 40046207 0 returned -16 23:17:58 executing program 4 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:17:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = fcntl$dupfd(r0, 0x406, r0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) bind$packet(r3, &(0x7f0000000380)={0x11, 0x1, r4, 0x1, 0x3, 0x6, @local}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{r1, r2/1000+10000}, {r5, r6/1000+30000}}) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r7 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={r8, 0xc7}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r7, &(0x7f0000000300), 0x10000000000443) syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x20842) socketpair$inet6(0xa, 0x6, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) sched_setscheduler(r10, 0x1, &(0x7f0000000500)=0x7ff) accept(r7, 0x0, &(0x7f0000000280)) 23:17:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6c, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1534.640679] binder: BINDER_SET_CONTEXT_MGR already set [ 1534.650667] binder: 760:764 ioctl 40046207 0 returned -16 [ 1534.656893] FAULT_INJECTION: forcing a failure. [ 1534.656893] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.692076] CPU: 1 PID: 766 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1534.699215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.708580] Call Trace: [ 1534.711201] dump_stack+0x1c4/0x2b4 [ 1534.714854] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1534.720078] should_fail.cold.4+0xa/0x17 [ 1534.724183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1534.729306] ? __save_stack_trace+0x8d/0xf0 [ 1534.733649] ? graph_lock+0x170/0x170 [ 1534.737465] ? graph_lock+0x170/0x170 23:17:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x300000000000000]}}, 0x1c) [ 1534.741275] ? save_stack+0xa9/0xd0 [ 1534.744935] ? save_stack+0x43/0xd0 [ 1534.748585] ? find_held_lock+0x36/0x1c0 [ 1534.751802] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1534.751802] [ 1534.752663] ? __lock_is_held+0xb5/0x140 [ 1534.752695] ? ___might_sleep+0x1ed/0x300 [ 1534.752714] ? arch_local_save_flags+0x40/0x40 [ 1534.752743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1534.782700] ? check_preemption_disabled+0x48/0x200 [ 1534.787739] __should_failslab+0x124/0x180 [ 1534.791986] should_failslab+0x9/0x14 [ 1534.795794] __kmalloc+0x2d4/0x760 [ 1534.799345] ? input_register_device+0x59f/0xce0 [ 1534.804110] input_register_device+0x59f/0xce0 [ 1534.808711] ? devm_input_allocate_device+0x120/0x120 [ 1534.813940] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1534.818984] ? input_mt_init_slots+0xba/0x4a0 [ 1534.823513] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1534.828798] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1534.834191] ? ___might_sleep+0x1ed/0x300 [ 1534.838347] ? arch_local_save_flags+0x40/0x40 [ 1534.842940] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1534.847910] uinput_ioctl+0x4c/0x60 [ 1534.851544] ? uinput_compat_ioctl+0x90/0x90 [ 1534.855958] do_vfs_ioctl+0x1de/0x1720 [ 1534.859855] ? ioctl_preallocate+0x300/0x300 [ 1534.864273] ? selinux_file_mprotect+0x620/0x620 [ 1534.869040] ? __sb_end_write+0xd9/0x110 [ 1534.873108] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1534.878643] ? fput+0x130/0x1a0 [ 1534.881934] ? do_syscall_64+0x9a/0x820 [ 1534.885924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1534.891467] ? security_file_ioctl+0x94/0xc0 [ 1534.895881] ksys_ioctl+0xa9/0xd0 [ 1534.899350] __x64_sys_ioctl+0x73/0xb0 [ 1534.903250] do_syscall_64+0x1b9/0x820 [ 1534.907163] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1534.912533] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1534.917474] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1534.922337] ? trace_hardirqs_on_caller+0x310/0x310 [ 1534.927358] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1534.932397] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1534.937425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1534.942280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1534.947469] RIP: 0033:0x457569 [ 1534.950679] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1534.969584] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.977302] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1534.984581] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 23:17:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1534.991853] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1534.999123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1535.006398] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 [ 1535.022914] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:17:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xf, 0x100000001) 23:17:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000180), 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1535.081988] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1535.081988] [ 1535.122074] binder_transaction: 10 callbacks suppressed [ 1535.122088] binder: 779:782 got transaction with invalid offset (56, min 0 max 0) or object. 23:17:59 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1fffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1535.191412] binder: BINDER_SET_CONTEXT_MGR already set [ 1535.196867] binder: 779:782 ioctl 40046207 0 returned -16 [ 1535.202903] binder_alloc_new_buf_locked: 9 callbacks suppressed [ 1535.202912] binder_alloc: 779: binder_alloc_buf, no vma 23:17:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:17:59 executing program 4 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1535.316998] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1535.316998] [ 1535.356178] binder: 798:802 got transaction with invalid offset (56, min 0 max 0) or object. [ 1535.385870] binder: BINDER_SET_CONTEXT_MGR already set [ 1535.403442] binder: 798:802 ioctl 40046207 0 returned -16 [ 1535.403478] binder_alloc: 798: binder_alloc_buf, no vma [ 1535.418598] REISERFS warning (device loop1): reiserfs_fill_super: Cannot allocate commit workqueue [ 1535.432951] FAULT_INJECTION: forcing a failure. [ 1535.432951] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.456463] CPU: 0 PID: 809 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1535.463587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.472946] Call Trace: [ 1535.475555] dump_stack+0x1c4/0x2b4 [ 1535.479215] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1535.484421] ? kasan_check_read+0x11/0x20 [ 1535.488582] should_fail.cold.4+0xa/0x17 [ 1535.492649] ? rcu_bh_qs+0xc0/0xc0 [ 1535.496198] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1535.501311] ? is_bpf_text_address+0xd3/0x170 [ 1535.505809] ? graph_lock+0x170/0x170 [ 1535.509616] ? __kernel_text_address+0xd/0x40 [ 1535.514114] ? graph_lock+0x170/0x170 [ 1535.517917] ? __save_stack_trace+0x8d/0xf0 [ 1535.522251] ? find_held_lock+0x36/0x1c0 [ 1535.526315] ? __lock_is_held+0xb5/0x140 [ 1535.530402] ? ___might_sleep+0x1ed/0x300 [ 1535.535085] ? arch_local_save_flags+0x40/0x40 [ 1535.539670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1535.545214] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1535.550679] __should_failslab+0x124/0x180 [ 1535.554948] should_failslab+0x9/0x14 [ 1535.558756] kmem_cache_alloc_trace+0x2d7/0x750 [ 1535.563442] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1535.568992] device_add+0xecb/0x17b0 [ 1535.572718] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1535.577827] ? rcu_read_lock_sched_held+0x108/0x120 [ 1535.582877] ? __kmalloc+0x5de/0x760 [ 1535.586608] ? input_register_device+0x59f/0xce0 [ 1535.591460] input_register_device+0x728/0xce0 [ 1535.596057] ? devm_input_allocate_device+0x120/0x120 [ 1535.601270] ? __sanitizer_cov_trace_cmp4+0x3/0x20 [ 1535.606211] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1535.611232] ? input_mt_init_slots+0xba/0x4a0 [ 1535.615740] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1535.621039] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1535.626432] ? ___might_sleep+0x1ed/0x300 [ 1535.630586] ? arch_local_save_flags+0x40/0x40 [ 1535.635180] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1535.640115] uinput_ioctl+0x4c/0x60 [ 1535.643746] ? uinput_compat_ioctl+0x90/0x90 [ 1535.648171] do_vfs_ioctl+0x1de/0x1720 [ 1535.652070] ? ioctl_preallocate+0x300/0x300 [ 1535.656487] ? selinux_file_mprotect+0x620/0x620 [ 1535.661252] ? __sb_end_write+0xd9/0x110 [ 1535.665323] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1535.670860] ? fput+0x130/0x1a0 [ 1535.674142] ? do_syscall_64+0x9a/0x820 [ 1535.678128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1535.683669] ? security_file_ioctl+0x94/0xc0 [ 1535.688087] ksys_ioctl+0xa9/0xd0 [ 1535.691579] __x64_sys_ioctl+0x73/0xb0 [ 1535.695472] do_syscall_64+0x1b9/0x820 [ 1535.699366] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1535.704747] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1535.709683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1535.714531] ? trace_hardirqs_on_caller+0x310/0x310 [ 1535.719554] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1535.724574] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1535.729601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1535.734470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1535.739664] RIP: 0033:0x457569 [ 1535.742865] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1535.761769] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1535.769480] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1535.776747] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 23:18:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x5, 0x100000001) 23:18:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1535.784017] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1535.791287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1535.798571] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:00 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:00 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000240)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) getpeername(r1, &(0x7f0000000180)=@ipx, &(0x7f0000000040)=0x80) 23:18:00 executing program 4 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf5ffffff00000000]}}, 0x1c) [ 1535.883858] binder: 816:817 got transaction with invalid offset (56, min 0 max 0) or object. [ 1535.948435] binder: BINDER_SET_CONTEXT_MGR already set [ 1535.969634] binder: 816:817 ioctl 40046207 0 returned -16 [ 1535.969761] binder_alloc: 816: binder_alloc_buf, no vma [ 1536.013281] FAULT_INJECTION: forcing a failure. [ 1536.013281] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.026745] CPU: 0 PID: 827 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1536.033867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1536.043228] Call Trace: [ 1536.045836] dump_stack+0x1c4/0x2b4 [ 1536.049493] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1536.054704] ? __lock_acquire+0x7ec/0x4ec0 [ 1536.058965] should_fail.cold.4+0xa/0x17 [ 1536.063049] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1536.068172] ? graph_lock+0x170/0x170 [ 1536.071989] ? graph_lock+0x170/0x170 [ 1536.075803] ? mark_held_locks+0x130/0x130 [ 1536.080058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.085608] ? number+0x972/0xca0 [ 1536.089077] ? graph_lock+0x170/0x170 [ 1536.092899] ? find_held_lock+0x36/0x1c0 [ 1536.096979] ? __lock_is_held+0xb5/0x140 [ 1536.101058] ? ___might_sleep+0x1ed/0x300 [ 1536.105214] ? arch_local_save_flags+0x40/0x40 [ 1536.109807] ? lock_downgrade+0x900/0x900 [ 1536.113973] __should_failslab+0x124/0x180 [ 1536.118217] should_failslab+0x9/0x14 [ 1536.122039] __kmalloc_track_caller+0x2d0/0x750 [ 1536.126710] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1536.132167] ? kasan_check_write+0x14/0x20 [ 1536.136413] ? do_raw_spin_lock+0xc1/0x200 [ 1536.140653] ? kstrdup_const+0x66/0x80 [ 1536.144551] kstrdup+0x39/0x70 [ 1536.147748] kstrdup_const+0x66/0x80 [ 1536.151469] __kernfs_new_node+0xe8/0x8d0 [ 1536.155627] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1536.160395] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1536.165073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.170615] ? irq_work_queue+0x36/0x1d0 [ 1536.174682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.180227] ? wake_up_klogd+0x11a/0x180 [ 1536.184295] ? console_device+0xc0/0xc0 [ 1536.188273] ? vprintk_emit+0x322/0x930 [ 1536.192254] ? __down_trylock_console_sem+0x155/0x200 [ 1536.197451] ? vprintk_emit+0x268/0x930 [ 1536.201441] ? wake_up_klogd+0x180/0x180 [ 1536.205504] ? __mutex_lock+0x85e/0x1700 [ 1536.209568] ? kernel_text_address+0x79/0xf0 [ 1536.213980] ? get_device_parent.isra.27+0xcd/0x5a0 [ 1536.219024] ? __kernel_text_address+0xd/0x40 [ 1536.223524] ? unwind_get_return_address+0x61/0xa0 [ 1536.228487] kernfs_new_node+0x95/0x120 [ 1536.232481] kernfs_create_dir_ns+0x4d/0x160 [ 1536.236896] sysfs_create_dir_ns+0x19b/0x340 [ 1536.241311] ? sysfs_create_mount_point+0xa0/0xa0 [ 1536.246429] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1536.251189] ? kasan_check_write+0x14/0x20 [ 1536.255433] ? do_raw_spin_lock+0xc1/0x200 [ 1536.259673] ? class_dir_child_ns_type+0xd/0x60 [ 1536.264348] kobject_add_internal.cold.11+0x116/0x6af [ 1536.269555] ? kobj_ns_type_registered+0x60/0x60 [ 1536.274329] ? lock_downgrade+0x900/0x900 [ 1536.278482] ? refcount_add_not_zero_checked+0x330/0x330 [ 1536.283938] ? kasan_check_read+0x11/0x20 [ 1536.288090] kobject_add+0x13f/0x1b0 [ 1536.291805] ? kset_create_and_add+0x190/0x190 [ 1536.296413] ? mutex_unlock+0xd/0x10 [ 1536.300138] device_add+0x3cf/0x17b0 [ 1536.303861] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1536.308971] ? rcu_read_lock_sched_held+0x108/0x120 [ 1536.313994] ? __kmalloc+0x5de/0x760 [ 1536.317718] ? input_register_device+0x59f/0xce0 [ 1536.322486] input_register_device+0x728/0xce0 [ 1536.327078] ? devm_input_allocate_device+0x120/0x120 [ 1536.332466] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1536.337485] ? input_mt_init_slots+0xba/0x4a0 [ 1536.341987] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1536.347268] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1536.352656] ? ___might_sleep+0x1ed/0x300 [ 1536.356810] ? arch_local_save_flags+0x40/0x40 [ 1536.361415] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1536.366352] uinput_ioctl+0x4c/0x60 [ 1536.369989] ? uinput_compat_ioctl+0x90/0x90 [ 1536.374414] do_vfs_ioctl+0x1de/0x1720 [ 1536.378318] ? ioctl_preallocate+0x300/0x300 [ 1536.382738] ? selinux_file_mprotect+0x620/0x620 [ 1536.387501] ? __sb_end_write+0xd9/0x110 [ 1536.391569] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1536.397104] ? fput+0x130/0x1a0 [ 1536.400402] ? do_syscall_64+0x9a/0x820 [ 1536.404403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.409943] ? security_file_ioctl+0x94/0xc0 [ 1536.414356] ksys_ioctl+0xa9/0xd0 [ 1536.417826] __x64_sys_ioctl+0x73/0xb0 [ 1536.421719] do_syscall_64+0x1b9/0x820 [ 1536.425613] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1536.430984] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1536.435918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1536.440771] ? trace_hardirqs_on_caller+0x310/0x310 [ 1536.445791] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1536.450813] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1536.455839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1536.460695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1536.465887] RIP: 0033:0x457569 [ 1536.469088] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1536.488003] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1536.495714] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1536.502984] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 23:18:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xe8030000, 0x100000001) 23:18:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1536.510253] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1536.517520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1536.524791] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 [ 1536.571795] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1536.597909] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1536.597909] [ 1536.626059] binder: 839:844 got transaction with invalid offset (56, min 0 max 0) or object. [ 1536.643738] kobject_add_internal failed for input43 (error: -12 parent: input) [ 1536.645670] binder_transaction: 25 callbacks suppressed [ 1536.645688] binder: 839:844 transaction failed 29201/-22, size 0-16 line 3033 [ 1536.665409] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1536.665426] binder_alloc: binder_alloc_mmap_handler: 839 20003000-20006000 already mapped failed -16 23:18:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x6000, 0x100000001) [ 1536.698627] binder: BINDER_SET_CONTEXT_MGR already set [ 1536.704292] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1536.704292] [ 1536.732430] binder: 839:844 ioctl 40046207 0 returned -16 [ 1536.739619] binder_alloc: 839: binder_alloc_buf, no vma 23:18:01 executing program 4 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1536.769861] binder: 839:847 transaction failed 29189/-3, size 0-16 line 2970 23:18:01 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x8096980000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r3, &(0x7f00000002c0), 0x10000000000443) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x900, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000280)={0x2, 0x7, 0xc1, &(0x7f0000000180)="480b8a97ae72a6eb5196673c832fa547702274c501c79ff5f3322a1ffd888e2fbbe2adb75427470c0a114c365ec2c8d63e646a3784c8317e492e43cd54b34ae8f711d52a6087190b34de04c68831f847b7ad359122dc8247254ad09269cebaf35f3c7655d74363045eece40d8ddac6772cd5067e9a10f010e2d9d13c489fadf43de98a6cb233255bfcd1405d078b0443a8ed6b0620b82365d53b4b23cea90c21c1f0fc775fb1c2df88dc3a1b068b0583226422b488eae80242be187d36241748b7"}) accept(r1, 0x0, &(0x7f0000000080)) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000380)={0x8, 0xfffffffffffffffd, 0x65, &(0x7f0000000300)="64fac55584dec68e0918726c43afa4a5c1a1d6eeed9238e4934544c7398bd335d08b440c304b2d4d0f1caa2c3dbc17f7be22d10d1fe7cda92af070bfdf9430e4467f2b4d3add99dc655853f2b51f0d321f41e1aa88ba4e16d32c4d0b06fed5d3ff64f463ba"}) [ 1536.883862] FAULT_INJECTION: forcing a failure. [ 1536.883862] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.930453] CPU: 1 PID: 858 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1536.937601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1536.946964] Call Trace: [ 1536.949581] dump_stack+0x1c4/0x2b4 [ 1536.953242] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1536.958468] should_fail.cold.4+0xa/0x17 [ 1536.962549] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1536.967661] ? kasan_kmalloc+0xc7/0xe0 [ 1536.971563] ? __kmalloc_track_caller+0x14a/0x750 [ 1536.976424] ? kstrdup+0x39/0x70 [ 1536.979807] ? kstrdup_const+0x66/0x80 [ 1536.983707] ? __kernfs_new_node+0xe8/0x8d0 [ 1536.988040] ? kernfs_new_node+0x95/0x120 [ 1536.992199] ? kernfs_create_dir_ns+0x4d/0x160 [ 1536.996798] ? sysfs_create_dir_ns+0x19b/0x340 [ 1537.001397] ? graph_lock+0x170/0x170 [ 1537.001415] ? input_register_device+0x728/0xce0 [ 1537.001431] ? uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1537.001443] ? uinput_ioctl+0x4c/0x60 [ 1537.001458] ? do_vfs_ioctl+0x1de/0x1720 [ 1537.001477] ? ksys_ioctl+0xa9/0xd0 [ 1537.026954] ? graph_lock+0x170/0x170 [ 1537.030777] ? find_held_lock+0x36/0x1c0 [ 1537.034860] ? find_held_lock+0x36/0x1c0 [ 1537.038950] ? __lock_is_held+0xb5/0x140 [ 1537.043040] ? ___might_sleep+0x1ed/0x300 [ 1537.043061] ? arch_local_save_flags+0x40/0x40 [ 1537.043092] __should_failslab+0x124/0x180 [ 1537.043113] should_failslab+0x9/0x14 [ 1537.051846] kmem_cache_alloc+0x2be/0x730 [ 1537.051868] ? kstrdup+0x59/0x70 [ 1537.051892] __kernfs_new_node+0x127/0x8d0 [ 1537.051924] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1537.076441] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1537.081142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1537.086698] ? irq_work_queue+0x36/0x1d0 [ 1537.090783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1537.096338] ? wake_up_klogd+0x11a/0x180 [ 1537.100424] ? console_device+0xc0/0xc0 [ 1537.104426] ? vprintk_emit+0x322/0x930 [ 1537.108434] ? __down_trylock_console_sem+0x155/0x200 [ 1537.113650] ? vprintk_emit+0x268/0x930 [ 1537.117646] ? wake_up_klogd+0x180/0x180 [ 1537.121730] ? __mutex_lock+0x85e/0x1700 [ 1537.125809] ? kernel_text_address+0x79/0xf0 [ 1537.130249] ? get_device_parent.isra.27+0xcd/0x5a0 [ 1537.135291] ? __kernel_text_address+0xd/0x40 [ 1537.139802] ? unwind_get_return_address+0x61/0xa0 [ 1537.144751] kernfs_new_node+0x95/0x120 [ 1537.148745] kernfs_create_dir_ns+0x4d/0x160 [ 1537.153181] sysfs_create_dir_ns+0x19b/0x340 [ 1537.157612] ? sysfs_create_mount_point+0xa0/0xa0 [ 1537.162478] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1537.167259] ? kasan_check_write+0x14/0x20 [ 1537.171511] ? do_raw_spin_lock+0xc1/0x200 [ 1537.175765] ? class_dir_child_ns_type+0xd/0x60 [ 1537.180463] kobject_add_internal.cold.11+0x116/0x6af [ 1537.185679] ? kobj_ns_type_registered+0x60/0x60 [ 1537.190454] ? lock_downgrade+0x900/0x900 [ 1537.191691] binder: 865:876 got transaction with invalid offset (56, min 0 max 0) or object. [ 1537.194621] ? refcount_add_not_zero_checked+0x330/0x330 [ 1537.194642] ? kasan_check_read+0x11/0x20 [ 1537.194663] kobject_add+0x13f/0x1b0 [ 1537.194681] ? kset_create_and_add+0x190/0x190 [ 1537.194705] ? mutex_unlock+0xd/0x10 [ 1537.194728] device_add+0x3cf/0x17b0 [ 1537.228598] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1537.230357] binder: 865:876 transaction failed 29201/-22, size 0-16 line 3033 [ 1537.233715] ? rcu_read_lock_sched_held+0x108/0x120 [ 1537.233735] ? __kmalloc+0x5de/0x760 [ 1537.233759] ? input_register_device+0x59f/0xce0 [ 1537.233783] input_register_device+0x728/0xce0 [ 1537.233810] ? devm_input_allocate_device+0x120/0x120 [ 1537.264322] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1537.269359] ? input_mt_init_slots+0xba/0x4a0 [ 1537.273008] binder_alloc: binder_alloc_mmap_handler: 865 20003000-20006000 already mapped failed -16 [ 1537.273884] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1537.273915] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1537.273953] ? ___might_sleep+0x1ed/0x300 [ 1537.273972] ? arch_local_save_flags+0x40/0x40 [ 1537.273995] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1537.294740] binder: BINDER_SET_CONTEXT_MGR already set [ 1537.298078] uinput_ioctl+0x4c/0x60 [ 1537.298095] ? uinput_compat_ioctl+0x90/0x90 [ 1537.298113] do_vfs_ioctl+0x1de/0x1720 [ 1537.298137] ? ioctl_preallocate+0x300/0x300 23:18:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = memfd_create(&(0x7f00000003c0)='hash\x00', 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x9, 0x0, "70b688a3e1232f72ef6539354f3d134a8e281975572a04badffe540ffb4f6dbb789066f0bc6aa41463d9e07a6c09a5360ae07fad1ebe6bfc7868628b732c9002", "450f697ed5644f0e03a6224312dfcf655527d3d589bc8d7b4a650926483ad80a", [0x2, 0x7]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) fchown(r0, r2, r3) r4 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000004c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r6, &(0x7f00000002c0), 0x10000000000443) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000000500)={0x2, 0x3ee, 0x8, 0x400000000000002, 0x40, 0xffffffffffffffff}) accept(r4, 0x0, &(0x7f0000000080)) 23:18:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1300000000000000, 0x100000001) 23:18:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x11000000]}}, 0x1c) [ 1537.298160] ? selinux_file_mprotect+0x620/0x620 [ 1537.298189] ? __sb_end_write+0xd9/0x110 [ 1537.307563] binder_alloc: 865: binder_alloc_buf, no vma [ 1537.312971] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1537.312986] ? fput+0x130/0x1a0 [ 1537.313004] ? do_syscall_64+0x9a/0x820 [ 1537.313027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1537.313045] ? security_file_ioctl+0x94/0xc0 [ 1537.313066] ksys_ioctl+0xa9/0xd0 [ 1537.313088] __x64_sys_ioctl+0x73/0xb0 [ 1537.313106] do_syscall_64+0x1b9/0x820 [ 1537.313123] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1537.313150] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1537.319229] binder: 865:876 ioctl 40046207 0 returned -16 [ 1537.321183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1537.321204] ? trace_hardirqs_on_caller+0x310/0x310 [ 1537.321223] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1537.321243] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1537.321267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1537.321295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1537.340474] binder_release_work: 23 callbacks suppressed 23:18:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x2000000, 0x100000001) [ 1537.340483] binder: undelivered TRANSACTION_ERROR: 29201 [ 1537.343748] RIP: 0033:0x457569 [ 1537.343765] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1537.343775] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1537.343805] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1537.343815] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1537.343825] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1537.343848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1537.343857] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 [ 1537.453372] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1537.496241] binder: 865:879 transaction failed 29189/-3, size 0-16 line 2970 [ 1537.540794] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1537.540794] 23:18:01 executing program 4 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x400300, 0x100000001) [ 1537.610855] kobject_add_internal failed for input44 (error: -12 parent: input) [ 1537.640740] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1537.640740] 23:18:02 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2200, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1537.685489] binder: undelivered TRANSACTION_ERROR: 29189 [ 1537.776379] binder: 901:906 got transaction with invalid offset (56, min 0 max 0) or object. [ 1537.789828] binder: 901:906 transaction failed 29201/-22, size 0-16 line 3033 [ 1537.810277] binder_alloc: binder_alloc_mmap_handler: 901 20003000-20006000 already mapped failed -16 [ 1537.823926] binder: BINDER_SET_CONTEXT_MGR already set [ 1537.829590] binder: 901:906 ioctl 40046207 0 returned -16 [ 1537.835567] binder_alloc: 901: binder_alloc_buf, no vma [ 1537.842813] FAULT_INJECTION: forcing a failure. [ 1537.842813] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.855861] binder: 901:912 transaction failed 29189/-3, size 0-16 line 2970 [ 1537.863956] binder: undelivered TRANSACTION_ERROR: 29189 [ 1537.869854] binder: undelivered TRANSACTION_ERROR: 29201 [ 1537.880089] CPU: 1 PID: 908 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1537.887212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1537.896573] Call Trace: [ 1537.899178] dump_stack+0x1c4/0x2b4 [ 1537.902827] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1537.908049] should_fail.cold.4+0xa/0x17 [ 1537.912131] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1537.913355] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1537.913355] [ 1537.917253] ? mark_held_locks+0xc7/0x130 [ 1537.917284] ? _raw_spin_unlock_irq+0x27/0x80 [ 1537.917301] ? graph_lock+0x170/0x170 [ 1537.917317] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1537.917336] ? trace_hardirqs_on+0xbd/0x310 [ 1537.917352] ? graph_lock+0x170/0x170 [ 1537.917368] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1537.917402] ? compat_start_thread+0x80/0x80 [ 1537.964043] ? find_held_lock+0x36/0x1c0 [ 1537.968115] ? __lock_is_held+0xb5/0x140 [ 1537.972209] ? ___might_sleep+0x1ed/0x300 [ 1537.976395] ? __switch_to_asm+0x34/0x70 [ 1537.980479] ? arch_local_save_flags+0x40/0x40 [ 1537.985063] ? __switch_to_asm+0x34/0x70 [ 1537.989127] ? __switch_to_asm+0x40/0x70 [ 1537.993200] __should_failslab+0x124/0x180 [ 1537.997445] should_failslab+0x9/0x14 [ 1538.001252] __kmalloc_track_caller+0x2d0/0x750 [ 1538.005929] ? kasan_check_write+0x14/0x20 [ 1538.010209] ? do_raw_spin_lock+0xc1/0x200 [ 1538.014452] ? kstrdup_const+0x66/0x80 [ 1538.018347] kstrdup+0x39/0x70 [ 1538.021548] kstrdup_const+0x66/0x80 [ 1538.025267] __kernfs_new_node+0xe8/0x8d0 [ 1538.029425] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1538.034189] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1538.038865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.044414] ? irq_work_queue+0x36/0x1d0 [ 1538.048480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.054021] ? wake_up_klogd+0x11a/0x180 [ 1538.058086] ? preempt_schedule_common+0x1f/0xd0 [ 1538.062846] ? console_device+0xc0/0xc0 [ 1538.066824] ? ___preempt_schedule+0x16/0x18 [ 1538.071261] ? vprintk_emit+0x268/0x930 [ 1538.075248] ? wake_up_klogd+0x180/0x180 [ 1538.079310] ? __mutex_lock+0x85e/0x1700 [ 1538.083376] ? kernel_text_address+0x79/0xf0 [ 1538.087796] ? get_device_parent.isra.27+0xcd/0x5a0 [ 1538.092818] ? __kernel_text_address+0xd/0x40 [ 1538.097319] ? sched_set_itmt_core_prio+0x141/0x1d0 [ 1538.102351] kernfs_new_node+0x95/0x120 [ 1538.106352] kernfs_create_dir_ns+0x4d/0x160 [ 1538.110817] sysfs_create_dir_ns+0x19b/0x340 [ 1538.115231] ? sysfs_create_mount_point+0xa0/0xa0 [ 1538.120096] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1538.124858] ? kasan_check_write+0x14/0x20 [ 1538.129100] ? do_raw_spin_lock+0xc1/0x200 [ 1538.133341] ? class_dir_child_ns_type+0xd/0x60 [ 1538.138020] kobject_add_internal.cold.11+0x116/0x6af [ 1538.143225] ? kobj_ns_type_registered+0x60/0x60 [ 1538.148003] ? lock_downgrade+0x900/0x900 [ 1538.152175] ? refcount_add_not_zero_checked+0x330/0x330 [ 1538.157630] ? kasan_check_read+0x11/0x20 [ 1538.161785] kobject_add+0x13f/0x1b0 [ 1538.165503] ? kset_create_and_add+0x190/0x190 [ 1538.170100] ? mutex_unlock+0xd/0x10 [ 1538.173824] device_add+0x3cf/0x17b0 [ 1538.177548] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1538.182660] ? rcu_read_lock_sched_held+0x108/0x120 [ 1538.187680] ? __kmalloc+0x5de/0x760 [ 1538.191417] ? input_register_device+0x59f/0xce0 [ 1538.196185] input_register_device+0x728/0xce0 [ 1538.200791] ? devm_input_allocate_device+0x120/0x120 [ 1538.206002] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1538.211042] ? input_mt_init_slots+0xba/0x4a0 [ 1538.215552] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1538.220839] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1538.226225] ? ___might_sleep+0x1ed/0x300 [ 1538.230377] ? arch_local_save_flags+0x40/0x40 [ 1538.234982] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1538.239925] uinput_ioctl+0x4c/0x60 [ 1538.243556] ? uinput_compat_ioctl+0x90/0x90 [ 1538.247976] do_vfs_ioctl+0x1de/0x1720 [ 1538.251875] ? ioctl_preallocate+0x300/0x300 [ 1538.256296] ? selinux_file_mprotect+0x620/0x620 [ 1538.261061] ? __sb_end_write+0xd9/0x110 [ 1538.265128] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1538.270685] ? fput+0x130/0x1a0 [ 1538.273970] ? do_syscall_64+0x9a/0x820 [ 1538.277956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.283503] ? security_file_ioctl+0x94/0xc0 [ 1538.287921] ksys_ioctl+0xa9/0xd0 [ 1538.291392] __x64_sys_ioctl+0x73/0xb0 [ 1538.295287] do_syscall_64+0x1b9/0x820 [ 1538.299179] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1538.304553] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1538.309486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1538.314337] ? trace_hardirqs_on_caller+0x310/0x310 [ 1538.319359] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1538.324428] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1538.329455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1538.334308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1538.339502] RIP: 0033:0x457569 [ 1538.342699] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1538.361600] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.369315] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 23:18:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x6]}}, 0x1c) 23:18:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xdf, 0x100000001) [ 1538.376581] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1538.383854] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1538.391121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1538.398398] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0xffffffffffffff70, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x2000002}}, 0x20) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r3}}, 0x18) r4 = accept4(r0, 0x0, &(0x7f00000000c0), 0x2003fffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) sendfile(r4, r5, &(0x7f00000002c0), 0x10000000000443) accept(r4, 0x0, &(0x7f0000000080)) [ 1538.437387] kobject_add_internal failed for input45 (error: -12 parent: input) 23:18:02 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7b, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:02 executing program 4 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1538.537371] binder: 923:927 got transaction with invalid offset (56, min 0 max 0) or object. [ 1538.553663] binder: 923:927 transaction failed 29201/-22, size 0-16 line 3033 [ 1538.616602] binder_alloc: binder_alloc_mmap_handler: 923 20003000-20006000 already mapped failed -16 [ 1538.633857] FAULT_INJECTION: forcing a failure. [ 1538.633857] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.649720] binder: BINDER_SET_CONTEXT_MGR already set 23:18:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0x31e, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1538.663958] binder: 923:927 ioctl 40046207 0 returned -16 [ 1538.671303] binder_alloc: 923: binder_alloc_buf, no vma [ 1538.680730] CPU: 0 PID: 935 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1538.687849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.687857] Call Trace: [ 1538.687884] dump_stack+0x1c4/0x2b4 [ 1538.687921] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1538.708681] should_fail.cold.4+0xa/0x17 [ 1538.712764] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1538.717882] ? kasan_kmalloc+0xc7/0xe0 [ 1538.721790] ? __kmalloc_track_caller+0x14a/0x750 [ 1538.726645] ? kstrdup+0x39/0x70 [ 1538.730028] ? kstrdup_const+0x66/0x80 [ 1538.733930] ? __kernfs_new_node+0xe8/0x8d0 [ 1538.738269] ? kernfs_new_node+0x95/0x120 [ 1538.742434] ? kernfs_create_dir_ns+0x4d/0x160 [ 1538.747030] ? sysfs_create_dir_ns+0x19b/0x340 [ 1538.751626] ? graph_lock+0x170/0x170 [ 1538.755444] ? input_register_device+0x728/0xce0 [ 1538.760212] ? uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1538.765678] ? uinput_ioctl+0x4c/0x60 [ 1538.769495] ? do_vfs_ioctl+0x1de/0x1720 [ 1538.773585] ? ksys_ioctl+0xa9/0xd0 [ 1538.777228] ? graph_lock+0x170/0x170 [ 1538.779527] binder: 923:934 transaction failed 29189/-3, size 0-16 line 2970 [ 1538.781039] ? find_held_lock+0x36/0x1c0 [ 1538.781064] ? find_held_lock+0x36/0x1c0 [ 1538.781084] ? __lock_is_held+0xb5/0x140 [ 1538.781112] ? ___might_sleep+0x1ed/0x300 [ 1538.788925] binder: undelivered TRANSACTION_ERROR: 29189 [ 1538.792360] ? arch_local_save_flags+0x40/0x40 [ 1538.792390] __should_failslab+0x124/0x180 [ 1538.792418] should_failslab+0x9/0x14 [ 1538.792445] kmem_cache_alloc+0x2be/0x730 [ 1538.826856] ? kstrdup+0x59/0x70 [ 1538.830232] __kernfs_new_node+0x127/0x8d0 [ 1538.834473] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1538.839233] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1538.843907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.849452] ? irq_work_queue+0x36/0x1d0 [ 1538.853520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.859060] ? wake_up_klogd+0x11a/0x180 [ 1538.863127] ? console_device+0xc0/0xc0 [ 1538.867105] ? vprintk_emit+0x322/0x930 [ 1538.871090] ? __down_trylock_console_sem+0x155/0x200 [ 1538.876294] ? vprintk_emit+0x268/0x930 [ 1538.880279] ? wake_up_klogd+0x180/0x180 [ 1538.884344] ? __mutex_lock+0x85e/0x1700 [ 1538.888411] ? kernel_text_address+0x79/0xf0 [ 1538.892832] ? get_device_parent.isra.27+0xcd/0x5a0 [ 1538.897853] ? __kernel_text_address+0xd/0x40 [ 1538.902355] ? unwind_get_return_address+0x61/0xa0 [ 1538.907304] kernfs_new_node+0x95/0x120 [ 1538.911311] kernfs_create_dir_ns+0x4d/0x160 [ 1538.915728] sysfs_create_dir_ns+0x19b/0x340 [ 1538.920144] ? sysfs_create_mount_point+0xa0/0xa0 [ 1538.924996] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1538.929755] ? kasan_check_write+0x14/0x20 [ 1538.934018] ? do_raw_spin_lock+0xc1/0x200 [ 1538.938256] ? class_dir_child_ns_type+0xd/0x60 [ 1538.942937] kobject_add_internal.cold.11+0x116/0x6af [ 1538.948132] ? kobj_ns_type_registered+0x60/0x60 [ 1538.952893] ? lock_downgrade+0x900/0x900 [ 1538.957048] ? refcount_add_not_zero_checked+0x330/0x330 [ 1538.962507] ? kasan_check_read+0x11/0x20 [ 1538.966681] kobject_add+0x13f/0x1b0 [ 1538.970404] ? kset_create_and_add+0x190/0x190 [ 1538.974997] ? mutex_unlock+0xd/0x10 [ 1538.978721] device_add+0x3cf/0x17b0 [ 1538.982450] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1538.987558] ? rcu_read_lock_sched_held+0x108/0x120 [ 1538.992582] ? __kmalloc+0x5de/0x760 [ 1538.996309] ? input_register_device+0x59f/0xce0 [ 1539.001075] input_register_device+0x728/0xce0 [ 1539.005669] ? devm_input_allocate_device+0x120/0x120 [ 1539.010863] ? input_mt_init_slots+0x2f6/0x4a0 [ 1539.015451] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1539.020475] ? input_mt_init_slots+0xba/0x4a0 [ 1539.024978] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1539.030266] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1539.035654] ? ___might_sleep+0x1ed/0x300 [ 1539.039828] ? arch_local_save_flags+0x40/0x40 [ 1539.044427] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1539.049367] uinput_ioctl+0x4c/0x60 [ 1539.053000] ? uinput_compat_ioctl+0x90/0x90 [ 1539.057417] do_vfs_ioctl+0x1de/0x1720 [ 1539.061317] ? ioctl_preallocate+0x300/0x300 [ 1539.065749] ? selinux_file_mprotect+0x620/0x620 [ 1539.070519] ? __sb_end_write+0xd9/0x110 [ 1539.074591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1539.080138] ? fput+0x130/0x1a0 [ 1539.083427] ? do_syscall_64+0x9a/0x820 [ 1539.087412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1539.092957] ? security_file_ioctl+0x94/0xc0 [ 1539.097371] ksys_ioctl+0xa9/0xd0 [ 1539.100839] __x64_sys_ioctl+0x73/0xb0 [ 1539.104738] do_syscall_64+0x1b9/0x820 [ 1539.108630] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1539.113999] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1539.118932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1539.123781] ? trace_hardirqs_on_caller+0x310/0x310 [ 1539.128802] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1539.133829] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1539.138853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1539.143705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1539.148892] RIP: 0033:0x457569 23:18:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x500000000000000, 0x100000001) [ 1539.152089] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1539.170989] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.178704] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1539.185974] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1539.193242] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1539.200509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1539.207788] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1539.258190] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1539.258190] 23:18:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x200000000000000, 0x100000001) [ 1539.318608] kobject_add_internal failed for input46 (error: -12 parent: input) [ 1539.371631] binder: 954:955 got transaction with invalid offset (56, min 0 max 0) or object. [ 1539.380473] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1539.380473] [ 1539.393675] binder: 954:955 transaction failed 29201/-22, size 0-16 line 3033 23:18:03 executing program 4 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1539.415306] binder_alloc: binder_alloc_mmap_handler: 954 20003000-20006000 already mapped failed -16 23:18:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xa00, 0x100000001) [ 1539.445319] binder: BINDER_SET_CONTEXT_MGR already set [ 1539.467030] binder: 954:955 ioctl 40046207 0 returned -16 [ 1539.467283] binder: undelivered TRANSACTION_ERROR: 29201 [ 1539.473738] binder_alloc: 954: binder_alloc_buf, no vma [ 1539.495592] binder: undelivered TRANSACTION_ERROR: 29201 [ 1539.524843] binder: 954:960 transaction failed 29189/-3, size 0-16 line 2970 [ 1539.552122] FAULT_INJECTION: forcing a failure. [ 1539.552122] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.552587] binder: undelivered TRANSACTION_ERROR: 29189 [ 1539.564007] CPU: 1 PID: 974 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1539.576537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.585895] Call Trace: [ 1539.588555] dump_stack+0x1c4/0x2b4 [ 1539.592210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1539.597414] ? mark_held_locks+0x130/0x130 [ 1539.601679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1539.607236] should_fail.cold.4+0xa/0x17 [ 1539.611348] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1539.616482] ? print_usage_bug+0xc0/0xc0 [ 1539.620560] ? graph_lock+0x170/0x170 [ 1539.624376] ? __isolate_free_page+0x610/0x610 [ 1539.628990] ? graph_lock+0x170/0x170 [ 1539.632846] ? print_usage_bug+0xc0/0xc0 [ 1539.636972] ? find_held_lock+0x36/0x1c0 [ 1539.641075] __should_failslab+0x124/0x180 [ 1539.645342] should_failslab+0x9/0x14 [ 1539.649165] kmem_cache_alloc+0x47/0x730 [ 1539.653240] ? plist_requeue+0x620/0x620 [ 1539.657322] ? rcu_bh_qs+0xc0/0xc0 [ 1539.660888] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 1539.666634] idr_get_free+0x725/0xec0 [ 1539.670470] ? ida_pre_get+0x130/0x130 23:18:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x4000000000000000]}}, 0x1c) 23:18:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6c00000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xfffffffe, 0x100000001) 23:18:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1539.674380] ? save_stack+0xa9/0xd0 [ 1539.678039] ? save_stack+0x43/0xd0 [ 1539.681685] ? kasan_kmalloc+0xc7/0xe0 [ 1539.685590] ? kasan_slab_alloc+0x12/0x20 [ 1539.689770] ? kmem_cache_alloc+0x12e/0x730 [ 1539.694102] ? __kernfs_new_node+0x127/0x8d0 [ 1539.698522] ? kernfs_create_dir_ns+0x4d/0x160 [ 1539.703120] ? sysfs_create_dir_ns+0x19b/0x340 [ 1539.707715] ? kobject_add_internal.cold.11+0x116/0x6af [ 1539.713079] ? kobject_add+0x13f/0x1b0 [ 1539.716954] ? device_add+0x3cf/0x17b0 [ 1539.720844] ? input_register_device+0x728/0xce0 [ 1539.725589] ? uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1539.731043] ? uinput_ioctl+0x4c/0x60 [ 1539.734832] ? do_vfs_ioctl+0x1de/0x1720 [ 1539.738893] ? ksys_ioctl+0xa9/0xd0 [ 1539.742529] ? __x64_sys_ioctl+0x73/0xb0 [ 1539.746580] ? do_syscall_64+0x1b9/0x820 [ 1539.750650] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1539.756026] idr_alloc_u32+0x201/0x3f0 [ 1539.759908] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 1539.764747] ? lock_acquire+0x1ed/0x520 [ 1539.768739] ? __kernfs_new_node+0x14e/0x8d0 [ 1539.773141] ? __lock_is_held+0xb5/0x140 [ 1539.777200] idr_alloc_cyclic+0x166/0x350 [ 1539.781341] ? idr_alloc+0x1b0/0x1b0 [ 1539.785042] ? kasan_check_write+0x14/0x20 [ 1539.789265] ? do_raw_spin_lock+0xc1/0x200 [ 1539.793492] __kernfs_new_node+0x1ee/0x8d0 [ 1539.797717] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1539.802467] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1539.807147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1539.812676] ? irq_work_queue+0x36/0x1d0 [ 1539.816739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1539.822263] ? wake_up_klogd+0x11a/0x180 [ 1539.826324] ? console_device+0xc0/0xc0 [ 1539.830286] ? vprintk_emit+0x322/0x930 [ 1539.834250] ? __down_trylock_console_sem+0x155/0x200 [ 1539.839433] ? vprintk_emit+0x268/0x930 [ 1539.843403] ? wake_up_klogd+0x180/0x180 [ 1539.847466] ? __mutex_lock+0x85e/0x1700 [ 1539.851521] ? kernel_text_address+0x79/0xf0 [ 1539.855921] ? get_device_parent.isra.27+0xcd/0x5a0 [ 1539.860923] ? __kernel_text_address+0xd/0x40 [ 1539.865429] ? unwind_get_return_address+0x61/0xa0 [ 1539.870355] kernfs_new_node+0x95/0x120 [ 1539.874332] kernfs_create_dir_ns+0x4d/0x160 [ 1539.878733] sysfs_create_dir_ns+0x19b/0x340 [ 1539.883151] ? sysfs_create_mount_point+0xa0/0xa0 [ 1539.888003] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1539.892788] ? kasan_check_write+0x14/0x20 [ 1539.897010] ? do_raw_spin_lock+0xc1/0x200 [ 1539.901246] ? class_dir_child_ns_type+0xd/0x60 [ 1539.905911] kobject_add_internal.cold.11+0x116/0x6af [ 1539.911094] ? kobj_ns_type_registered+0x60/0x60 [ 1539.915838] ? lock_downgrade+0x900/0x900 [ 1539.920011] ? refcount_add_not_zero_checked+0x330/0x330 [ 1539.925467] ? kasan_check_read+0x11/0x20 [ 1539.929621] kobject_add+0x13f/0x1b0 [ 1539.933326] ? kset_create_and_add+0x190/0x190 [ 1539.937932] ? mutex_unlock+0xd/0x10 [ 1539.941655] device_add+0x3cf/0x17b0 [ 1539.945362] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1539.950458] ? rcu_read_lock_sched_held+0x108/0x120 [ 1539.955463] ? __kmalloc+0x5de/0x760 [ 1539.959171] ? input_register_device+0x59f/0xce0 [ 1539.963931] input_register_device+0x728/0xce0 [ 1539.968504] ? devm_input_allocate_device+0x120/0x120 [ 1539.973703] ? input_mt_init_slots+0x2bd/0x4a0 [ 1539.978275] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1539.983278] ? input_mt_init_slots+0xba/0x4a0 [ 1539.987763] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1539.993051] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1539.998426] ? ___might_sleep+0x1ed/0x300 [ 1540.002585] ? arch_local_save_flags+0x40/0x40 [ 1540.007157] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1540.012077] uinput_ioctl+0x4c/0x60 [ 1540.015701] ? uinput_compat_ioctl+0x90/0x90 [ 1540.020116] do_vfs_ioctl+0x1de/0x1720 [ 1540.023996] ? ioctl_preallocate+0x300/0x300 [ 1540.028398] ? selinux_file_mprotect+0x620/0x620 [ 1540.033148] ? __sb_end_write+0xd9/0x110 [ 1540.037214] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1540.042755] ? fput+0x130/0x1a0 [ 1540.046024] ? do_syscall_64+0x9a/0x820 [ 1540.049991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.055519] ? security_file_ioctl+0x94/0xc0 [ 1540.059930] ksys_ioctl+0xa9/0xd0 [ 1540.063376] __x64_sys_ioctl+0x73/0xb0 [ 1540.067255] do_syscall_64+0x1b9/0x820 [ 1540.071144] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1540.076543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1540.081469] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1540.086325] ? trace_hardirqs_on_caller+0x310/0x310 [ 1540.091333] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1540.096341] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1540.101353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1540.106202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1540.111396] RIP: 0033:0x457569 [ 1540.114580] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1540.133488] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.141200] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1540.148466] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1540.155723] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1540.162981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1540.170235] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0x1) accept(r1, 0x0, &(0x7f0000000080)) [ 1540.196893] input: syz0 as /devices/virtual/input/input47 23:18:04 executing program 4 (fault-call:4 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1540.340600] binder: 982:999 got transaction with invalid offset (56, min 0 max 0) or object. [ 1540.374450] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xfffffffffffff000, 0x100000001) [ 1540.392932] binder_alloc: binder_alloc_mmap_handler: 982 20003000-20006000 already mapped failed -16 [ 1540.403518] binder: BINDER_SET_CONTEXT_MGR already set [ 1540.409425] binder: 982:999 ioctl 40046207 0 returned -16 [ 1540.415544] binder_alloc: 982: binder_alloc_buf, no vma [ 1540.423833] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1540.423833] [ 1540.427578] binder: undelivered TRANSACTION_ERROR: 29189 [ 1540.443702] FAULT_INJECTION: forcing a failure. [ 1540.443702] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.455940] binder: undelivered TRANSACTION_ERROR: 29201 23:18:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1540.485377] CPU: 1 PID: 1009 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1540.492609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.501971] Call Trace: [ 1540.502001] dump_stack+0x1c4/0x2b4 [ 1540.502029] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1540.502065] should_fail.cold.4+0xa/0x17 [ 1540.502089] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1540.502116] ? print_usage_bug+0xc0/0xc0 [ 1540.522664] ? graph_lock+0x170/0x170 [ 1540.522685] ? graph_lock+0x170/0x170 [ 1540.522702] ? kernfs_activate+0x21a/0x2c0 [ 1540.522720] ? lock_downgrade+0x900/0x900 [ 1540.522741] ? find_held_lock+0x36/0x1c0 [ 1540.522761] ? __lock_is_held+0xb5/0x140 [ 1540.522791] ? ___might_sleep+0x1ed/0x300 [ 1540.522805] ? __kernfs_new_node+0x697/0x8d0 [ 1540.522826] ? arch_local_save_flags+0x40/0x40 [ 1540.564131] ? wait_for_completion+0x8a0/0x8a0 [ 1540.568754] __should_failslab+0x124/0x180 [ 1540.573021] should_failslab+0x9/0x14 [ 1540.576850] kmem_cache_alloc+0x2be/0x730 [ 1540.581144] ? wait_for_completion+0x8a0/0x8a0 23:18:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x5e01000000000000, 0x100000001) [ 1540.585770] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1540.590799] __kernfs_new_node+0x127/0x8d0 [ 1540.590821] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1540.590840] ? graph_lock+0x170/0x170 [ 1540.590856] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1540.590879] ? kernfs_add_one+0x12b/0x4d0 [ 1540.590908] ? find_held_lock+0x36/0x1c0 [ 1540.617455] ? sysfs_do_create_link_sd.isra.2+0x82/0x130 [ 1540.622928] ? lock_downgrade+0x900/0x900 [ 1540.627109] kernfs_new_node+0x95/0x120 [ 1540.631115] kernfs_create_link+0xdb/0x250 [ 1540.635375] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 1540.640693] sysfs_create_link+0x65/0xc0 [ 1540.642465] binder: 1019:1020 got transaction with invalid offset (56, min 0 max 0) or object. [ 1540.645311] device_add+0x4ac/0x17b0 [ 1540.645336] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1540.645357] ? rcu_read_lock_sched_held+0x108/0x120 [ 1540.667991] ? __kmalloc+0x5de/0x760 [ 1540.671728] ? input_register_device+0x59f/0xce0 [ 1540.676500] input_register_device+0x728/0xce0 [ 1540.681103] ? devm_input_allocate_device+0x120/0x120 [ 1540.686315] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1540.691351] ? input_mt_init_slots+0xba/0x4a0 [ 1540.695867] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1540.701182] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1540.706590] ? ___might_sleep+0x1ed/0x300 [ 1540.710759] ? arch_local_save_flags+0x40/0x40 [ 1540.715376] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1540.717079] binder_alloc: binder_alloc_mmap_handler: 1019 20003000-20006000 already mapped failed -16 [ 1540.720321] uinput_ioctl+0x4c/0x60 [ 1540.720339] ? uinput_compat_ioctl+0x90/0x90 [ 1540.720356] do_vfs_ioctl+0x1de/0x1720 [ 1540.720380] ? ioctl_preallocate+0x300/0x300 [ 1540.720401] ? selinux_file_mprotect+0x620/0x620 [ 1540.720423] ? __sb_end_write+0xd9/0x110 [ 1540.720442] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1540.720459] ? fput+0x130/0x1a0 [ 1540.749180] binder: BINDER_SET_CONTEXT_MGR already set [ 1540.750880] ? do_syscall_64+0x9a/0x820 [ 1540.750912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.750944] ? security_file_ioctl+0x94/0xc0 [ 1540.750965] ksys_ioctl+0xa9/0xd0 23:18:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xb00, 0x100000001) [ 1540.755027] binder: 1019:1020 ioctl 40046207 0 returned -16 [ 1540.760582] __x64_sys_ioctl+0x73/0xb0 [ 1540.760600] do_syscall_64+0x1b9/0x820 [ 1540.760617] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1540.760634] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1540.760649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1540.760669] ? trace_hardirqs_on_caller+0x310/0x310 [ 1540.774671] binder_alloc: 1019: binder_alloc_buf, no vma [ 1540.778714] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1540.778747] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1540.778770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1540.778794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1540.778807] RIP: 0033:0x457569 [ 1540.778824] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1540.778832] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.778860] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 23:18:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = dup2(r0, r0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) [ 1540.778874] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1540.805588] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1540.897431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1540.904706] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:05 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfdfdffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1541.208732] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1541.208732] 23:18:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x5555000000000000]}}, 0x1c) 23:18:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) write$selinux_validatetrans(r0, &(0x7f0000000180)={'system_u:object_r:man_t:s0', 0x20, 'system_u:object_r:mail_spool_t:s0', 0x20, 0x9, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x69) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:18:05 executing program 4 (fault-call:4 fault-nth:9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xa00000000000000, 0x100000001) [ 1541.309008] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1541.309008] [ 1541.349290] FAULT_INJECTION: forcing a failure. [ 1541.349290] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.352353] binder: 1053:1060 got transaction with invalid offset (56, min 0 max 0) or object. [ 1541.364142] CPU: 1 PID: 1058 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1541.375255] binder_alloc: binder_alloc_mmap_handler: 1053 20003000-20006000 already mapped failed -16 [ 1541.376616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.376623] Call Trace: [ 1541.376648] dump_stack+0x1c4/0x2b4 [ 1541.376672] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1541.376691] ? idr_destroy+0x1c0/0x1c0 [ 1541.376714] should_fail.cold.4+0xa/0x17 [ 1541.386856] binder: BINDER_SET_CONTEXT_MGR already set [ 1541.395434] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1541.395457] ? lock_acquire+0x1ed/0x520 [ 1541.395474] ? kernfs_activate+0x8e/0x2c0 [ 1541.395490] ? graph_lock+0x170/0x170 [ 1541.395507] ? print_usage_bug+0xc0/0xc0 [ 1541.395523] ? graph_lock+0x170/0x170 [ 1541.395550] ? find_held_lock+0x36/0x1c0 [ 1541.395570] ? __lock_is_held+0xb5/0x140 [ 1541.395598] ? ___might_sleep+0x1ed/0x300 [ 1541.398982] binder_alloc: 1053: binder_alloc_buf, no vma [ 1541.401801] ? arch_local_save_flags+0x40/0x40 [ 1541.401823] ? mark_held_locks+0x130/0x130 [ 1541.401848] __should_failslab+0x124/0x180 [ 1541.401869] should_failslab+0x9/0x14 [ 1541.401890] __kmalloc_track_caller+0x2d0/0x750 [ 1541.407269] binder: 1053:1060 ioctl 40046207 0 returned -16 [ 1541.411029] ? kstrdup_const+0x66/0x80 [ 1541.411051] kstrdup+0x39/0x70 [ 1541.411071] kstrdup_const+0x66/0x80 [ 1541.411090] __kernfs_new_node+0xe8/0x8d0 [ 1541.411110] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1541.411130] ? graph_lock+0x170/0x170 [ 1541.411155] ? __lock_is_held+0xb5/0x140 [ 1541.411177] ? wait_for_completion+0x8a0/0x8a0 [ 1541.522178] ? find_held_lock+0x36/0x1c0 [ 1541.526263] ? sysfs_do_create_link_sd.isra.2+0x82/0x130 [ 1541.531725] ? lock_downgrade+0x900/0x900 [ 1541.536007] kernfs_new_node+0x95/0x120 [ 1541.539996] kernfs_create_link+0xdb/0x250 [ 1541.544250] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 1541.549559] sysfs_create_link+0x65/0xc0 [ 1541.553632] device_add+0x5d0/0x17b0 [ 1541.557356] ? get_device_parent.isra.27+0x5a0/0x5a0 [ 1541.562464] ? rcu_read_lock_sched_held+0x108/0x120 [ 1541.567486] ? __kmalloc+0x5de/0x760 [ 1541.571211] ? input_register_device+0x59f/0xce0 [ 1541.575981] input_register_device+0x728/0xce0 [ 1541.580571] ? devm_input_allocate_device+0x120/0x120 [ 1541.585767] ? __sanitizer_cov_trace_pc+0xd/0x50 [ 1541.590537] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1541.595565] ? input_mt_init_slots+0xba/0x4a0 [ 1541.600088] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 1541.605370] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1541.610760] ? ___might_sleep+0x1ed/0x300 [ 1541.615359] ? arch_local_save_flags+0x40/0x40 [ 1541.619957] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1541.624901] uinput_ioctl+0x4c/0x60 [ 1541.628531] ? uinput_compat_ioctl+0x90/0x90 [ 1541.632963] do_vfs_ioctl+0x1de/0x1720 [ 1541.636877] ? ioctl_preallocate+0x300/0x300 [ 1541.641301] ? selinux_file_mprotect+0x620/0x620 [ 1541.646069] ? __sb_end_write+0xd9/0x110 [ 1541.650156] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1541.655696] ? fput+0x130/0x1a0 [ 1541.658997] ? do_syscall_64+0x9a/0x820 [ 1541.662978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1541.668519] ? security_file_ioctl+0x94/0xc0 [ 1541.672959] ksys_ioctl+0xa9/0xd0 [ 1541.676424] __x64_sys_ioctl+0x73/0xb0 [ 1541.680319] do_syscall_64+0x1b9/0x820 [ 1541.684209] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1541.689580] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1541.694519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1541.699388] ? trace_hardirqs_on_caller+0x310/0x310 [ 1541.704421] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1541.709447] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1541.714477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1541.719330] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1541.724531] RIP: 0033:0x457569 [ 1541.727740] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1541.746641] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.754356] RAX: ffffffffffffffda RBX: 00007fe8c30a2c90 RCX: 0000000000457569 [ 1541.761630] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1541.768908] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1541.776175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1541.783457] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0xfffff000, 0x100000001) 23:18:06 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x780c0000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x11000000, 0x100000001) 23:18:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000300)={r4, 0x3}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x183200) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r0, &(0x7f0000000200)={r6, r0, 0x1f}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r7, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1541.954217] binder: 1072:1075 got transaction with invalid offset (56, min 0 max 0) or object. [ 1541.965822] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1541.985105] binder_transaction: 6 callbacks suppressed [ 1541.985124] binder: 1072:1075 transaction failed 29201/-22, size 0-16 line 3033 [ 1542.020781] binder_alloc: binder_alloc_mmap_handler: 1072 20003000-20006000 already mapped failed -16 [ 1542.042021] binder: BINDER_SET_CONTEXT_MGR already set [ 1542.047475] binder: 1072:1075 ioctl 40046207 0 returned -16 [ 1542.053499] binder_alloc: 1072: binder_alloc_buf, no vma 23:18:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1100, 0x100000001) [ 1542.067748] binder: 1072:1081 transaction failed 29189/-3, size 0-16 line 2970 [ 1542.076237] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1542.076237] 23:18:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1542.181611] binder: 1094:1096 got transaction with invalid offset (56, min 0 max 0) or object. [ 1542.208586] binder: 1094:1096 transaction failed 29201/-22, size 0-16 line 3033 [ 1542.247235] binder_alloc: binder_alloc_mmap_handler: 1094 20003000-20006000 already mapped failed -16 [ 1542.257254] binder: BINDER_SET_CONTEXT_MGR already set [ 1542.265825] binder: 1094:1096 ioctl 40046207 0 returned -16 [ 1542.280599] binder_alloc: 1094: binder_alloc_buf, no vma [ 1542.293371] binder: 1094:1099 transaction failed 29189/-3, size 0-16 line 2970 23:18:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:06 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3f00000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x600, 0x100000001) 23:18:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:06 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x40000000]}}, 0x1c) 23:18:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r0, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000040)) [ 1542.553682] input: syz0 as /devices/virtual/input/input50 [ 1542.560051] binder: 1124:1127 got transaction with invalid offset (56, min 0 max 0) or object. [ 1542.577019] binder: 1124:1127 transaction failed 29201/-22, size 0-16 line 3033 [ 1542.626430] binder_alloc: binder_alloc_mmap_handler: 1124 20003000-20006000 already mapped failed -16 [ 1542.648338] binder: BINDER_SET_CONTEXT_MGR already set [ 1542.656028] binder: 1124:1127 ioctl 40046207 0 returned -16 [ 1542.664619] binder_alloc: 1124: binder_alloc_buf, no vma 23:18:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) getresuid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)='sha1_mb\x00'}, 0x30) getresuid(&(0x7f00000009c0)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000cc0)=0xe8) r13 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002680)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000002780)=0xe8) lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002880)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000028c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4}}, &(0x7f00000029c0)=0xe8) getgroups(0x2, &(0x7f0000002a00)=[0xffffffffffffffff, 0xee00]) fcntl$getownex(r1, 0x10, &(0x7f0000002a40)={0x0, 0x0}) r21 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0, 0x0}, &(0x7f0000002ac0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b00)={0x0}, &(0x7f0000002b40)=0x1) r24 = geteuid() stat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002c40)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000002d40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0, 0x0}, &(0x7f0000002dc0)=0xc) r29 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002e00)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@broadcast}}, &(0x7f0000002f00)=0xe8) getresgid(&(0x7f0000002f40)=0x0, &(0x7f0000002f80), &(0x7f0000002fc0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003300)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003340)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000003440)=0xe8) r34 = getgid() r35 = getpgrp(0xffffffffffffffff) r36 = geteuid() r37 = getgid() r38 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003480)={{{@in=@rand_addr, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000003580)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0, 0x0}, &(0x7f0000003600)=0xc) r41 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003640)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000003740)=0xe8) r43 = getegid() sendmmsg$unix(r1, &(0x7f0000003840)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="9a13168ee1dc11795b2472eb5b02ade100d9348ffe4a1950bae35897564db6b2c2753f8402bdc2b039d66dfddb59f500f0e982b3b4099b386dd67774e8317da03d71d42de7ba242d1af5af3836227fd5a6", 0x51}, {&(0x7f0000000300)="408880ff380eb0a88ec6924ffd8bb997301a682c7fe47a3c029c218d43eb4dacd1234d976b1993709bf1ec38e6b03192ef2982ba8612f5ab2c4ba008d400d0940eb65cdba91932756f97a484f0045a80e759348248174618f3ffa35b463e33bc8a832799842f0c4be7abe7bb03287681c160560b18b54dec2719e63a7c1b0f62b8af50422665341267237362c0ed2146e5a451d5163bbb2acdacd658bc5a2cbf278874267ba7532cec097184652c7cd43cee61b7d6678b", 0xb7}, {&(0x7f0000000040)="4ea465b4dc3fc7ea624b7d311b99895d06e61af8005f528995d38c9e56c2fd3b0bcba8d3b26a1da6d0b6ab", 0x2b}, {&(0x7f00000003c0)="0f4a062b1d7d64974a582d347e25c7e14efcb74628a3393ce736128ebf08fca2eac8b59c91a62d4614259e50f3f68584f137e3d184a00fc83c21e84221145d48bed7fc085a11be1137a0124eaa90f3c14618eb4b2d4432968f496eefad32cdcdc4f8ccecb9b2376796c3520b506cd054df47974b837b3055a385a899f459ca6019427ed458d38318adb48a07d60c3996110ec75bcd60f7e56bbe0c396cb747646dcb1ecd1f3cb2e7261755d623401bb1dd97b4", 0xb3}, {&(0x7f0000000480)="17be45db22352c7c1a1a3609cb28fa7b6fc812b7a4da8aabf09ef0ad82f6d808f6301dba68e9e3a5a3f37a7cb7fdce5db9803de06b351bde7603f30eb6147ea9235998856bd62afbdfe9bf8036fda4f28053166b104691095b2c95aa963859a9c06650c21e813fb444f182784e52593e321a18f8af6eb331f457a597aab575c6352b902e7558334c8ddbd1a7e9a546c3251285fed221188e1239a1b3d8edf1ddc5731ad2d97f252104dcf2c3b929bc02721951b37689e45c6a03f044cd7281a56a77f016c28b1a01145e1a719795d73c1360700cb1287d6e95cdfd3bd0c1", 0xde}], 0x5, &(0x7f0000003a40)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00000000200000000000000001000000020000dc222fe124892b21faa0d2babc4f32523b0323b95afa7e9f76f87ffbc9cae1d0f9d1628dd76843c51f5989ccca6fe6a0fa861b10893d19e05fe47e4dff3e9853194860c2000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x800}, {&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000e80)="6a557510cb480657a5ec0353d9aa09e1ccf63e595063423692e0fe55cca5e05f19afeb7e9d8e67b6819f850695fe421b36e6044f81584ed23ddbb753a4fa432ad37eb6b8f54e4af686142bc3ed734874f23d9582307edd26c4192e276d7cfa8da505586785f08e436bc0a994d2e0cc9f1f73e30285c01352c517d3ae5098afbde5eb45e5aed6412736422c07e6113336e51634f5769dad3138e796ff962a2ed570cbc4e589856446d2b501ce75daa4a455195f35e3201f87fe2c005db662bed36ec799c55f81651c37de8226f5b8fd07045b069bb7be9b5e9b8cbde21ed4ceeb10c0b7bbda70b05f0b15d1be8c6ac0fd6ed0d0bd0e21", 0xf6}, {&(0x7f0000000f80)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000010}, {&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002040)="6e464a4b345e0acd624cc27e9079e36f5b52b631e0e8778cf7f4038b04cc179e70de1e067195932845b961411bc29b6eb38dde394e4e1c9c4f1dc8b7bfce7dfe015ffd0383df7c3c539fe86daf5218472f5b1b4c5a959611f170dc09aa4a047cd8c3e89cb5214c5306ec47a1c655274acfe685a58895ecc6556661cecc07a9c607c98b2489", 0x85}, {&(0x7f0000002100)="0c7d64d09766d14b1ade6ead29f60e6f6d2e363d153cd4fbbc1365ee4a444bcc36eb15eda011793b993fd1e758713bd1a0c2414e291d3e1f2e2c38f3dc8ea2df013f7e8831e15703727f8fe0ad72d5410e893e5bd7fa017b535d074c10227d3b7ac66ab3cd5437baf2177a2825c760fc33624b0c", 0x74}, {&(0x7f0000002180)="e67c9462e2e1d989881c20fa1a5b00d1c659714414fbd8f888102116d270db090a8825d14c67747369d46c83b6dc84dd8c6f2d948732736badb3da", 0x3b}, {&(0x7f00000021c0)="ae7cd7cbbac0b73bd2bde644ef6215fc2b0dfa932c3c497bb3dc6f7a0161d60e0e8b424e14bbd12fdb854f6657dbf83e64cfe1ab2036dde2fbd0b222cb170561e832a2e493853dfcb334c24f5298e02cd0f79ed337c1c07d5381b50b1f86a3f5b56b19787dc0a3b0c5eed8f1731b52cee9e93e096047edb15eec0f7c914ac1b08374e61986cd9b4981844164614bbc91dd5c87afe77ef3aefb7708fad69b772362d5c7604cb9c98d72af0bf463bef530d1d5c2a9b9037c72907f41522433ecac014d5dce1e8d4ea37e61bec7ff60934f55a267a58437e3", 0xd7}], 0x4, 0x0, 0x0, 0x40090}, {&(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002380)="285482dddfa42e97ea6ab9e2cb9b257d0ed48c27a63edc32a3e5f22d6ccd3352e46043863cfc2fdc7b05f86f02cde5cdecbbc0b8b17b41de7770a885813ebc3d7ff150f27de79504469cbaa6687c4469e3e0c455033fc0c927a7727524156b830d32c7fc56e62fc3cdd48c194f83e0180958afaacef9fed13b44a0f98fd454f38c36f50dfc9b7493c91a3846d7e048cd7dc69dd365c102f2fcfc0ffeb1f3fbc4331016d7ce43cc9e2b56303648d9a7c53017c43aa363513b0b08f6fb6f84855fa633ddf5adefa6cef9e3bf9be11d3a2aa0d43104cd92d60ea84ec0bd5db52d6811d4fe253ce79c9f", 0xe8}, {&(0x7f0000002480)="de500280094d8ab08e75d194dd781371e9cc96ed481f7f7d4aaea6554a2f75ab28a72d0b2f43ff4f8358330136e3fb8c371e46628f30dc29c4e29856565ac8ac53299f307f5e7e917e6cb89191be5cde82f71eeedfe847bb927e0aec86f27349a00e9260d210efcc5afc050c6651ad112e103ce9c81fbf64a1e2726c5450591bde23d7f057e2e4e144d322a0f07b08a649ff9472432e0583bca462263a1ab6f87c690ad5b5ca9b44814f4ab03065f8f6bd963d3824c5bb2a6cb411e138d0de", 0xbf}, {&(0x7f0000002540)="d3be12c994f9497ab2d752dc280964f9982b3fa65ce7bbd9779a12fc895b78b07aa40c029be8490e266c6672a9a8ae74d391567d6fbd1a42d6f21dfc5aadadcdd9477729c157720b566d6a3b4f684320b464cbc5de670d1625b913d1270fe9f1c76c89c043e153120ef20e13bce75b339c91c92474d1244602ed05b3558b0c79716a957bddde7621b0b7e4a5fe470e11f09f9012aed434e6113cc8740549732fc1b63d7bdaf2ef67395ab5bf45d86822", 0xb0}], 0x3, &(0x7f0000003000)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x138, 0x90}, {&(0x7f0000003140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f00000031c0)="f25e42af232cc4ead4c570c9a33716fed8e696af27dbd6885349a5d8d6d194bd78d3f56ec706c44aa6bb803c3f256c3310f4634a0c1cf75744737589c7754ba0a4dd4eaf9a23a3c6da682cf4a018c92b62fb2077f4e5723ab027d56572d099f1adceb241ed5a1ddf3b1b12ac17db12638c4f19ecf523bb38cc8779f92f94b31f", 0x80}, {&(0x7f0000003240)="87bec7e166ca4786f734bd7d99cd12eb08325fdc680e828a13d88e2bd2c1cad17f49490720f1c945f2820b795d4e7740d2f9128228afa4e747b5af1e4f959a81cd9c0ac344a15a71bb75a9390ef00121e1c2081e033cc0ec0e71cb298b0d33a8fd4c745dbfcc82d0", 0x68}], 0x2, &(0x7f0000003980)=ANY=[@ANYBLOB="2000535949e1de7e8b803f0000000000000100000002000000", @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r35, @ANYRES32=r36, @ANYRES32=r37, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r43, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000000}], 0x5, 0x10) r44 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r44, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1542.674827] binder: 1124:1134 transaction failed 29189/-3, size 0-16 line 2970 [ 1542.682477] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1542.682477] [ 1542.715052] binder_release_work: 8 callbacks suppressed [ 1542.715060] binder: undelivered TRANSACTION_ERROR: 29201 23:18:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000000a) 23:18:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1542.787338] binder: undelivered TRANSACTION_ERROR: 29189 [ 1542.807395] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045564) [ 1542.954713] binder: 1149:1152 got transaction with invalid offset (56, min 0 max 0) or object. [ 1542.978305] binder: 1149:1152 transaction failed 29201/-22, size 0-16 line 3033 23:18:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045566) 23:18:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000ffe0) [ 1543.004633] binder_alloc: binder_alloc_mmap_handler: 1149 20003000-20006000 already mapped failed -16 [ 1543.040442] binder_alloc: 1149: binder_alloc_buf, no vma [ 1543.045040] binder: BINDER_SET_CONTEXT_MGR already set [ 1543.046225] binder: 1149:1162 transaction failed 29189/-3, size 0-16 line 2970 [ 1543.059436] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1543.059436] [ 1543.077853] binder: undelivered TRANSACTION_ERROR: 29189 [ 1543.083757] binder: undelivered TRANSACTION_ERROR: 29201 [ 1543.089430] binder: 1149:1152 ioctl 40046207 0 returned -16 23:18:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x361) [ 1543.175839] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1543.175839] 23:18:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1f000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1543.245264] binder: 1178:1180 got transaction with invalid offset (56, min 0 max 0) or object. [ 1543.281636] binder: 1178:1180 transaction failed 29201/-22, size 0-16 line 3033 [ 1543.292122] binder_alloc: binder_alloc_mmap_handler: 1178 20003000-20006000 already mapped failed -16 [ 1543.304260] binder: BINDER_SET_CONTEXT_MGR already set [ 1543.323079] binder: 1178:1180 ioctl 40046207 0 returned -16 [ 1543.330434] binder_alloc: 1178: binder_alloc_buf, no vma [ 1543.350399] binder: undelivered TRANSACTION_ERROR: 29201 [ 1543.369939] binder: 1178:1183 transaction failed 29189/-3, size 0-16 line 2970 [ 1543.400387] binder: undelivered TRANSACTION_ERROR: 29189 [ 1543.460946] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1543.460946] 23:18:07 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x8000000]}}, 0x1c) 23:18:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x57) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:18:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5507) 23:18:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000500) 23:18:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1543.540734] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1543.540734] 23:18:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3f00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1543.656454] binder: 1204:1211 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:18:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x20000) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) [ 1543.707432] binder_alloc: binder_alloc_mmap_handler: 1204 20003000-20006000 already mapped failed -16 [ 1543.726513] binder: BINDER_SET_CONTEXT_MGR already set [ 1543.747746] binder: 1204:1211 ioctl 40046207 0 returned -16 [ 1543.754994] binder_alloc: 1204: binder_alloc_buf, no vma [ 1543.771107] binder: undelivered TRANSACTION_ERROR: 29189 [ 1543.780483] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1543.780483] [ 1543.793319] binder: undelivered TRANSACTION_ERROR: 29201 23:18:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556b) [ 1543.879871] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1543.879871] 23:18:08 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x5, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1543.933289] binder: 1242:1245 got transaction with invalid offset (56, min 0 max 0) or object. [ 1543.970947] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000600) [ 1543.995676] binder_alloc: binder_alloc_mmap_handler: 1242 20003000-20006000 already mapped failed -16 [ 1544.015568] binder: BINDER_SET_CONTEXT_MGR already set [ 1544.021443] binder: 1242:1245 ioctl 40046207 0 returned -16 [ 1544.027450] binder_alloc: 1242: binder_alloc_buf, no vma [ 1544.045236] binder: undelivered TRANSACTION_ERROR: 29189 [ 1544.051539] binder: undelivered TRANSACTION_ERROR: 29201 [ 1544.120696] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1544.120696] [ 1544.221970] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1544.221970] 23:18:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 23:18:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(ecb(twofish))\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_extract_tcp_res$synack(&(0x7f0000000340), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) time(&(0x7f0000000200)) r3 = accept(r1, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x80, 0x4) write$binfmt_elf32(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1458) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000040)=[0xffffffffffffff63, 0x8], 0x2, 0x9, 0x2, 0x9, 0x1, 0x7f, {0x7fff, 0x3f, 0x2, 0x7, 0x9, 0xdac4, 0x800, 0x7f, 0x8b4, 0x401, 0x81, 0xffff, 0x80000001, 0x2, "bb88a496d6db2d6e2012be57b092a00f4c9852b8607e8e1518630dd9d76aa3e4"}}) 23:18:08 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000005) 23:18:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xfffffff5]}}, 0x1c) 23:18:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x405c5503) [ 1544.494281] binder_alloc: binder_alloc_mmap_handler: 1277 20003000-20006000 already mapped failed -16 [ 1544.523856] binder: BINDER_SET_CONTEXT_MGR already set [ 1544.529780] binder: 1277:1280 ioctl 40046207 0 returned -16 23:18:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1544.554339] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1544.554339] 23:18:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0xffffffffffffffaa) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x600200, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0x1, 0x0, 0x7f, 0x2}, &(0x7f0000000240)=0x18) r3 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000280)=""/54) sendfile(r3, r4, &(0x7f00000002c0), 0x10000000000443) accept(r3, 0x0, &(0x7f0000000080)) [ 1544.686249] binder_alloc: binder_alloc_mmap_handler: 1305 20003000-20006000 already mapped failed -16 [ 1544.696685] binder: BINDER_SET_CONTEXT_MGR already set 23:18:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1544.728090] binder: 1305:1306 ioctl 40046207 0 returned -16 23:18:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100002101) 23:18:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045569) [ 1544.863528] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1544.863528] [ 1544.868280] binder_alloc: binder_alloc_mmap_handler: 1321 20003000-20006000 already mapped failed -16 23:18:09 executing program 0: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000a40)=""/217) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x478, 0x160, 0x160, 0x250, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9, 0x1, 0x1, [0x8001, 0x4fb7, 0x6, 0x7fff, 0x1, 0x3, 0x8000, 0x1, 0x5, 0x1, 0x7, 0x21, 0x7, 0x5, 0xfffffffeffffffff, 0x3], 0x2}}, @common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x20, 0x0, 0x3, 0x4}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@mcast2, @loopback, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'bridge_slave_0\x00', 'bcsh0\x00', {}, {0xff}, 0x32, 0x8, 0x5, 0x8}, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9, 0x4, 0x1, [0xce, 0x101, 0x400, 0x3f, 0x6, 0x4ee3, 0x4, 0x1, 0x9e7b, 0x8, 0x4, 0x400, 0x72c, 0x9, 0x5, 0x1], 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'team_slave_0\x00', 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) fstat(r2, &(0x7f0000000180)) getsockopt$inet6_buf(r3, 0x29, 0xfe, &(0x7f0000000900)=""/90, &(0x7f0000000980)=0x5a) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000800)={0xc7, 0x7, "0f5eef3e63cba1b7035b17229c1ff765ef155619dfdcd7733e33b4801189b6d6e5413294cc7efc714bb758512299df13e65a85ea27210a09056dd8bf8ddf40f15796985a51213a0326095b9ee6687ec6033a5a0d5831ac91c3d40417f959e50b7eb91a3198f061009467ffe04f580525a42abed31ecb62ac8218162619d4a84ca4b0195512837aa021fe7e77192a5937ca3af01b7d4dc546f4f4bd236475f4be944ba646219a04bc28080569b3d17b1000a0e3146778c54a5f8fa573b6166e"}, &(0x7f0000000240), 0x1400) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)=0x405) [ 1544.906058] binder: BINDER_SET_CONTEXT_MGR already set [ 1544.919643] binder: 1321:1323 ioctl 40046207 0 returned -16 23:18:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5460) 23:18:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:09 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x5]}}, 0x1c) 23:18:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x500, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5450) 23:18:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000ba00) 23:18:09 executing program 0: io_setup(0x50101c28, &(0x7f0000000040)=0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xffffffffffffff47, 0x402) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xffffffff, 0x400000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x5, 0x2000) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000540)='./file0\x00', 0x101, 0x805fd03721ecd388) r8 = socket$rds(0x15, 0x5, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/audio\x00', 0x200280, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x105040, 0x4) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000001700)='/dev/null\x00', 0x48080, 0x0) io_submit(r0, 0x6, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f00000001c0)="369cd8b6ae09", 0x6, 0x73, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x3ff, r3, &(0x7f0000000300)="c2d0ee9492821f5f4ac5032306650c40705479c4abc1fbc23115c55f39d9d9bc6d22ce609f7bfece74c401819d8a33cd52f07141e529b38e285d60a41ae5061c0d37b5e92e71887cffcdee848f58df06df72e2900013532f53aaca37aa96634b18bed711b48eb4cdafcb90c60546104c0f7b4a79906f17f10ec7d6fd845cb2205c6642ff637359d88b9d4e82dc", 0x8d, 0x1b, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x5, r4, &(0x7f0000000400)="8914ee13ed6c1e3031a9db070c3b7549bfbe858ab1d81cabe607fd105de5942cdb9ab1ec50c66b612a44bc0d4e5ee959d322e512734b", 0x36, 0x5, 0x0, 0x6dac5ebdfe7d1ba4, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x70c7, r6, &(0x7f0000000500)="741b95c7c6f6f7f0316988de10c93d7d13be3eec02174dc8c2ba55a73c937f7a6a71ca1d6db635607fcb56d499692c3f71a8", 0x32, 0x64ad, 0x0, 0x2, r7}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x8000, r8, &(0x7f00000005c0)="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", 0x1000, 0x5e1ad42c, 0x0, 0x3, r9}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x2, r10, &(0x7f0000001680)="5388c492f563c4562d7cd53ee7d2fa8a448c1db065c721bf618affe77cb1670858a5155f77bdf3e4ddc5a10e91316902316d25edd34730464aaa73fd4c83a491fd95", 0x42, 0x9, 0x0, 0x0, r11}]) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r13 = accept4(r12, 0x0, &(0x7f00000000c0), 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r13, r14, &(0x7f00000002c0), 0x10000000000443) accept(r14, 0x0, &(0x7f0000000080)) [ 1545.332794] binder: BINDER_SET_CONTEXT_MGR already set [ 1545.342887] binder: 1361:1364 ioctl 40046207 0 returned -16 [ 1545.365874] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1545.365874] 23:18:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 23:18:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000000c) [ 1545.535909] binder_transaction: 5 callbacks suppressed [ 1545.535924] binder: 1398:1400 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 23:18:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6000000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1545.607714] binder: BINDER_SET_CONTEXT_MGR already set [ 1545.618434] binder: 1398:1400 ioctl 40046207 0 returned -16 [ 1545.624687] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1545.624696] binder_alloc: 1398: binder_alloc_buf, no vma 23:18:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1545.767684] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1545.767684] [ 1545.779441] binder: 1419:1423 got transaction with invalid offset (56, min 0 max 0) or object. [ 1545.782005] binder: BINDER_SET_CONTEXT_MGR already set [ 1545.817576] binder_alloc: 1419: binder_alloc_buf, no vma [ 1545.824330] binder: 1419:1423 ioctl 40046207 0 returned -16 [ 1545.876984] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1545.876984] 23:18:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x15888]}}, 0x1c) 23:18:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x6103) 23:18:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0xbee851c08d76c00d) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) accept(r1, 0x0, &(0x7f0000000080)) 23:18:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x1ffffffe0) 23:18:10 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xe0030000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1546.058485] binder: 1441:1444 got transaction with invalid offset (56, min 0 max 0) or object. [ 1546.109412] binder: BINDER_SET_CONTEXT_MGR already set [ 1546.115524] binder: 1441:1444 ioctl 40046207 0 returned -16 [ 1546.123451] binder_alloc: 1441: binder_alloc_buf, no vma 23:18:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000015e) 23:18:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0xfffffffffffffedc) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1546.158572] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1546.158572] 23:18:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40087602) 23:18:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:10 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4c00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendto$inet6(r2, &(0x7f0000000040)="dec6af029825e6025c51278e9b7435c29e2f2cddedaaf4879d50d76059a626d7841fcda52a4987d6466475e2916d5897e232eb", 0x33, 0x4000, &(0x7f0000000180)={0xa, 0x4e24, 0x100000001, @dev={0xfe, 0x80, [], 0x21}, 0x9b31}, 0x1c) sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1546.419910] binder: 1472:1476 got transaction with invalid offset (56, min 0 max 0) or object. [ 1546.433649] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1546.433649] [ 1546.484043] binder: BINDER_SET_CONTEXT_MGR already set [ 1546.491451] binder_alloc: 1472: binder_alloc_buf, no vma [ 1546.497313] binder: 1472:1485 ioctl 40046207 0 returned -16 [ 1546.538732] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1546.538732] 23:18:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xff0f]}}, 0x1c) 23:18:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x80087601) 23:18:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000003) 23:18:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:10 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xc78, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x406855c9) [ 1546.748347] binder: 1503:1509 got transaction with invalid offset (56, min 0 max 0) or object. [ 1546.778525] binder: BINDER_SET_CONTEXT_MGR already set [ 1546.784815] binder: 1503:1509 ioctl 40046207 0 returned -16 [ 1546.788155] binder_alloc: 1503: binder_alloc_buf, no vma 23:18:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x9) ioctl$KVM_RUN(r1, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000740), 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000780)={"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"}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') writev(r3, &(0x7f0000000680)=[{&(0x7f0000000080)="97b912792263de75419f255c11819a6002983b3dea", 0x15}, {&(0x7f0000000180)="05b1fbea6fdd8c7f2d7780d3d2ef2e38e39711ac0662b185de48a6f0b48c978dbe2788f62f7dc5b788d54663a4c6e00eac04e18087368150334485aa02aeecf524a6a0706a455f6fdbafb5bec6120a41dc87262375822a8931d2e54bddd79db48d", 0x61}, {&(0x7f0000000200)="96d9103c54590af083d8ecd6173d42d7a05f757821cd8011b71e5fc347cf556901f1a1df1dc5c966aa344985c0116dde8f", 0x31}, {&(0x7f0000000300)="f241d72d7a29f9b92d42f7e34167b82257f4a0d852f791d9193413b9e81ee0257455ec992d31a333590c33925a4ff28ab153113de456183bc7d299b7ee1bab230af5bfe26a21fcf19b54d5cb8e072091e7ab71d720c8f817d67a3eb00a4015889fdb453029882a0034a22925438e3202695a3e519c61b8d846e3779cf8010ff6815ee4a5c1a6365e7e2e4184a953e55616dbddaafb", 0x95}, {&(0x7f0000000240)="8d251a0dc1b2826c404551d5a12f978838e4901d4ecac351d663c7a6d5e75dd181a79501e844a0bf42b530052549867a30911b08ba2ebd70df18bfa648c9b1213b539a4e4482e5d6b3a2e191eb0c3b98ad12b114ee747f9847165860affcc07eed44", 0x62}, {&(0x7f00000003c0)="74d12829b838a79894f13e28f8f1d962c6378e681855cc0183d74e194b532bc20716bbbb7cdaa234a41f20748d6ad557184abd131e4974367d08038dff320b17791c97b5fbdae78448cbfbcc352b319a210759abcafc1a30eeceaf569a41134a4f0d4cd8ce4ef6f639cfd6fd18394f08535609a5c3157e9c4878fd1592f07c5319fb8094d4a66ca6dc0fc723f4683567444a2bfc5931e4ce6ff82c1389444638", 0xa0}, {&(0x7f0000000480)="3e2969b1404edfe12467f073504fc7192552be73387fa5d9275e40a29ee92bc6ea12a1b1a1ba4962837c9105df74c3cd36c28803f453826a12423d22", 0x3c}, {&(0x7f00000004c0)="9cb885087432df567049c44acacc0a3a6dacfa068658cc1ae89d8e93384a6fc4b3ddccc15b0f9cf2e5248db4ab5c00e3acd8df76feb9a3d6cec54f1b675b8d4f69604e6433a39e3765837e7cea04d3446a14c56c5e7a217b365eb6640b34cd906c8a932f0192964150d3e26833fdb8583a5c7e61851ccece8c0d3913bb8346b7fa9b83f876432aa7fcf24e7e827a0372654078a6a1ed8812e80b10d2226de979cb5f925c42af3f7bd20949254acb45a4add3a5", 0xb3}, {&(0x7f0000000580)="bf18d799bdac575112675420bb3c9c06ca619480e954d24d5882dfe7b0008a793965b55b6218fbb366d766f56a83e7fc637fd97b51838331d1eb942028633e135a928f45fa188a06ee6a452c1b674aaa2bb2009853c6e7754fc2ca78963003d4c742e39564d10c7d4e767ab2fdcfa7b6f05453cc2eace1020ec09b16a47396426c6d738cba8f9ceffdbf256109e49c47401e075fe058d69519fd2f8120f4acfc54c073b91dcdc16deaa9f70df657586ab6ba28490fca5380b465d782e3f3dffe5314", 0xc2}], 0x9) sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 23:18:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1546.840683] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1546.840683] 23:18:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x1ffffff1f) [ 1546.936387] binder: 1523:1528 got transaction with invalid offset (56, min 0 max 0) or object. [ 1546.969132] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1546.969132] [ 1546.976554] binder: BINDER_SET_CONTEXT_MGR already set 23:18:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4b47) [ 1546.988560] binder_alloc: 1523: binder_alloc_buf, no vma [ 1547.005741] binder_transaction: 25 callbacks suppressed [ 1547.005760] binder: 1523:1534 transaction failed 29189/-3, size 0-16 line 2970 [ 1547.021209] binder: 1523:1533 ioctl 40046207 0 returned -16 23:18:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:11 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x20000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1547.157742] binder: 1547:1548 got transaction with invalid offset (56, min 0 max 0) or object. [ 1547.201306] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1547.201306] [ 1547.205240] binder: 1547:1548 transaction failed 29201/-22, size 0-16 line 3033 [ 1547.229685] binder_alloc_mmap_handler: 8 callbacks suppressed [ 1547.229703] binder_alloc: binder_alloc_mmap_handler: 1547 20003000-20006000 already mapped failed -16 [ 1547.268219] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1547.268219] [ 1547.270244] binder: BINDER_SET_CONTEXT_MGR already set [ 1547.294690] binder: 1547:1548 ioctl 40046207 0 returned -16 [ 1547.313856] binder_alloc: 1547: binder_alloc_buf, no vma [ 1547.339046] binder: 1547:1565 transaction failed 29189/-3, size 0-16 line 2970 23:18:11 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x8]}}, 0x1c) 23:18:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40049409) 23:18:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x9, 0x3, 0x100000001, 0x0, 0x6}, &(0x7f0000000180)={0x7, 0x9, 0xb74, 0x6, 0xfffffffffffffffb, 0x5, 0x2, 0x9}, &(0x7f00000001c0)={0x6a, 0x101, 0x2, 0x43a62e98, 0x4, 0xde, 0x3, 0x8}, &(0x7f0000000240)={r1, r2/1000+30000}) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r3 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, &(0x7f00000002c0), 0x10000000000443) accept(r3, 0x0, &(0x7f0000000080)) 23:18:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000b700) 23:18:11 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4c00000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1547.556964] binder: 1576:1581 got transaction with invalid offset (56, min 0 max 0) or object. [ 1547.597103] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct 23:18:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40086602) [ 1547.597103] [ 1547.617066] binder: 1576:1581 transaction failed 29201/-22, size 0-16 line 3033 [ 1547.653364] binder_alloc: binder_alloc_mmap_handler: 1576 20003000-20006000 already mapped failed -16 [ 1547.694313] binder: BINDER_SET_CONTEXT_MGR already set 23:18:12 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x700000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045568) [ 1547.716090] binder: 1576:1581 ioctl 40046207 0 returned -16 [ 1547.728577] binder_alloc: 1576: binder_alloc_buf, no vma [ 1547.757318] binder_release_work: 24 callbacks suppressed [ 1547.757326] binder: undelivered TRANSACTION_ERROR: 29201 [ 1547.764178] binder: 1576:1599 transaction failed 29189/-3, size 0-16 line 2970 23:18:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x1000000e0) 23:18:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1547.811511] binder: undelivered TRANSACTION_ERROR: 29189 23:18:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/ipx\x00') fgetxattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/113, 0x71) sendfile(r1, r3, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1547.865857] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1547.865857] [ 1547.905703] binder: 1613:1615 got transaction with invalid offset (56, min 0 max 0) or object. [ 1547.975182] binder: 1613:1615 transaction failed 29201/-22, size 0-16 line 3033 [ 1547.994637] binder_alloc: binder_alloc_mmap_handler: 1613 20003000-20006000 already mapped failed -16 [ 1548.006509] binder_alloc: 1613: binder_alloc_buf, no vma [ 1548.011057] binder: BINDER_SET_CONTEXT_MGR already set [ 1548.013876] binder: 1613:1623 transaction failed 29189/-3, size 0-16 line 2970 [ 1548.018557] binder: 1613:1615 ioctl 40046207 0 returned -16 [ 1548.025642] binder: undelivered TRANSACTION_ERROR: 29189 [ 1548.036774] binder: undelivered TRANSACTION_ERROR: 29201 23:18:12 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7a000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xffffff91]}}, 0x1c) 23:18:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) 23:18:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 23:18:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000000b) 23:18:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 23:18:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x20) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000040)=0xffffffffffffffea) [ 1548.279160] binder: 1637:1642 got transaction with invalid offset (56, min 0 max 0) or object. [ 1548.305865] binder: 1637:1642 transaction failed 29201/-22, size 0-16 line 3033 [ 1548.350341] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1548.350341] [ 1548.369578] binder_alloc: binder_alloc_mmap_handler: 1637 20003000-20006000 already mapped failed -16 23:18:12 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x58, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1548.410883] binder: BINDER_SET_CONTEXT_MGR already set [ 1548.416714] binder_alloc: 1637: binder_alloc_buf, no vma [ 1548.422707] binder: 1637:1642 ioctl 40046207 0 returned -16 [ 1548.430272] binder: 1637:1659 transaction failed 29189/-3, size 0-16 line 2970 [ 1548.460384] binder: undelivered TRANSACTION_ERROR: 29201 23:18:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc0189436) [ 1548.483079] binder: undelivered TRANSACTION_ERROR: 29189 23:18:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1548.572576] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1548.572576] 23:18:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000002) [ 1548.690451] binder: 1672:1675 transaction failed 29201/-22, size 0-16 line 3033 [ 1548.726056] binder_alloc: binder_alloc_mmap_handler: 1672 20003000-20006000 already mapped failed -16 23:18:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x541b) [ 1548.758725] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1548.758725] [ 1548.778919] binder: BINDER_SET_CONTEXT_MGR already set [ 1548.795256] binder: 1672:1675 ioctl 40046207 0 returned -16 [ 1548.844607] binder: undelivered TRANSACTION_ERROR: 29189 [ 1548.867050] binder: undelivered TRANSACTION_ERROR: 29201 23:18:13 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x500000000000000]}}, 0x1c) 23:18:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000280)=0xffffffffffffd1ec, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) sendmsg(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)="9fe4b30eb0ebd2084d46f98142fe57b69a97409b8311facacf78108bcc5e808d4236de91c792f0aa8fc8d20eb82ca685bc7ab89ce17cfdb34d3d5c63c1faf5f476bb1cf9fe97c6754b298060f9edf937f8a8b211a5ebc8596e8f599718607743c8b0fa8add447ef35d27a75b1b6d27fe0b18f9a95d990a3757cda6d740ab8a1354d5c0c508dd572dc7d4552ae729", 0x8e}, {&(0x7f00000003c0)="8f3e297f93764a2cf1379403bd96a90b18876e044f04198a3344084f1f269e61af6567aa6a58fb24c17b78c1a04b93c77828c293672ff0a94cebe06f57c0a39cf0221c04f7bdbfad3eb4e430bfd39247e30da61999a385650b1b", 0x5a}, {&(0x7f0000000440)="243a152b120f311f7d56af1b50f1a5bf7d1f5e45ccfb72ce4cbaf7331da24f695b8538647b0b105e185333f42a7302e38ced", 0x32}, {&(0x7f0000000480)="2840c7", 0x3}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="a854b1fdef6484b232104597d7b06ad93ccbe761d860d67c13b83969982bfacfeb25febcf7c50e571ceb7b13b71030f971b6f551ad88e9cf539d1c4e4ad29ccfb402a88110091f0255559c07191f7f194db51e461b5aa92d9e1823bfd5ebb552ab557eee51194d78c969dbca149fd3b0ea1bfa467e3dc5ebe728977cb4f75541407307dd7c06a96a35e3b4bcc01ae71a627f512a5d658fdc8d6a10bf9263959cbab0723174c031c9875eb497c33a7bdf7db5cd9f7e54b96fbf3d", 0xba}, {&(0x7f0000001580)="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", 0x1000}], 0x7, 0x0, 0x0, 0x40}, 0x801) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7, 0x6, 0x80000000, 0x3, 0x0, 0x101, 0x800c, 0x4, 0x7, 0x1f, 0xfffffffffffffff8, 0x4, 0x4, 0x85, 0x0, 0x0, 0x3, 0x6, 0x1, 0x9, 0x6021eed7, 0x0, 0x1ff, 0x5, 0x1, 0x1, 0xbe, 0x8, 0x800, 0x1, 0x9, 0x14d0067e, 0x6, 0x80000000, 0x5, 0x7, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x400, 0x40, 0xd4, 0x2, 0x8, 0x5, 0x2}, r4, 0x5, 0xffffffffffffff9c, 0x2) accept(r2, 0x0, &(0x7f0000000080)) 23:18:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5421) 23:18:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x10000a900) 23:18:13 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x60000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5451) [ 1549.244269] binder_alloc: binder_alloc_mmap_handler: 1700 20003000-20006000 already mapped failed -16 [ 1549.284029] binder: BINDER_SET_CONTEXT_MGR already set [ 1549.290074] binder: 1700:1709 ioctl 40046207 0 returned -16 [ 1549.310168] binder: undelivered TRANSACTION_ERROR: 29189 [ 1549.314248] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1549.314248] 23:18:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc0045878) [ 1549.368421] binder: undelivered TRANSACTION_ERROR: 29201 23:18:13 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2, 0xe, 0x1a) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) gettid() r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000280)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r6, &(0x7f0000000040), 0x100000001) [ 1549.489114] binder_alloc: binder_alloc_mmap_handler: 1723 20003000-20006000 already mapped failed -16 [ 1549.509143] binder: BINDER_SET_CONTEXT_MGR already set [ 1549.523020] binder: 1723:1727 ioctl 40046207 0 returned -16 23:18:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) accept(r0, 0x0, &(0x7f0000000180)=0xfe7e) [ 1549.609559] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1549.609559] [ 1549.837172] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:14 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x10000000]}}, 0x1c) 23:18:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x553d) 23:18:14 executing program 5: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$addseals(r0, 0x409, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x778f142a) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r5, &(0x7f0000000040), 0x100000001) 23:18:14 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xf6ffffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@getpolicy={0xec, 0x15, 0xc04, 0x70bd2b, 0x25dfdbfe, {{@in=@broadcast, @in=@rand_addr=0x64, 0x4e24, 0x8, 0x4e23, 0xfff, 0x2, 0xa0, 0x20, 0x7f, r2, r3}, 0x6e6bbd, 0x2}, [@replay_thresh={0x8, 0xb, 0x1ff}, @tfcpad={0x8}, @algo_auth_trunc={0x78, 0x14, {{'sha3-224\x00'}, 0x160, 0xe0, "ecd6eb67e224a319d5cf8d061aeef838e5f69c1fee1b4ea398c82321fb475489489bc65a60365d6e36acb7b0"}}, @lastused={0xc}, @output_mark={0x8, 0x1d, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x24040081) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendfile(r1, r1, &(0x7f00000002c0), 0x10000000000441) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'nr0\x00', {0x2, 0x4e24, @local}}) accept(r1, 0x0, &(0x7f0000000080)) 23:18:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x550b) [ 1550.226034] binder_alloc: binder_alloc_mmap_handler: 1758 20003000-20006000 already mapped failed -16 [ 1550.260932] binder: BINDER_SET_CONTEXT_MGR already set [ 1550.266450] binder: 1758:1764 ioctl 40046207 0 returned -16 23:18:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1550.297310] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1550.297310] 23:18:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/179, 0xb3}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2, 0x0) accept(r1, 0x0, &(0x7f0000000080)) [ 1550.395340] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1550.395340] 23:18:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5452) 23:18:14 executing program 5: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64) 23:18:14 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x58000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1550.502082] binder_alloc: binder_alloc_mmap_handler: 1789 20003000-20006000 already mapped failed -16 [ 1550.537103] binder: BINDER_SET_CONTEXT_MGR already set [ 1550.542754] binder: 1789:1791 ioctl 40046207 0 returned -16 [ 1550.655776] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1550.692794] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1550.692794] 23:18:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xff02) 23:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x10, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_getoverrun(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) timer_getoverrun(r1) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) 23:18:15 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:15 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x20000000]}}, 0x1c) 23:18:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x109200, 0x0) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000240)="366bb48a75f03669e03da132fbac1311c1cf59d57b99d9e888f6118a8877494b0be6c5", 0x23}, {&(0x7f0000000300)="6cae1989625383f1cdd1f2bd45bf00925dfc94275ca5a22a740bee571a5ca9cc27150a7bb0cad1d89b04f478ba3024aca4ae9944746a3d1e9af67eb03e08e512a983fb0b18282c43955df47017e4e0474fe86254e53735a7c487415605e60e3f000a1680eef589bf59", 0x69}, {&(0x7f0000000280)="1cd1d08425734a622a", 0x9}, {&(0x7f0000000380)="3b85d431fa84941149de5c329f86ff3ad2f47a6fbb977ff327c90441935ceebba898776daeebdc7dbc86009349fe6868d95915183213117b2ee001eb23a62f7c52c357cee56adc4f86359a11103b37bba0dc0d8ed911d7fe3c51df994e24495fb7a5d1949fd0bae210f60e7918333a244e216bd2310eeaab4da59f8df452a6d03c41f870a8b83edc8b1671a3e48b02dc20ca1a67", 0x94}, {&(0x7f0000000440)="70ae6a6412c7567726bac4c0996c22b4c0d43e3e8cc041aacca7864d5a9026e1711fe3e7c9fdc326f15046d07b3954ee0129cf59ccc3a51faef847", 0x3b}, {&(0x7f0000000480)="2b8a38731ae267a9c3f83712c505900a1f4798ea34cb1f5f6326441dc706f052a1fc1841b4432735af837a70ccb854ef83b50328e3c57f16062742bbb93db8743fbbb05900995e9da967392e282d1b103473780826fda5d0ea363983edc4d9c9fbd85c1e230cae709c718208c7acdd33d6bb2d55f6f632e69f59c3cad46242073c9cf5f4267e43c396d79e38b5d34c5597b107f80c9a0a1d1111e75d83", 0x9d}, {&(0x7f0000000540)="eefd21f65b50b46684e18ea165eb7f5fb495724070fc00a4ac2dbf7c1f4d2d08bea955128ff8b19981f9b3fdd8b9c55c3f377379782b82413715e51258c6716532e3073786334fcc9d3b42f0def202e5061618da002088fbf970390312152a50b4eec7eab1c56a564c1d69f9042ed314ae94f7e78da345ba2db4c60904834a4f0bb1a4947f5c27c5018d9a500c1e214dfb6d232e4c30f3f206881e7f64447285132f5ab1c1283aea5424c2393a697cc059526534540cb186caedfc96229845fff17cc2616a7ae3dc", 0xc8}, {&(0x7f0000000640)="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", 0xfa}, {&(0x7f0000000740)="7f02ffc29cb3a364478a67f72c8ada46034aaec2c8b5956bbcf07c8dab5cd9aa2674cc96e8f8c04c640783c467207027cc96ef4d86577a9c824da7e66daff6c731fc00d2c1ce36c3574d93ffcea21d189c454fa643aebac3ba018addb5a55f352451f4829594b1f54d9f85bb497541c0ff97f454", 0x74}], 0x9, 0x8) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) recvfrom(r2, &(0x7f0000000040)=""/39, 0x27, 0x40012000, &(0x7f0000000180)=@generic={0x8, "5638a1a178dbf915fe34a18e56d94bc8442b615b4dec80a06686addd52731aa0ee52c81ba4a81cdac81631fb7bb3944e819eea39573119a5a049a8b1869b677c15f73ec6be9f30f9d0492a83c2ec9dfdcb7425334f2d67134a5aa6ec6bae537d17ca138d8386879522566017b7db18abe20b349715f1163604e23ff59d6e"}, 0x80) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000880)={0x3, 0x7}, 0xc) sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) [ 1550.895104] binder_transaction: 5 callbacks suppressed [ 1550.895119] binder: 1826:1828 got transaction with invalid offset (56, min 0 max 0) or object. [ 1550.933326] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4b49) [ 1550.953880] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1550.953880] [ 1550.983747] binder_alloc: binder_alloc_mmap_handler: 1826 20003000-20006000 already mapped failed -16 [ 1550.996969] binder: BINDER_SET_CONTEXT_MGR already set [ 1551.003295] binder: 1826:1828 ioctl 40046207 0 returned -16 [ 1551.010504] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1551.010512] binder_alloc: 1826: binder_alloc_buf, no vma 23:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1551.074125] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1551.074125] 23:18:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 23:18:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/8) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) [ 1551.154096] binder: 1853:1855 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:15 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xa800000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1551.226284] binder: BINDER_SET_CONTEXT_MGR already set [ 1551.241227] binder: 1853:1855 ioctl 40046207 0 returned -16 [ 1551.241261] binder_alloc: 1853: binder_alloc_buf, no vma 23:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000280)=""/199) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) sendfile(r3, r4, &(0x7f0000000040), 0x100000001) 23:18:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x2) [ 1551.384145] binder: 1870:1873 got transaction with invalid offset (56, min 0 max 0) or object. [ 1551.394796] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1551.394796] 23:18:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5502) [ 1551.441044] binder: BINDER_SET_CONTEXT_MGR already set [ 1551.453027] binder_alloc: 1870: binder_alloc_buf, no vma [ 1551.466960] binder: 1870:1873 ioctl 40046207 0 returned -16 23:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1551.650815] binder: 1890:1895 got transaction with invalid offset (56, min 0 max 0) or object. [ 1551.709275] binder: BINDER_SET_CONTEXT_MGR already set [ 1551.718383] binder: 1890:1895 ioctl 40046207 0 returned -16 [ 1551.724787] binder_alloc: 1890: binder_alloc_buf, no vma 23:18:16 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x90ddcdad]}}, 0x1c) 23:18:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/8) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) accept(r2, 0x0, &(0x7f0000000080)) 23:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045565) 23:18:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x22000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) kcmp(r1, r2, 0x1, r0, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sync() r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = fcntl$dupfd(r0, 0x0, r4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xf0cb, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") pkey_alloc(0x0, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180), 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000280)=""/225) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x5, 0x1dc4, 0x1f}}, 0x28) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x111) sendfile(r4, r3, &(0x7f00000001c0), 0x100000001) fcntl$setlease(r3, 0x400, 0x1) 23:18:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1551.890519] binder: 1908:1914 got transaction with invalid offset (56, min 0 max 0) or object. [ 1551.926195] binder: BINDER_SET_CONTEXT_MGR already set 23:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5525) [ 1551.933842] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1551.933842] [ 1551.973047] binder: 1908:1914 ioctl 40046207 0 returned -16 [ 1551.973306] binder_alloc: 1908: binder_alloc_buf, no vma 23:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 23:18:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) [ 1552.057105] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1552.057105] 23:18:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xedc0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1552.166184] binder: 1937:1941 got transaction with invalid offset (56, min 0 max 0) or object. [ 1552.217538] binder_transaction: 19 callbacks suppressed [ 1552.217564] binder: 1937:1941 transaction failed 29201/-22, size 0-16 line 3033 [ 1552.280319] binder: BINDER_SET_CONTEXT_MGR already set [ 1552.285671] binder: 1947:1950 ioctl 40046207 0 returned -16 [ 1552.294111] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1552.294128] binder_alloc: binder_alloc_mmap_handler: 1937 20003000-20006000 already mapped failed -16 [ 1552.309575] binder: BINDER_SET_CONTEXT_MGR already set [ 1552.309591] binder: 1937:1941 ioctl 40046207 0 returned -16 [ 1552.309684] binder_alloc: 1937: binder_alloc_buf, no vma [ 1552.333086] binder_alloc: 1937: binder_alloc_buf, no vma [ 1552.335779] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1552.335779] [ 1552.338710] binder: 1947:1954 transaction failed 29189/-3, size 0-16 line 2970 [ 1552.358978] binder: 1937:1951 transaction failed 29189/-3, size 0-16 line 2970 23:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x80086601) 23:18:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:16 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x8000000000000000]}}, 0x1c) 23:18:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1552.457187] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1552.457187] 23:18:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc020660b) [ 1552.530438] binder: 1966:1972 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0x102) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfdffffff00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1552.580717] binder: 1966:1972 transaction failed 29201/-22, size 0-16 line 3033 [ 1552.598595] binder_alloc: binder_alloc_mmap_handler: 1966 20003000-20006000 already mapped failed -16 23:18:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1552.639085] binder: BINDER_SET_CONTEXT_MGR already set [ 1552.639104] binder: 1966:1972 ioctl 40046207 0 returned -16 [ 1552.660958] binder_alloc: 1966: binder_alloc_buf, no vma [ 1552.679750] binder: 1966:1983 transaction failed 29189/-3, size 0-16 line 2970 23:18:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045567) 23:18:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfff) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1552.835005] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1552.835005] [ 1552.840871] binder: 2000:2004 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556a) [ 1552.948951] binder: 2000:2004 transaction failed 29201/-22, size 0-16 line 3033 [ 1552.976853] binder_alloc: binder_alloc_mmap_handler: 2000 20003000-20006000 already mapped failed -16 [ 1553.007006] binder: BINDER_SET_CONTEXT_MGR already set [ 1553.020098] binder: 2000:2004 ioctl 40046207 0 returned -16 [ 1553.022562] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1553.044874] binder_alloc: 2000: binder_alloc_buf, no vma [ 1553.069047] binder: 2000:2021 transaction failed 29189/-3, size 0-16 line 2970 [ 1553.079963] binder_release_work: 21 callbacks suppressed [ 1553.079970] binder: undelivered TRANSACTION_ERROR: 29189 [ 1553.108171] binder: undelivered TRANSACTION_ERROR: 29201 23:18:17 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf401000000000000]}}, 0x1c) 23:18:17 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xedc000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x550f) 23:18:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x5, 0xa4e, 0x200, 0x2, 0x2, 0x3, 0x1f, 0x80000001, 0x100, 0x8c, 0x8927}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'syzkaller1\x00', 0x7}) 23:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1553.336537] binder: 2032:2037 got transaction with invalid offset (56, min 0 max 0) or object. [ 1553.353320] binder: 2032:2037 transaction failed 29201/-22, size 0-16 line 3033 23:18:17 executing program 4: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1553.394538] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1553.394538] 23:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1553.452177] binder_alloc: binder_alloc_mmap_handler: 2032 20003000-20006000 already mapped failed -16 [ 1553.471024] binder: BINDER_SET_CONTEXT_MGR already set [ 1553.476380] binder: 2032:2037 ioctl 40046207 0 returned -16 23:18:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1553.516084] binder_alloc: 2032: binder_alloc_buf, no vma [ 1553.521815] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1553.521815] [ 1553.548352] binder: 2032:2056 transaction failed 29189/-3, size 0-16 line 2970 [ 1553.556607] binder: undelivered TRANSACTION_ERROR: 29201 23:18:17 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfeffffff00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0xffffffffffffff4c) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") accept4$llc(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80800) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) ioctl$NBD_DISCONNECT(r3, 0xab08) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000280)) [ 1553.615259] binder: undelivered TRANSACTION_ERROR: 29189 [ 1553.630016] input: syz0 as /devices/virtual/input/input147 [ 1553.696035] input: syz0 as /devices/virtual/input/input148 [ 1553.847851] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1553.847851] [ 1553.856215] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:18 executing program 0: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) 23:18:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) setsockopt$inet_udp_int(r2, 0x11, 0x6f, &(0x7f0000000080)=0x20, 0x4) 23:18:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) sysfs$3(0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:18 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x900000000000000]}}, 0x1c) 23:18:18 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xe003, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:18 executing program 0: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) [ 1554.185882] input: syz0 as /devices/virtual/input/input149 [ 1554.195048] binder: 2094:2099 got transaction with invalid offset (56, min 0 max 0) or object. [ 1554.213175] binder: 2094:2099 transaction failed 29201/-22, size 0-16 line 3033 [ 1554.221353] input: syz0 as /devices/virtual/input/input150 [ 1554.256765] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1554.256765] [ 1554.286375] binder_alloc: binder_alloc_mmap_handler: 2094 20003000-20006000 already mapped failed -16 [ 1554.323913] binder: BINDER_SET_CONTEXT_MGR already set [ 1554.334075] binder: 2094:2099 ioctl 40046207 0 returned -16 [ 1554.340161] binder: undelivered TRANSACTION_ERROR: 29189 [ 1554.345995] binder: undelivered TRANSACTION_ERROR: 29201 23:18:18 executing program 0: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) 23:18:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = semget(0x3, 0x2, 0x1) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000080)=""/70) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1554.402654] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1554.402654] 23:18:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:18 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xffffff97, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x62f40710, {{0xa, 0x4e23, 0x7, @empty, 0x4}}}, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1554.546047] input: syz0 as /devices/virtual/input/input151 [ 1554.567994] binder_alloc: binder_alloc_mmap_handler: 2127 20003000-20006000 already mapped failed -16 [ 1554.599921] binder: BINDER_SET_CONTEXT_MGR already set [ 1554.605506] binder: 2127:2129 ioctl 40046207 0 returned -16 [ 1554.606616] binder: undelivered TRANSACTION_ERROR: 29189 [ 1554.617667] binder: undelivered TRANSACTION_ERROR: 29201 [ 1554.656772] input: syz0 as /devices/virtual/input/input152 23:18:19 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) 23:18:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1554.713863] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:19 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) [ 1554.851281] binder_alloc: binder_alloc_mmap_handler: 2150 20003000-20006000 already mapped failed -16 [ 1554.863756] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1554.863756] [ 1554.872124] binder: BINDER_SET_CONTEXT_MGR already set [ 1554.908184] binder: 2150:2152 ioctl 40046207 0 returned -16 [ 1554.918063] binder: undelivered TRANSACTION_ERROR: 29189 [ 1554.924080] binder: undelivered TRANSACTION_ERROR: 29201 [ 1554.960096] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1554.960096] 23:18:19 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xe8030000]}}, 0x1c) 23:18:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x90) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x2201) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r3, 0xd9a}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000080)={0xfffffffffffffff8, 0x0, 'client0\x00', 0x3, "cc347348761ff60d", "d5d80ecbc83eee6977d88dec1b85bdc4f88588d83137741ed325671da30f8c42", 0x4, 0xffe000000}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000340)=0x6) ioctl$UI_DEV_CREATE(r0, 0x5501) accept$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c) 23:18:19 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) 23:18:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000180)) close(r1) r2 = socket(0x840000000005, 0x3, 0xff) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffff, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000280)={{0x0, 0x8}, 'port1\x00', 0x8, 0x80000, 0x27e, 0x1, 0x8, 0x2157360e, 0x100000001, 0x0, 0x2, 0x1}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000140)) sendfile(r2, r4, &(0x7f0000000040), 0x100000001) 23:18:19 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1555.367656] input: syz0 as /devices/virtual/input/input154 [ 1555.375180] binder_alloc: binder_alloc_mmap_handler: 2177 20003000-20006000 already mapped failed -16 [ 1555.402071] input: syz0 as /devices/virtual/input/input155 23:18:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) getresuid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)='sha1_mb\x00'}, 0x30) getresuid(&(0x7f00000009c0)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000cc0)=0xe8) r13 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002680)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000002780)=0xe8) lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002880)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000028c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4}}, &(0x7f00000029c0)=0xe8) getgroups(0x2, &(0x7f0000002a00)=[0xffffffffffffffff, 0xee00]) fcntl$getownex(r1, 0x10, &(0x7f0000002a40)={0x0, 0x0}) r21 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0, 0x0}, &(0x7f0000002ac0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b00)={0x0}, &(0x7f0000002b40)=0x1) r24 = geteuid() stat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002c40)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000002d40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0, 0x0}, &(0x7f0000002dc0)=0xc) r29 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002e00)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@broadcast}}, &(0x7f0000002f00)=0xe8) getresgid(&(0x7f0000002f40)=0x0, &(0x7f0000002f80), &(0x7f0000002fc0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003300)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003340)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000003440)=0xe8) r34 = getgid() r35 = getpgrp(0xffffffffffffffff) r36 = geteuid() r37 = getgid() r38 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003480)={{{@in=@rand_addr, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000003580)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0, 0x0}, &(0x7f0000003600)=0xc) r41 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003640)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000003740)=0xe8) r43 = getegid() sendmmsg$unix(r1, &(0x7f0000003840)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="9a13168ee1dc11795b2472eb5b02ade100d9348ffe4a1950bae35897564db6b2c2753f8402bdc2b039d66dfddb59f500f0e982b3b4099b386dd67774e8317da03d71d42de7ba242d1af5af3836227fd5a6", 0x51}, {&(0x7f0000000300)="408880ff380eb0a88ec6924ffd8bb997301a682c7fe47a3c029c218d43eb4dacd1234d976b1993709bf1ec38e6b03192ef2982ba8612f5ab2c4ba008d400d0940eb65cdba91932756f97a484f0045a80e759348248174618f3ffa35b463e33bc8a832799842f0c4be7abe7bb03287681c160560b18b54dec2719e63a7c1b0f62b8af50422665341267237362c0ed2146e5a451d5163bbb2acdacd658bc5a2cbf278874267ba7532cec097184652c7cd43cee61b7d6678b", 0xb7}, {&(0x7f0000000040)="4ea465b4dc3fc7ea624b7d311b99895d06e61af8005f528995d38c9e56c2fd3b0bcba8d3b26a1da6d0b6ab", 0x2b}, {&(0x7f00000003c0)="0f4a062b1d7d64974a582d347e25c7e14efcb74628a3393ce736128ebf08fca2eac8b59c91a62d4614259e50f3f68584f137e3d184a00fc83c21e84221145d48bed7fc085a11be1137a0124eaa90f3c14618eb4b2d4432968f496eefad32cdcdc4f8ccecb9b2376796c3520b506cd054df47974b837b3055a385a899f459ca6019427ed458d38318adb48a07d60c3996110ec75bcd60f7e56bbe0c396cb747646dcb1ecd1f3cb2e7261755d623401bb1dd97b4", 0xb3}, {&(0x7f0000000480)="17be45db22352c7c1a1a3609cb28fa7b6fc812b7a4da8aabf09ef0ad82f6d808f6301dba68e9e3a5a3f37a7cb7fdce5db9803de06b351bde7603f30eb6147ea9235998856bd62afbdfe9bf8036fda4f28053166b104691095b2c95aa963859a9c06650c21e813fb444f182784e52593e321a18f8af6eb331f457a597aab575c6352b902e7558334c8ddbd1a7e9a546c3251285fed221188e1239a1b3d8edf1ddc5731ad2d97f252104dcf2c3b929bc02721951b37689e45c6a03f044cd7281a56a77f016c28b1a01145e1a719795d73c1360700cb1287d6e95cdfd3bd0c1", 0xde}], 0x5, &(0x7f0000003a40)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00000000200000000000000001000000020000dc222fe124892b21faa0d2babc4f32523b0323b95afa7e9f76f87ffbc9cae1d0f9d1628dd76843c51f5989ccca6fe6a0fa861b10893d19e05fe47e4dff3e9853194860c2000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x800}, {&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000e80)="6a557510cb480657a5ec0353d9aa09e1ccf63e595063423692e0fe55cca5e05f19afeb7e9d8e67b6819f850695fe421b36e6044f81584ed23ddbb753a4fa432ad37eb6b8f54e4af686142bc3ed734874f23d9582307edd26c4192e276d7cfa8da505586785f08e436bc0a994d2e0cc9f1f73e30285c01352c517d3ae5098afbde5eb45e5aed6412736422c07e6113336e51634f5769dad3138e796ff962a2ed570cbc4e589856446d2b501ce75daa4a455195f35e3201f87fe2c005db662bed36ec799c55f81651c37de8226f5b8fd07045b069bb7be9b5e9b8cbde21ed4ceeb10c0b7bbda70b05f0b15d1be8c6ac0fd6ed0d0bd0e21", 0xf6}, {&(0x7f0000000f80)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000010}, {&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002040)="6e464a4b345e0acd624cc27e9079e36f5b52b631e0e8778cf7f4038b04cc179e70de1e067195932845b961411bc29b6eb38dde394e4e1c9c4f1dc8b7bfce7dfe015ffd0383df7c3c539fe86daf5218472f5b1b4c5a959611f170dc09aa4a047cd8c3e89cb5214c5306ec47a1c655274acfe685a58895ecc6556661cecc07a9c607c98b2489", 0x85}, {&(0x7f0000002100)="0c7d64d09766d14b1ade6ead29f60e6f6d2e363d153cd4fbbc1365ee4a444bcc36eb15eda011793b993fd1e758713bd1a0c2414e291d3e1f2e2c38f3dc8ea2df013f7e8831e15703727f8fe0ad72d5410e893e5bd7fa017b535d074c10227d3b7ac66ab3cd5437baf2177a2825c760fc33624b0c", 0x74}, {&(0x7f0000002180)="e67c9462e2e1d989881c20fa1a5b00d1c659714414fbd8f888102116d270db090a8825d14c67747369d46c83b6dc84dd8c6f2d948732736badb3da", 0x3b}, {&(0x7f00000021c0)="ae7cd7cbbac0b73bd2bde644ef6215fc2b0dfa932c3c497bb3dc6f7a0161d60e0e8b424e14bbd12fdb854f6657dbf83e64cfe1ab2036dde2fbd0b222cb170561e832a2e493853dfcb334c24f5298e02cd0f79ed337c1c07d5381b50b1f86a3f5b56b19787dc0a3b0c5eed8f1731b52cee9e93e096047edb15eec0f7c914ac1b08374e61986cd9b4981844164614bbc91dd5c87afe77ef3aefb7708fad69b772362d5c7604cb9c98d72af0bf463bef530d1d5c2a9b9037c72907f41522433ecac014d5dce1e8d4ea37e61bec7ff60934f55a267a58437e3", 0xd7}], 0x4, 0x0, 0x0, 0x40090}, {&(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002380)="285482dddfa42e97ea6ab9e2cb9b257d0ed48c27a63edc32a3e5f22d6ccd3352e46043863cfc2fdc7b05f86f02cde5cdecbbc0b8b17b41de7770a885813ebc3d7ff150f27de79504469cbaa6687c4469e3e0c455033fc0c927a7727524156b830d32c7fc56e62fc3cdd48c194f83e0180958afaacef9fed13b44a0f98fd454f38c36f50dfc9b7493c91a3846d7e048cd7dc69dd365c102f2fcfc0ffeb1f3fbc4331016d7ce43cc9e2b56303648d9a7c53017c43aa363513b0b08f6fb6f84855fa633ddf5adefa6cef9e3bf9be11d3a2aa0d43104cd92d60ea84ec0bd5db52d6811d4fe253ce79c9f", 0xe8}, {&(0x7f0000002480)="de500280094d8ab08e75d194dd781371e9cc96ed481f7f7d4aaea6554a2f75ab28a72d0b2f43ff4f8358330136e3fb8c371e46628f30dc29c4e29856565ac8ac53299f307f5e7e917e6cb89191be5cde82f71eeedfe847bb927e0aec86f27349a00e9260d210efcc5afc050c6651ad112e103ce9c81fbf64a1e2726c5450591bde23d7f057e2e4e144d322a0f07b08a649ff9472432e0583bca462263a1ab6f87c690ad5b5ca9b44814f4ab03065f8f6bd963d3824c5bb2a6cb411e138d0de", 0xbf}, {&(0x7f0000002540)="d3be12c994f9497ab2d752dc280964f9982b3fa65ce7bbd9779a12fc895b78b07aa40c029be8490e266c6672a9a8ae74d391567d6fbd1a42d6f21dfc5aadadcdd9477729c157720b566d6a3b4f684320b464cbc5de670d1625b913d1270fe9f1c76c89c043e153120ef20e13bce75b339c91c92474d1244602ed05b3558b0c79716a957bddde7621b0b7e4a5fe470e11f09f9012aed434e6113cc8740549732fc1b63d7bdaf2ef67395ab5bf45d86822", 0xb0}], 0x3, &(0x7f0000003000)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x138, 0x90}, {&(0x7f0000003140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f00000031c0)="f25e42af232cc4ead4c570c9a33716fed8e696af27dbd6885349a5d8d6d194bd78d3f56ec706c44aa6bb803c3f256c3310f4634a0c1cf75744737589c7754ba0a4dd4eaf9a23a3c6da682cf4a018c92b62fb2077f4e5723ab027d56572d099f1adceb241ed5a1ddf3b1b12ac17db12638c4f19ecf523bb38cc8779f92f94b31f", 0x80}, {&(0x7f0000003240)="87bec7e166ca4786f734bd7d99cd12eb08325fdc680e828a13d88e2bd2c1cad17f49490720f1c945f2820b795d4e7740d2f9128228afa4e747b5af1e4f959a81cd9c0ac344a15a71bb75a9390ef00121e1c2081e033cc0ec0e71cb298b0d33a8fd4c745dbfcc82d0", 0x68}], 0x2, &(0x7f0000003980)=ANY=[@ANYBLOB="2000535949e1de7e8b803f0000000000000100000002000000", @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r35, @ANYRES32=r36, @ANYRES32=r37, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r43, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000000}], 0x5, 0x10) r44 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r44, &(0x7f00000002c0), 0x10000000000443) accept(r1, 0x0, &(0x7f0000000080)) [ 1555.415696] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.421503] binder: 2177:2184 ioctl 40046207 0 returned -16 [ 1555.436617] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1555.436617] 23:18:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) finit_module(r0, &(0x7f0000000080)='/\'!&\x00', 0x2) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000140)={0xd, 0x5, {0x0, 0x81, 0x84a, {0x21, 0x8}, {0x8c1d, 0x4}, @rumble={0x401, 0x7}}, {0x57, 0x10000, 0x4, {0x10000, 0x7fffffff}, {0xaa8, 0x7}, @ramp={0xf3, 0xfffffffffffffff9, {0x6, 0xfff, 0x0, 0xc5}}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r4, &(0x7f0000000040), 0x100000001) [ 1555.506034] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x5, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1555.616124] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1555.616124] [ 1555.653808] binder_alloc: binder_alloc_mmap_handler: 2211 20003000-20006000 already mapped failed -16 23:18:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfffffffe, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1555.683758] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.689356] binder: 2211:2214 ioctl 40046207 0 returned -16 [ 1555.714055] input: syz0 as /devices/virtual/input/input156 [ 1555.811328] input: syz0 as /devices/virtual/input/input157 [ 1555.876023] binder_alloc: binder_alloc_mmap_handler: 2224 20003000-20006000 already mapped failed -16 [ 1555.903938] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1555.903938] [ 1555.917116] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.922876] binder: 2224:2231 ioctl 40046207 0 returned -16 23:18:20 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xe]}}, 0x1c) 23:18:20 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @local}}, 0x8a, 0x1}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={r1, 0xc6, "f3c72e71db075efaad6f96d4497255792f73f98e0ec0d8d12cb1e46e3919c8e4fc582af3c327afa4f724a45c3012092a8d4fb445db0c488dbf7fe2068bc0a3bc13d2cb9f50060abe9b577de1929eed74eeefb7caac255b2649004994cabfb04d4a5bcccf5244d160caea4a428a1d5f3f7b3ac17c0694582241ac7a736718ceff7ef57bcb738f11f3c894765567b724deee0bf0aaa75562d045801cbf2de1fea3bde1c350465e173a3e57fe66f100502d332140a555b2c6520455f9565c6095e39d95fde5eb95"}, &(0x7f00000001c0)=0xce) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x259}, 0x28, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r4, r5, &(0x7f0000000040), 0x100000001) 23:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x402, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) socket$kcm(0x29, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x950, {0x6, 0x3, 0x3, 0x0, 0x7ff, 0x9}}) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6b6b6b, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1556.286646] binder_transaction: 5 callbacks suppressed [ 1556.286660] binder: 2250:2255 got transaction with invalid offset (56, min 0 max 0) or object. [ 1556.315002] input: syz0 as /devices/virtual/input/input158 [ 1556.330219] binder: BINDER_SET_CONTEXT_MGR already set 23:18:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1556.345081] binder: 2252:2260 ioctl 40046207 0 returned -16 [ 1556.362582] binder: 2252:2260 got transaction with invalid offset (56, min 0 max 0) or object. [ 1556.372188] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1556.372188] 23:18:20 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getscheduler(r0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x2) listen(r1, 0x9) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8, 0x103100) write$uinput_user_dev(r2, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$input_event(r2, &(0x7f00000000c0)={{r3, r4/1000+10000}, 0x5, 0x9, 0x7}, 0x18) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 1556.440057] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 1556.440064] binder_alloc: 2252: binder_alloc_buf, no vma 23:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1556.487295] binder: 2267:2272 got transaction with invalid offset (56, min 0 max 0) or object. [ 1556.505608] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1556.505608] [ 1556.531810] input: syz0 as /devices/virtual/input/input160 23:18:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000580)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000500)="2f6578650000c10000000000e9ff0700040000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r5, &(0x7f0000000040), 0x100000001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bpq0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xce) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@multicast2, 0x4e21, 0x0, 0x4e23, 0x8, 0x2, 0x0, 0x0, 0x67, r6, r7}, {0x6, 0x7, 0x8, 0x3ff, 0x4, 0x401, 0x0, 0x633c0c79}, {0x7, 0x6, 0x6, 0x2}, 0x7, 0x6e6bb6, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d2, 0x32}, 0x0, @in6, 0x0, 0x2, 0x2, 0x1, 0x1, 0x1000, 0x3}}, 0xe8) 23:18:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1556.571497] input: syz0 as /devices/virtual/input/input161 23:18:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x22, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1556.668571] binder: 2286:2288 got transaction with invalid offset (56, min 0 max 0) or object. [ 1556.694878] binder: BINDER_SET_CONTEXT_MGR already set [ 1556.719404] binder: 2287:2291 ioctl 40046207 0 returned -16 [ 1556.747032] binder: 2287:2296 got transaction with invalid offset (56, min 0 max 0) or object. [ 1556.789402] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1556.789402] [ 1556.802507] binder_alloc: 2287: binder_alloc_buf, no vma [ 1556.876693] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1556.876693] 23:18:21 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x4]}}, 0x1c) 23:18:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/181) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:21 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6800000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1557.043434] binder: 2318:2323 got transaction with invalid offset (56, min 0 max 0) or object. [ 1557.073392] input: syz0 as /devices/virtual/input/input162 [ 1557.084043] binder: BINDER_SET_CONTEXT_MGR already set [ 1557.103854] binder: 2321:2327 ioctl 40046207 0 returned -16 [ 1557.118963] binder: BINDER_SET_CONTEXT_MGR already set [ 1557.118986] binder_alloc: 2318: binder_alloc_buf, no vma [ 1557.124495] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1557.124495] [ 1557.142151] binder: 2318:2323 ioctl 40046207 0 returned -16 [ 1557.165317] input: syz0 as /devices/virtual/input/input163 23:18:21 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280)=0xfffffffffffffff7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x181001) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r6, 0x7fffffff}}, 0x10) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="be00000041797e4549c9d4d9b7a33d2dd09e214af1716c856009592cf10ad4235ae170410beea70560f7a5e9aa5710ede411055f7ef08071cca75cac269ab1cae4f11a9c15a55aee51de425f33bfb5a9b2ddaee241d7985fb600315b9c0d932fc5734503708107007ae077ad31d38e93ecd32f424db10c6998d1596a946f8563c387adee58b68f0aada2d9494b5aa4da77bf32e5adf0d5155a2f3f3fa2d613d5241d7448acb539dc0d8a7cdf8b99b612bdd5ccc86f524a659eb8cc99e976a0d64d42"], &(0x7f00000003c0)=0xc6) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000400)={r7, 0x4, 0x3f, 0x101, 0x1, 0x10001}, &(0x7f0000000440)=0x14) 23:18:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xfffffffffffffff7, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:21 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xffff1f0000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1557.361316] binder: 2350:2355 got transaction with invalid offset (56, min 0 max 0) or object. [ 1557.381943] binder: BINDER_SET_CONTEXT_MGR already set [ 1557.389007] binder: 2351:2353 ioctl 40046207 0 returned -16 [ 1557.395709] binder_transaction: 21 callbacks suppressed [ 1557.395729] binder: 2350:2355 transaction failed 29201/-22, size 0-16 line 3033 [ 1557.407686] binder: 2351:2353 got transaction with invalid offset (56, min 0 max 0) or object. [ 1557.431623] binder: 2351:2353 transaction failed 29201/-22, size 0-16 line 3033 [ 1557.432942] binder_alloc_mmap_handler: 3 callbacks suppressed [ 1557.432958] binder_alloc: binder_alloc_mmap_handler: 2350 20003000-20006000 already mapped failed -16 [ 1557.459412] input: syz0 as /devices/virtual/input/input164 [ 1557.467912] binder: BINDER_SET_CONTEXT_MGR already set [ 1557.474355] binder: 2350:2355 ioctl 40046207 0 returned -16 [ 1557.489136] input: syz0 as /devices/virtual/input/input165 [ 1557.504209] binder_alloc: 2350: binder_alloc_buf, no vma [ 1557.518320] binder: 2350:2371 transaction failed 29189/-3, size 0-16 line 2970 [ 1557.526172] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1557.526172] 23:18:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)=@ipx, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000440)=""/14, 0xe}, {&(0x7f0000000480)=""/21, 0x15}], 0x8, &(0x7f0000000600)=""/166, 0xa6}, 0x5}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/83, 0x53}, {&(0x7f00000006c0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000000900)=""/95, 0x5f}, {&(0x7f0000000980)=""/113, 0x71}], 0x7, &(0x7f0000000a80)=""/65, 0x41, 0x100000001}, 0x80000001}], 0x2, 0x2001, &(0x7f0000000b80)={0x0, 0x1c9c380}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:22 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2c00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:22 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xff0f0000]}}, 0x1c) 23:18:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x1, 0x3, 0x400) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/mls\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000280)="858420cdf94ec1767798ce6891fe764b22cc1b83e8e89ff7490643f5c7206d1c25a74ebdc2c55dcb26cb43a7776e6da1d9d2e8cfedc50d85892a2fa1a59974f8c3de0d91243d20f7ada9c5a7a4a1a8d74e7da3d7f832a4f2c2f398225b361d69c12b9f219f044a53835d3b9904f32fde16450a4cae76f87525e38803ee4fa98ab4d0b10695e8f6aaf30462da33f730c4fdefe6a865a42890f20e4b3fbb1053b7a5c5c827536a8d1c4bdee0348f3ad07a7fe095bf5e73699e894f543deecbceb8e6d49fd3f6a802bcc2b27b2ddec14d0637afb456ac7dbad91ba66d6b180ac2bb2b6e", 0xe2, 0x9c}, {&(0x7f0000000140)="d99f4a93d78fc7634e8450cd387ecb3de50ba1e9a7728acad4431eff3b34e8c2312e26273790bb5d9b651eaa3248887388a2b60420a1ac8c33d364381992be456fd894969fc02ce80a049235ee7fb2a074190e3f57fcd109e7aa29612fc138f9", 0x60, 0x9}, {&(0x7f0000000380)="24565af817d89aebd69645c5ec9948bb0204e1515f95fc9616f304cb7728576830ff1844edf4aa934a20ab0a52aecf96b6d6f40b221e0fd6ae6df508ebbf2f0ebf", 0x41, 0x1}, {&(0x7f0000000400)="ad14b8e2d9719c964f9ca997edc49e863e11b20014c4385adc4307cb17bfefda72cc08bf7c1d2c8c492d91b7ddfd0d0fb318c59bb9276e75de4d75d0f14e17668df2ed11a6faf60cc50e85ecbd5caf2e7b91898c536e70644b28dceed1301b683e1eae6c120329d92d020750e9b6ae1fa28a28e19d8d3bfefe4dd3461cc1d522df6f2c0ea769d38856fbbdf936da3c8fe9fd7ff96e4268f4212c10b81807fdd847d939a78e94c1ca", 0xa8, 0x2}, {&(0x7f00000004c0)="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", 0xff, 0x2}, {&(0x7f00000005c0)="1e5b24186963f295fd1f3c5313c7296ea2d35ea4de54b00d1ca84d7168960ad8f999962d733c504eb717e4f1f61e9adcb2bbf198124f249adb67e0af6472aa11a8c9b8b12a85fa658ec6616254cfcd70a7fe8aa011cdfd3152e442a45bdb5f1e72efc194fadc58dd69e0aac69618a2f902e4f1434f9a2ee28646ce2aad64", 0x7e, 0x4}, {&(0x7f0000000640)="c03547c92f664a1e8113e66e2a190dcd03c6a83dda8f0207ab532e557cb723604b7c96e48d008df9a3c38f713a397a5ec1a0731a37a80c2137b5a17c53117c946baa29f9f781c8a58ed49c121e2ded2a43536ffc82ba1c232c0f1e09fa402847c5e7241a4501423dcfd7740beade9764ef37d38280fc3a848e5bb124fefcab2280f0e55732717b605336d0a8f7882620ba4da944", 0x94, 0x7f}, {&(0x7f0000000700)="d1ab77257071e33e88bc9e763d74ac82f092ea6d732a8b4600e170ef8ddc44a7dc1ea9cb672c97b4aeb9e90c013fd272afcbd788034f64fcce87a21bff16037799bf50e3b4bdbc921eb388fc443d5704fddf39174be64dd234125b5229b15e6722dc30d0e3d67ec6d2ad3f204c5cc96864149c0bcf4807b76a28d9372c3f672790bda9cf9472f07c52e30971ac01cc931c9a64651a716914de5244595deb7eb1", 0xa0, 0x4}, {&(0x7f00000001c0)="51e14253f1a18a9253cf8dc4e6894546246bf888dc2d68ff49f72591b470565091955d8392527d162976b4", 0x2b, 0xcd4}], 0x1002008, 0x0) [ 1557.864304] binder: 2390:2392 got transaction with invalid offset (56, min 0 max 0) or object. [ 1557.875858] binder: 2390:2392 transaction failed 29201/-22, size 0-16 line 3033 [ 1557.882133] binder: BINDER_SET_CONTEXT_MGR already set [ 1557.893319] binder: 2386:2394 ioctl 40046207 0 returned -16 [ 1557.907319] input: syz0 as /devices/virtual/input/input166 [ 1557.918435] binder: 2386:2394 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:22 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1557.959416] binder: 2386:2394 transaction failed 29201/-22, size 0-16 line 3033 [ 1557.967088] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1557.967088] [ 1558.013024] binder_alloc: binder_alloc_mmap_handler: 2386 20003000-20006000 already mapped failed -16 [ 1558.026940] input: syz0 as /devices/virtual/input/input167 [ 1558.064219] binder_alloc: 2386: binder_alloc_buf, no vma [ 1558.089666] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1558.089666] [ 1558.103558] binder_release_work: 20 callbacks suppressed [ 1558.103565] binder: undelivered TRANSACTION_ERROR: 29201 [ 1558.114597] FAULT_INJECTION: forcing a failure. [ 1558.114597] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.114616] CPU: 0 PID: 2423 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #71 [ 1558.114636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.127480] binder: 2386:2417 transaction failed 29189/-3, size 0-16 line 2970 [ 1558.132990] Call Trace: [ 1558.133015] dump_stack+0x1c4/0x2b4 [ 1558.133038] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1558.133068] should_fail.cold.4+0xa/0x17 [ 1558.133088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1558.146297] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1558.149806] ? graph_lock+0x170/0x170 [ 1558.149824] ? __mutex_lock+0x85e/0x1700 [ 1558.149843] ? uinput_ioctl_handler.isra.10+0xad/0x2540 [ 1558.149858] ? graph_lock+0x170/0x170 [ 1558.149881] ? mutex_trylock+0x2b0/0x2b0 [ 1558.149901] ? find_held_lock+0x36/0x1c0 [ 1558.149921] ? __lock_is_held+0xb5/0x140 [ 1558.149950] ? ___might_sleep+0x1ed/0x300 [ 1558.170878] binder: undelivered TRANSACTION_ERROR: 29189 [ 1558.180790] ? arch_local_save_flags+0x40/0x40 [ 1558.180807] ? avc_has_extended_perms+0x8cb/0x15a0 [ 1558.180836] __should_failslab+0x124/0x180 [ 1558.180857] should_failslab+0x9/0x14 [ 1558.180878] kmem_cache_alloc_trace+0x2d7/0x750 [ 1558.241835] input_allocate_device+0xaf/0x370 [ 1558.246348] ? input_devices_seq_start+0x110/0x110 [ 1558.251308] ? avc_ss_reset+0x190/0x190 [ 1558.255315] uinput_ioctl_handler.isra.10+0xee7/0x2540 [ 1558.260612] ? rcu_bh_qs+0xc0/0xc0 [ 1558.264175] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1558.269574] ? ___might_sleep+0x1ed/0x300 [ 1558.273736] ? arch_local_save_flags+0x40/0x40 [ 1558.278337] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1558.283283] uinput_ioctl+0x4c/0x60 [ 1558.286926] ? uinput_compat_ioctl+0x90/0x90 [ 1558.291351] do_vfs_ioctl+0x1de/0x1720 [ 1558.295259] ? ioctl_preallocate+0x300/0x300 [ 1558.299689] ? selinux_file_mprotect+0x620/0x620 [ 1558.304462] ? __sb_end_write+0xd9/0x110 [ 1558.308539] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1558.314080] ? fput+0x130/0x1a0 [ 1558.317367] ? do_syscall_64+0x9a/0x820 [ 1558.321359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1558.326902] ? security_file_ioctl+0x94/0xc0 [ 1558.331320] ksys_ioctl+0xa9/0xd0 [ 1558.334798] __x64_sys_ioctl+0x73/0xb0 [ 1558.338694] do_syscall_64+0x1b9/0x820 [ 1558.342585] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1558.347975] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1558.352907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1558.357784] ? trace_hardirqs_on_caller+0x310/0x310 [ 1558.362824] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1558.367848] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1558.372877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1558.377733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1558.382938] RIP: 0033:0x457569 [ 1558.386159] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1558.405058] RSP: 002b:00007f23540f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:18:22 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x48000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) r1 = socket(0x840000000002, 0x3, 0xff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000000c0)) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r1, r4, &(0x7f0000000040), 0x100000001) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000140)="a14fe24fcb89a1e9621b781300f1d1660903864993d53ed7ee31711b8a6502fd32c32a31f62edb6c50ff352b556abe3d5e75371fea31f52582198f9997705e0f681abff8a7a8d33df2c7a28aa700e7573321adbe688f1ef18d271777bd42835214da756be65260cf70f5f71b778f") 23:18:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1558.412772] RAX: ffffffffffffffda RBX: 00007f23540f9c90 RCX: 0000000000457569 [ 1558.420039] RDX: 0000000000000000 RSI: 000000004008556c RDI: 0000000000000003 [ 1558.427306] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1558.434575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f23540fa6d4 [ 1558.441850] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 23:18:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000740)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:22 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1558.534473] binder: 2429:2433 transaction failed 29201/-22, size 0-16 line 3033 [ 1558.567761] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1558.567761] 23:18:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x292, 0xd, 0x2, {{0x1, 0x1, 0x2}, 0x2}}, 0xd) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x80, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) close(r2) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)={0x0, 0x1, [@local]}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000300)=0x0) rt_sigqueueinfo(r6, 0x1b, &(0x7f0000000340)={0xf, 0x80000001, 0x0, 0x80000001}) sendfile(r4, r5, &(0x7f0000000040), 0x100000001) [ 1558.626459] binder_alloc: binder_alloc_mmap_handler: 2429 20003000-20006000 already mapped failed -16 [ 1558.646465] input: syz0 as /devices/virtual/input/input168 [ 1558.658191] binder: BINDER_SET_CONTEXT_MGR already set [ 1558.667621] binder: 2429:2433 ioctl 40046207 0 returned -16 23:18:22 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x74000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1558.707301] binder_alloc: 2429: binder_alloc_buf, no vma [ 1558.731192] binder: 2429:2450 transaction failed 29189/-3, size 0-16 line 2970 [ 1558.748394] binder: undelivered TRANSACTION_ERROR: 29201 [ 1558.767139] input: syz0 as /devices/virtual/input/input169 23:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x80087601) [ 1558.812161] binder: undelivered TRANSACTION_ERROR: 29189 [ 1558.928123] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1558.928123] 23:18:23 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x4000]}}, 0x1c) 23:18:23 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008552d) 23:18:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2200, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xc080, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000140)=""/158) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r4, &(0x7f0000000040), 0x100000001) [ 1559.127945] binder: 2473:2480 transaction failed 29201/-22, size 0-16 line 3033 [ 1559.151608] input: syz0 as /devices/virtual/input/input173 23:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008554c) [ 1559.171266] binder_alloc: binder_alloc_mmap_handler: 2473 20003000-20006000 already mapped failed -16 [ 1559.211002] binder: BINDER_SET_CONTEXT_MGR already set [ 1559.218066] binder: 2473:2480 ioctl 40046207 0 returned -16 [ 1559.231617] input: syz0 as /devices/virtual/input/input174 [ 1559.238331] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1559.238331] [ 1559.265099] binder_alloc: 2473: binder_alloc_buf, no vma [ 1559.281743] binder: 2473:2492 transaction failed 29189/-3, size 0-16 line 2970 [ 1559.290299] binder: undelivered TRANSACTION_ERROR: 29201 [ 1559.315447] binder: undelivered TRANSACTION_ERROR: 29189 23:18:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xe1d, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @remote, 0x8}, {0xa, 0x4e20, 0x2, @remote, 0x782b}, r2, 0x81}}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xb4000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000080)={[], 0x7, 0x0, 0x0, 0x0, 0x81, 0xd000, 0x4001, [], 0x8001}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045565) 23:18:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1559.372274] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1559.372274] 23:18:23 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x68, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1559.504999] input: syz0 as /devices/virtual/input/input177 23:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5452) [ 1559.547576] binder_alloc: binder_alloc_mmap_handler: 2509 20003000-20006000 already mapped failed -16 [ 1559.568112] binder: BINDER_SET_CONTEXT_MGR already set [ 1559.573968] binder: 2509:2512 ioctl 40046207 0 returned -16 [ 1559.591522] input: syz0 as /devices/virtual/input/input179 [ 1559.596609] binder_alloc: 2509: binder_alloc_buf, no vma [ 1559.612900] binder: undelivered TRANSACTION_ERROR: 29189 [ 1559.618977] binder: undelivered TRANSACTION_ERROR: 29201 [ 1559.779963] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1559.803468] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1559.803468] [ 1559.868277] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1559.868277] 23:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 23:18:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) io_setup(0xd8c, &(0x7f0000000080)=0x0) r3 = gettid() r4 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x202103) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x50, &(0x7f00000012c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001380)={r3, r4, 0x0, 0x3, &(0x7f0000001280)='{]\x00', r5}, 0x30) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x404040, 0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x8001, r0, &(0x7f0000000280)="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", 0x1000, 0x800, 0x0, 0x2, r6}]) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r7, r8, &(0x7f0000000040), 0x100000001) 23:18:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:24 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xadcddd90]}}, 0x1c) 23:18:24 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40086602) [ 1560.116987] binder_alloc: binder_alloc_mmap_handler: 2544 20003000-20006000 already mapped failed -16 [ 1560.130042] input: syz0 as /devices/virtual/input/input181 [ 1560.136214] binder: BINDER_SET_CONTEXT_MGR already set [ 1560.144612] binder: 2544:2553 ioctl 40046207 0 returned -16 [ 1560.144757] binder_alloc: 2544: binder_alloc_buf, no vma 23:18:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1560.172844] binder: undelivered TRANSACTION_ERROR: 29189 [ 1560.184941] binder: undelivered TRANSACTION_ERROR: 29201 [ 1560.192036] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1560.192036] 23:18:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc0189436) [ 1560.344471] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1560.344471] [ 1560.406656] input: syz0 as /devices/virtual/input/input184 [ 1560.418700] binder_alloc: binder_alloc_mmap_handler: 2579 20003000-20006000 already mapped failed -16 23:18:24 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x8000000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1560.456025] binder: BINDER_SET_CONTEXT_MGR already set [ 1560.461936] binder: 2579:2582 ioctl 40046207 0 returned -16 [ 1560.476101] input: syz0 as /devices/virtual/input/input185 [ 1560.498627] binder_alloc: 2579: binder_alloc_buf, no vma 23:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40085575) 23:18:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:24 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200000, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000380)={0xffffffffffffffff, {0x9d, 0x9, 0x8, 0x1, 0x3ff, 0x8}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xc8c5, 0x440) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000280)=""/158) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)={0x9, 0x57, "dc0be427b2fb636bc4955446a46ecb1f9e28833be44e89487cecb914c7cb745062e3eb883526f4d28d198be7353f1e138b26b5ae91282943ef7c77d5fd53eb024325f64b6d6ffb8f25687d40413223c436a2b8e13ed44b"}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000240), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r3, r4, 0x7, 0x81, &(0x7f0000001040)="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", 0x5, 0x5, 0x1f, 0x8, 0x9, 0xd72, 0x80, "34573ebb826bb3890fe9d16f3fa4d864ddf87615446530b31971687c132da88da3ba7c7a5a97cefd2b0491a7b3be4e52abb11724a03510819db9473b14a5d9256b5aa3492fbfcd79ae5de0f4e6f9e052b8f8409e39bed24955617008906514643635ccae84ab961866279ec26e7dbf5ef024dd47f7470b11d1211593"}) 23:18:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r3 = socket(0x840000000002, 0x3, 0xff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xfffffffffffffff8}, &(0x7f0000000140)=0x8) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @broadcast}}, 0x10000, 0x100000000}, &(0x7f0000000180)=0x90) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r0, r5, &(0x7f0000000040), 0x500000001) [ 1560.733863] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1560.733863] [ 1560.750114] input: syz0 as /devices/virtual/input/input187 [ 1560.760093] binder_alloc: binder_alloc_mmap_handler: 2598 20003000-20006000 already mapped failed -16 [ 1560.792988] binder: BINDER_SET_CONTEXT_MGR already set [ 1560.798552] binder: 2598:2608 ioctl 40046207 0 returned -16 [ 1560.821863] input: syz0 as /devices/virtual/input/input188 23:18:25 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xaaaa0000]}}, 0x1c) 23:18:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008552b) 23:18:25 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2c000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) close(r2) r4 = socket(0x840000000002, 0x3, 0xff) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000001c0)={0x2c, 0x18, 0x15, 0x7, 0xa, 0x4, 0x3, 0x1}) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r4, r6, &(0x7f0000000040), 0x100000001) 23:18:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1561.064454] binder_alloc: binder_alloc_mmap_handler: 2627 20003000-20006000 already mapped failed -16 [ 1561.077148] input: syz0 as /devices/virtual/input/input189 23:18:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400a00) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) fcntl$setstatus(r0, 0x4, 0x6000) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x7}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4}, 0x8) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000002740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002700)={&(0x7f0000000380)={0x2348, 0x14, 0x5, 0xef574648e2382538, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0xa}, [@generic="369cec64596b158a153051df350b947d2f37d90ef2285e950f31196c7a9552af87ab2b72883eaf92dc30da27f8e3475fe1e162f9f46f505bc6b843a24b55dba977f0d4dce2e1a5865e9e83a3f53a122003a6a9d18d3ef6cf936d1eb20e2e4ee1053a851c3d364d608d457dca7bec53602ea8ce8f3acb93e2f78c6b8791531d12058565de8e1a551fa99652c13edfa5082cca9704b04dcf077ba1895c8497facacf46dc6ae0ebbf0bfb32c767fe7cd685d7288978a16e69b22d842f8b4059c50ea8221336d10e4eed5beee0b0efc2365142810aea874ff5c72299353592e01b48c3", @nested={0x1120, 0xd, [@typed={0x1004, 0x42, @binary="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"}, @generic="1d02f5ea44e62f74b1d5c71630a728fea9d660a1a8aca2b3c9a1a3b8cef34d1b1e2bd4a57fd2cc3978ed47c285cc1face486b1f603bf5d2bb7f004f0c9f152856fec2c9457ca620b6b74b6d13c2883c57719b6b6ddd3060952de405a7397ab3e48ee9d4e4a754a8c74dd9634edddf201ec0c3b3fe693a071168209bcbce4c86668060890e8106f76f771eb5085f4a8010beffd744fdd7fa3e0740fb64d8819be2b42dc0ff5a0347d61fd90fef48b67b3515b065d0d04dfeaa595c79f60a6c99d063e6c5922b6f9f8aeb66bd41d999b611b921204814a1ec6070fd32fe49cb106ba2c7b0689eed73ad1af7cbbcbc6b52ba32710878f3d8e4883a3387d114c5a", @typed={0x14, 0x8, @ipv6=@loopback}, @typed={0x4, 0x15}]}, @generic="2791e2439daf1c26c534b58a5025c00c1c57c7ffcbe156195548e494c8f561246431bcfd74b554e1229f7c1ef8e686c74555f5e256386f0f948dfaa4efdaca020f5615db5d5d90fe42e6798a7125117d119afe9b982b388924e64da4dacf5ec52013cda002dbe8ed2158056b164adaa01b09f089f24637db64df741462092fb0e8041fac0c", @nested={0x100c, 0x8a, [@generic="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", @typed={0x8, 0x11, @uid=r5}]}, @generic="2eeff894a49a44138ab5da877e6accea6c63d160f23166b15ba9b91e4c4bb3083ba74cb19f182fe7a06282e8bab51588985aca918b317492eb9668f4eb817bbdc562fd0ebcdf5ff68a3e888d6a428a5839b7e0f03994e58c1a3044d8c41bd8aa9dd7156c551c7c29e9327a492a403b3a531d611db00446a5f56a4cf216513dac24ac39e18b4c208a8fed9f940b42d06818e6abcfeb672883ece1569f7ae8f898"]}, 0x2348}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) [ 1561.105039] binder: BINDER_SET_CONTEXT_MGR already set [ 1561.110989] binder: 2627:2631 ioctl 40046207 0 returned -16 [ 1561.144131] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct 23:18:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40049409) [ 1561.144131] [ 1561.175034] input: syz0 as /devices/virtual/input/input192 23:18:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1561.257999] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1561.257999] 23:18:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045569) 23:18:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa000, 0x0) setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000080), 0x4) 23:18:25 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7a00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1561.358137] binder_transaction: 7 callbacks suppressed [ 1561.358153] binder: 2660:2663 got transaction with invalid offset (56, min 0 max 0) or object. [ 1561.418707] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1561.439009] input: syz0 as /devices/virtual/input/input193 [ 1561.451885] binder_alloc: binder_alloc_mmap_handler: 2660 20003000-20006000 already mapped failed -16 [ 1561.464065] binder: BINDER_SET_CONTEXT_MGR already set [ 1561.469820] binder: 2660:2663 ioctl 40046207 0 returned -16 [ 1561.475035] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 1561.475043] binder_alloc: 2660: binder_alloc_buf, no vma [ 1561.509424] input: syz0 as /devices/virtual/input/input195 [ 1561.666333] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1561.666333] [ 1561.730647] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1561.730647] 23:18:26 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xfe80]}}, 0x1c) 23:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 23:18:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$RTC_UIE_ON(r3, 0x7003) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000000c0)={@remote, @dev={0xac, 0x14, 0x14, 0xc}, r4}, 0xc) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:26 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4c, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1561.852817] binder: 2695:2702 got transaction with invalid offset (56, min 0 max 0) or object. [ 1561.881713] input: syz0 as /devices/virtual/input/input196 [ 1561.896178] binder: BINDER_SET_CONTEXT_MGR already set [ 1561.912806] binder: 2695:2702 ioctl 40046207 0 returned -16 [ 1561.912907] binder_alloc: 2695: binder_alloc_buf, no vma [ 1561.924845] input: syz0 as /devices/virtual/input/input197 23:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5450) [ 1561.962201] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1561.962201] 23:18:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5451) 23:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x9, 0x28, 0x1f, 0x8, 0x6, 0x0, 0x80, 0x5, 0x400, 0x7, 0x7, 0x5}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x10001, 0x4040) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="4c0000001200ff09fffefd956fa2830007a6005e0000000000000068a20a150024001d005ec41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6a1b2f273ba16f6c7b1271e4", 0x4c}], 0x1}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1562.090310] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1562.090310] 23:18:26 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2200000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:26 executing program 5: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0600f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530010000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1562.205691] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 1562.209492] binder: 2736:2742 got transaction with invalid offset (56, min 0 max 0) or object. [ 1562.241154] binder: BINDER_SET_CONTEXT_MGR already set [ 1562.254828] binder: 2736:2742 ioctl 40046207 0 returned -16 [ 1562.256464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1562.260779] binder_alloc: 2736: binder_alloc_buf, no vma [ 1562.300423] input: syz0 as /devices/virtual/input/input198 [ 1562.332871] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 1562.356888] input: syz0 as /devices/virtual/input/input199 [ 1562.362780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1562.397270] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1562.397270] 23:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x541b) 23:18:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x10) finit_module(r0, &(0x7f00000000c0)='\x00', 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 23:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0xfffffffffffffffd, 0x20843) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:26 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x500]}}, 0x1c) 23:18:26 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x700, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1562.664961] input: syz0 as /devices/virtual/input/input200 [ 1562.692464] input: syz0 as /devices/virtual/input/input202 [ 1562.713654] binder: 2774:2782 got transaction with invalid offset (56, min 0 max 0) or object. [ 1562.752620] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1562.752620] 23:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008552a) [ 1562.759332] binder_transaction: 15 callbacks suppressed [ 1562.759350] binder: 2774:2782 transaction failed 29201/-22, size 0-16 line 3033 [ 1562.802786] binder_alloc_mmap_handler: 2 callbacks suppressed 23:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x10000, 0x8}, 0xc) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1562.802802] binder_alloc: binder_alloc_mmap_handler: 2774 20003000-20006000 already mapped failed -16 [ 1562.829895] binder: BINDER_SET_CONTEXT_MGR already set [ 1562.835417] binder: 2774:2782 ioctl 40046207 0 returned -16 [ 1562.841487] binder_alloc: 2774: binder_alloc_buf, no vma [ 1562.880735] binder: 2774:2789 transaction failed 29189/-3, size 0-16 line 2970 [ 1562.899893] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1562.899893] 23:18:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1562.945017] input: syz0 as /devices/virtual/input/input205 23:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:27 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:27 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x6, 0x963, &(0x7f0000000280)="313f4a229dae1f914f9adc69657fc6ff72d108a127e4a1003ee7f5e7b6afe270f23586ba643452c5e1d9250b2eb286deed18be6248fe500d681d3ce9d9e0b9dcca75b5ce899f76fe0a8d8e912370a949f8faab39c4babd5b2c9921fc504d7bcbe50a4acd611f09575caed1826bf66a5b949df2529b78f7bbd121a1ab8e69ea7fe2f915f2fa805e9d9c270320c56bdb412a8d72d1b38c8287aa4949138ff60d8d681e1d43121af765a9adf5504dd4e8b858ea7558f878bfb48169f86d0cec164874e12e700fb0738736b131ca3ea9cfd63e6c8753616bb2e4", &(0x7f0000000380)="6bbd21015d433fd0e79a901b6479bdffa442cf1dd31d3f0341cc23979eff3381924c4ea9271874e5cf72284fd340ba2a6cfd9ee581b89035d561263c8ad3daf31620456f0094575e22d26bbc651b179193becc1b378c6e5f6fecde7d7d061d14792990cf37e233beb4cd95f1675fa6ca609513c14429eaff44bb28338240dbf5a777cf4095b1207d971b1b59374425322ee8bfb2bd8368fd05585b4bb6a3caad17a369248638f4359742e3f84a7e3d3b3491bb28a5c1f44065d92971a8867672f7c67e503a452ae7ec9c988f4a3db4be656c52ccce5e9b630300ad", 0xd8, 0xdb}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x4, 0x1ff, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r5, r6, &(0x7f0000000040), 0x100000001) [ 1563.059665] input: syz0 as /devices/virtual/input/input206 [ 1563.099675] binder: 2807:2810 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) [ 1563.138572] binder: 2807:2810 transaction failed 29201/-22, size 0-16 line 3033 23:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x2, 0xbfb, &(0x7f0000000080)="7e4283dbd06fcb21a29b690e0fde4ff1c4109eadd629cd04472aa9a1aabdb307f59720055ac46e302fb188b633fa4af1c41c06c5e67674bccc1f9ff74513dafb8be0f9df4a19a480ac03e3773ed7d9c93facf1c6cba85785ec52a08de84c2b8d646dc58120885baf5fe4b69000f115b8da6f671f596dbeb074c622b55098d4cb0b17f72a446ca43c35aac0267ca514e1be82f9bca749e45174a5881e2639ff66c2fefe3faf3d69a93a280dc76187de310692da2607d28fcbfcbb7338b392750da01b", &(0x7f0000000180)="306053596eaf9b3febff5a7d7d9d11bea5cddcc06f311ffe3ca65bfd966d6a9f249af3b9d8fc3ac53ae6e1c8a3c4231eec7ad3c97b2aae951de144757bca018f334545f0532e6a4a2e069f3426807f9150f07ea4233a52eaaf3b684df52d8898dc75149a9216881cde36599e2fda81ecd4be72b86203a14bba3e58e1f063cf6109454ce6c8cb2a2acf658e31", 0xc2, 0x8c}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1563.199287] binder_alloc: binder_alloc_mmap_handler: 2807 20003000-20006000 already mapped failed -16 [ 1563.206735] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1563.227972] binder: BINDER_SET_CONTEXT_MGR already set [ 1563.235531] binder: 2807:2810 ioctl 40046207 0 returned -16 [ 1563.259171] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1563.259171] [ 1563.285443] binder_alloc: 2807: binder_alloc_buf, no vma 23:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x406855c9) [ 1563.304728] binder: 2807:2827 transaction failed 29189/-3, size 0-16 line 2970 [ 1563.323529] binder_release_work: 13 callbacks suppressed [ 1563.323561] binder: undelivered TRANSACTION_ERROR: 29201 [ 1563.345971] binder: undelivered TRANSACTION_ERROR: 29189 23:18:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1563.383583] REISERFS warning (device loop1): reiserfs_fill_super: Cannot allocate commit workqueue [ 1563.402854] input: syz0 as /devices/virtual/input/input210 [ 1563.439824] input: syz0 as /devices/virtual/input/input212 [ 1563.557505] binder: 2844:2848 got transaction with invalid offset (56, min 0 max 0) or object. [ 1563.574662] binder: 2844:2848 transaction failed 29201/-22, size 0-16 line 3033 [ 1563.609891] binder_alloc: binder_alloc_mmap_handler: 2844 20003000-20006000 already mapped failed -16 [ 1563.649860] binder: BINDER_SET_CONTEXT_MGR already set [ 1563.655211] binder: 2844:2848 ioctl 40046207 0 returned -16 [ 1563.655425] binder_alloc: 2844: binder_alloc_buf, no vma [ 1563.666922] binder: 2844:2850 transaction failed 29189/-3, size 0-16 line 2970 [ 1563.676085] binder: undelivered TRANSACTION_ERROR: 29189 [ 1563.682373] binder: undelivered TRANSACTION_ERROR: 29201 23:18:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@remote, @mcast2, @ipv4={[], [], @multicast2}, 0x400, 0x10000, 0xfffffffffffffc00, 0x400, 0xd9, 0x80200000, r4}) 23:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 23:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:28 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x97ffffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:28 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xc4ffffff]}}, 0x1c) 23:18:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1563.855095] input: syz0 as /devices/virtual/input/input213 [ 1563.871124] binder: 2858:2863 got transaction with invalid offset (56, min 0 max 0) or object. [ 1563.880079] input: syz0 as /devices/virtual/input/input214 [ 1563.891042] binder: 2858:2863 transaction failed 29201/-22, size 0-16 line 3033 23:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4b47) [ 1563.946050] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1563.946050] [ 1563.964263] binder_alloc: binder_alloc_mmap_handler: 2858 20003000-20006000 already mapped failed -16 [ 1563.979519] binder: BINDER_SET_CONTEXT_MGR already set [ 1563.984832] binder: 2858:2863 ioctl 40046207 0 returned -16 [ 1564.024940] binder_alloc: 2858: binder_alloc_buf, no vma [ 1564.054660] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1564.054660] [ 1564.067094] binder: 2858:2877 transaction failed 29189/-3, size 0-16 line 2970 23:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6102], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0xff]}, 0x45c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0xa) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc0045878) [ 1564.074530] binder: undelivered TRANSACTION_ERROR: 29201 23:18:28 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x600, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1564.135908] binder: undelivered TRANSACTION_ERROR: 29189 23:18:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getgroups(0x9, &(0x7f0000000600)=[r3, r4, r5, r6, r7, r8, r9, r10, r11]) r12 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r13 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") setsockopt$inet6_tcp_int(r13, 0x6, 0x12, &(0x7f0000000080)=0x5, 0x4) write$binfmt_misc(r13, &(0x7f00000000c0)=ANY=[@ANYBLOB="737968c523090473e22a76d70831b9c1a57b9b1bf16068ba27"], 0x21) sendfile(r12, r13, &(0x7f0000000040), 0x100000001) 23:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045564) [ 1564.238215] input: syz0 as /devices/virtual/input/input218 [ 1564.297146] binder: 2893:2899 got transaction with invalid offset (56, min 0 max 0) or object. [ 1564.315318] input: syz0 as /devices/virtual/input/input219 [ 1564.353859] binder: 2893:2899 transaction failed 29201/-22, size 0-16 line 3033 [ 1564.406759] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1564.406759] [ 1564.432728] binder_alloc: binder_alloc_mmap_handler: 2893 20003000-20006000 already mapped failed -16 [ 1564.442468] binder: BINDER_SET_CONTEXT_MGR already set [ 1564.447945] binder: 2893:2899 ioctl 40046207 0 returned -16 23:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40087602) 23:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {0x0, 0x3f}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6102], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1564.475675] binder_alloc: 2893: binder_alloc_buf, no vma [ 1564.505795] binder: 2893:2914 transaction failed 29189/-3, size 0-16 line 2970 [ 1564.521415] binder: undelivered TRANSACTION_ERROR: 29201 [ 1564.551176] binder: undelivered TRANSACTION_ERROR: 29189 [ 1564.587662] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1564.587662] 23:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x80086601) [ 1564.600661] input: syz0 as /devices/virtual/input/input222 [ 1564.643865] input: syz0 as /devices/virtual/input/input223 23:18:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = msgget(0x1, 0x108) msgctl$IPC_RMID(r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) delete_module(&(0x7f00000000c0)='posix_acl_accessGPL', 0x200) open(&(0x7f0000000080)='./file0\x00', 0x103c02, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x3, 0x100000001) 23:18:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:29 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6800, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf8e, 0x6}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0xffffffffffffff52, 0x200, 0xfffffffffffffffb, 0x401, r2}, &(0x7f00000003c0)=0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket(0x10, 0xb, 0x100000001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1000, 0x2}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={r4, 0xcc, "13f160206e59f0fe7e49c07fcd121c8bd31b190790c247600844cb3821cc386e677cfc48e4cbe4edc779ebb5e0150203d47a3e30a7421814f2a50fff343aa3227323b292e3d0b51f156d490aa924a45ec837c02bf546e40983d40026bf55fc24c3f442fbd5f009d9ce08b9121c9e22a3c86f4193f10648798140400791ac8c8066c03521bbc330b022413d05a69879fd71c048e7fa29d5cfa1746e5f36874f687ed607d1074bcb5cc3cfb5dcd76de0b87010b5fef148221bebcfb290e7f0635da72e9ce2527583d8bf129e47"}, &(0x7f00000001c0)=0xd4) 23:18:29 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x40020000]}}, 0x1c) 23:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4020940d) [ 1564.958258] input: syz0 as /devices/virtual/input/input225 [ 1564.989378] binder: 2942:2952 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556b) [ 1565.009746] input: syz0 as /devices/virtual/input/input226 [ 1565.052804] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1565.052804] [ 1565.056690] binder_alloc: binder_alloc_mmap_handler: 2942 20003000-20006000 already mapped failed -16 [ 1565.075516] binder: BINDER_SET_CONTEXT_MGR already set [ 1565.085798] binder: 2942:2952 ioctl 40046207 0 returned -16 23:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045567) [ 1565.131186] binder_alloc: 2942: binder_alloc_buf, no vma [ 1565.154971] binder: undelivered TRANSACTION_ERROR: 29189 [ 1565.166109] binder: undelivered TRANSACTION_ERROR: 29201 23:18:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") fcntl$addseals(r1, 0x409, 0x1) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1565.201032] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1565.201032] 23:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 23:18:29 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xa8, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1565.319173] input: syz0 as /devices/virtual/input/input229 [ 1565.345016] input: syz0 as /devices/virtual/input/input230 [ 1565.353925] binder: 2977:2983 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4b49) [ 1565.453739] binder_alloc: binder_alloc_mmap_handler: 2977 20003000-20006000 already mapped failed -16 [ 1565.463444] binder: BINDER_SET_CONTEXT_MGR already set [ 1565.468751] binder: 2977:2983 ioctl 40046207 0 returned -16 [ 1565.489409] binder_alloc: 2977: binder_alloc_buf, no vma 23:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) fchdir(r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1565.598523] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1565.598523] [ 1565.621451] input: syz0 as /devices/virtual/input/input232 [ 1565.653059] input: syz0 as /devices/virtual/input/input235 [ 1565.697762] binder_alloc: binder_alloc_mmap_handler: 3015 20003000-20006000 already mapped failed -16 [ 1565.708658] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1565.708658] [ 1565.732876] binder: BINDER_SET_CONTEXT_MGR already set [ 1565.740887] binder: 3015:3018 ioctl 40046207 0 returned -16 23:18:30 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x1f4]}}, 0x1c) 23:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045568) 23:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x80040) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/65) 23:18:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2}, &(0x7f00000000c0)=0x8) ioctl$TIOCCONS(r4, 0x541d) sendfile(r2, r4, &(0x7f0000000040), 0x100000001) 23:18:30 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x10000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1565.863866] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556a) [ 1565.962040] input: syz0 as /devices/virtual/input/input237 [ 1565.972981] binder_alloc: binder_alloc_mmap_handler: 3037 20003000-20006000 already mapped failed -16 [ 1566.005925] binder: BINDER_SET_CONTEXT_MGR already set [ 1566.011978] binder: 3037:3041 ioctl 40046207 0 returned -16 [ 1566.036928] input: syz0 as /devices/virtual/input/input238 23:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40085530) 23:18:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1566.078491] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1566.078491] 23:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000080)="6918da8b858ded5a78b6aa3525c352ff072d2e0a48c541f751d16eabf17e2d55d68002c2ed99b2b9a085f672b55fbadbbf0fa7a5bca276c40155af133d9f40a5e4ece73694407d701110b7cd5d7f19244cac71450c33dc8a20b9c08a633b49ee28a2989780342eadf66dbcab4f7e655b1b4550f89cfd59ea8146fabf0d3729c9b99bbcd9f28888b914425a544934766633ec66c5df7edffacfd76d8f25c0976302e51eea81d1f8017eb7dc82cd3d74bb4317bb86b3c7d9841137f27068f73cb37a3dd688c9f7f7d9e6b0127609f8304052ecf6209c5a7916547c00cdc398acb708cf", &(0x7f0000000180)="2bdbcb583213627e03ecbf4a7bb16c986be1f9c0d2013ee90f677ef29105b058a741cd82763e2db255dc8ef65cbeea8bbac8917cecd95dc70894081e1d9b7815f1eae65519082fd6e6c4125e595403e8adeeaede647a386d8b4fc3b58d1860b8d8409868c9c5f0a72fa5891f662d283d25ed09f077d1edef194249d46eedae4bb2cc5587927a08725e641fbec91706f6b7bc7d167444c37c56c931b8de1405d5746a3aa3f256b0bdff804ce4a46b6f69d978eb17bc70f7369caafa3ef3fe050de36baf4b3c7f2bf50b126de4c01b1e6a5431dce1e5637de24eb672b20f3b2fb675d901e08a", 0x2}, 0x20) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0)=0x100000001, 0x4) 23:18:30 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x2) [ 1566.254932] binder_alloc: binder_alloc_mmap_handler: 3063 20003000-20006000 already mapped failed -16 [ 1566.287983] binder: BINDER_SET_CONTEXT_MGR already set [ 1566.295063] binder: 3063:3066 ioctl 40046207 0 returned -16 [ 1566.350307] input: syz0 as /devices/virtual/input/input241 [ 1566.357526] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1566.357526] [ 1566.420707] input: syz0 as /devices/virtual/input/input242 23:18:30 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xe803000000000000]}}, 0x1c) 23:18:30 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x0) unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x7c, 0x505f, 0x9, "ddf8d28545f27a68e79f42355d25af1e798731fc742c9e1fe7d4d11151eaeb95132f01f607df4efe2c429faca64977da6abd534a905c213bbff64fee71f2db1b6f4c2cd225c0804935f0d5e1609054ebf1f8e05d8252fafc7ea9fd7fbb63c3ccbd872455e9ec5298e067529d27593dd3c5e468ebf054dabad969b7cf"}) sendfile(r4, r5, &(0x7f0000000040), 0x100000001) 23:18:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:30 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfdffffff, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5421) 23:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1566.671301] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1566.715048] input: syz0 as /devices/virtual/input/input243 [ 1566.732494] binder_transaction: 3 callbacks suppressed [ 1566.732509] binder: 3098:3108 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:31 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1, 0x6, [0x10000, 0x8, 0xd4, 0x800, 0x80000000, 0x800]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x9}, &(0x7f00000001c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r4, r5, &(0x7f0000000040), 0x100000001) [ 1566.769878] binder: BINDER_SET_CONTEXT_MGR already set [ 1566.776749] input: syz0 as /devices/virtual/input/input244 [ 1566.788016] binder: 3098:3108 ioctl 40046207 0 returned -16 [ 1566.795211] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 1566.795219] binder_alloc: 3098: binder_alloc_buf, no vma 23:18:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x405c5503) [ 1566.814745] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1566.814745] 23:18:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={r0, r1, 0xd, 0x1}, 0x10) kexec_load(0x4, 0x5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c4be49dd9f907b594ed0377fffba9e18a9ff5a322005a4d4078f194e7a31df8d8356e35d574b748a1c120ea2f9f2b3b62a8065c09aadf6b141184a7703793574", 0x40, 0x6, 0x8}, {&(0x7f0000000100)="a0c08b04a0a8705d030ce6fa23363288416084d1a74c396b8f5205934ffea56539ccda00b0e6498afbcf8ace764fc0f7a6b0380b39e96d8c680bc7", 0x3b, 0x4, 0x4}, {&(0x7f0000000140)="01274a9d91b3fb48a9d2b70207d72c0f605b47da493b8809fed711384cb0bc5896c9e6c778fd1ed627e46512d3dcb1cf66072445efa2b21fc58889d7af75660626e7d6e36410124b3e6e342cd05b58050e76e25f64dd5b57ad10335c8710f166b0ea3191917192e299cad69eba2003b89197aea0b7529c5b461bb6bb3e68231b90177bf0020e7f450e1bb2316c5209f9a2c02d335eeeb33b", 0x98, 0x1, 0x9e22}, {&(0x7f0000000200)="67aa086b60e37d6d7ebcfc519af875ff46493667127c8f275e73ff362f2514514bb11295f4c474b18f564ec17d45548572fae71659c13da9e8e5a1355542acc2f488c4cb66f518269df03a02ccbc79e7b9999566935f84bd053ff51ee2143941cc5fb70327844e530f15179c8e610d09c47962b1cc07dd4b9649034d9e8b063a0955e37c7da8b68a3543ad8656bfae9ac8d066d76418e1bf1c7eb244a471e5adc58da948a4f61ac997e307cd3a60475ec8bdf07d6f5b86d13107ee0010af44137acd2984f19157eca5", 0xc9, 0xb063}, {&(0x7f0000000300)="3c056af72a923fb42200ffe0aa4f4c8d8c3b97f9bdc5d991aa637f655ac198dc6ea40fb4a19779e94a320b80f14d9a618b4fd0f4c1353657415152a3ef0922f8b0b05ce7e09ea804122c8705ea0bbc54e5a8509fc7aa7e63228231124f92dc1db1e9896ec7221a5b148c496147394ec000cb42f881c9cdc8d4032abebe19ab42a602b1d4afc36ebb00031198", 0x8c, 0x100000001, 0x3d22}], 0xa0000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1567.003515] binder: 3123:3129 got transaction with invalid offset (56, min 0 max 0) or object. [ 1567.013568] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1567.013568] [ 1567.043107] input: syz0 as /devices/virtual/input/input246 23:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045566) [ 1567.050471] binder: BINDER_SET_CONTEXT_MGR already set [ 1567.063352] binder_alloc: 3123: binder_alloc_buf, no vma [ 1567.099925] binder: 3123:3129 ioctl 40046207 0 returned -16 [ 1567.127299] input: syz0 as /devices/virtual/input/input247 23:18:31 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfffffff6, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:31 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x55550000]}}, 0x1c) 23:18:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x3, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x5}, 0x10) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 23:18:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000100)={"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"}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1567.343528] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1567.343528] [ 1567.403453] binder: 3159:3163 got transaction with invalid offset (56, min 0 max 0) or object. [ 1567.433239] binder: BINDER_SET_CONTEXT_MGR already set [ 1567.438606] binder: 3159:3163 ioctl 40046207 0 returned -16 [ 1567.438751] binder_alloc: 3159: binder_alloc_buf, no vma 23:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5460) [ 1567.456686] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1567.456686] 23:18:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040)=0x1, 0x8000000100000001) [ 1567.520436] input: syz0 as /devices/virtual/input/input249 23:18:31 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x40000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1567.576585] input: syz0 as /devices/virtual/input/input252 23:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40085523) [ 1567.684596] binder: 3186:3188 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:32 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000000000, 0x400200) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x7fff}, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41020700}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x310, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffff01}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 23:18:32 executing program 5: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x80800) fchmod(r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) [ 1567.758618] binder: BINDER_SET_CONTEXT_MGR already set [ 1567.769133] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1567.769133] [ 1567.777233] binder_alloc: 3186: binder_alloc_buf, no vma [ 1567.786976] binder: 3186:3188 ioctl 40046207 0 returned -16 [ 1567.806039] binder_transaction: 17 callbacks suppressed [ 1567.806059] binder: 3186:3196 transaction failed 29189/-3, size 0-16 line 2970 [ 1567.860483] input: syz0 as /devices/virtual/input/input253 [ 1567.906043] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1567.906043] [ 1568.058693] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008552e) 23:18:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1c100, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @multicast2}, 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) 23:18:32 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2c, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:32 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x2]}}, 0x1c) 23:18:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x9, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") getpeername$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1568.328107] input: syz0 as /devices/virtual/input/input256 [ 1568.362649] binder: 3230:3233 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5502) [ 1568.382660] input: syz0 as /devices/virtual/input/input257 [ 1568.405620] binder: 3230:3233 transaction failed 29201/-22, size 0-16 line 3033 [ 1568.416287] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1568.416287] [ 1568.469460] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1568.469478] binder_alloc: binder_alloc_mmap_handler: 3230 20003000-20006000 already mapped failed -16 [ 1568.501116] binder: BINDER_SET_CONTEXT_MGR already set 23:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x3, {0x0, 0xfffffffffffffffe, 0x1}}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x10001, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="b3795c8477c3", 0x6, 0x1000}, {&(0x7f0000000100)="d3fb30c29cedfd38706f8f2b19fa496e242f8110df7316cd17f9b39d7ea40ea1e720c71844eec2b116735067d6f2ca79fa9fa3986d673a0d4899c62d7e13fdb977acba9cdd7a009c99a43926d59f0d1225b6de32a58a4831e71039147330e0285941673dfda8e8abd8d97d3a02d0835062586ffa05c40d2c77cce30c9e181cdc676bae45745b1afadf1a771530e07fed4a9308020d474567628f28ad763f966769e3c34eca8b7775a0e0cf90651bd9e7a0723586c6d0f6933f0d69ba57", 0xbd, 0x3f}, {&(0x7f00000001c0)="13420dc1b9ef094a016de8637a8697a37028489769699d8c120a0360d8087733ea1667ebd60d4f53a73a201ef37b50070fe277d907383731cb4aec83ec1e8ac927d04d854b833e8ad0e56c36fb02a6ac27ad95ca977f9b5b4d59cf4431a8aeb83d7e9c6c072a20f5cace0a24f846cb435dfc4c6f71525d1ca3", 0x79}, {&(0x7f0000000380)="93f36968a4b31aae0be5307e24951b05fc290a3c8f9636b82901edf4524c14db278ff837032c8b82bcb6ac15b8b88aea4132006cab4e6ec4767a2eb14fc49c45897387aed38454040cd940306f7950ebb324f4ac06f2f62f0852bf931147b6c1d6a39071c474fd27d00b", 0x6a, 0x6516}, {&(0x7f0000000240), 0x0, 0x481}], 0x400, &(0x7f0000000480)={[{@type={'type', 0x3d, "02ff447c"}}, {@type={'type', 0x3d, "abfbca6f"}}, {@nodecompose='nodecompose'}, {@barrier='barrier'}], [{@subj_type={'subj_type', 0x3d, 'syz0\x00'}}]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4002) socketpair$inet6(0xa, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000002c0)=""/106, &(0x7f0000000340)=0x6a) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556e) [ 1568.514645] binder: 3230:3233 ioctl 40046207 0 returned -16 23:18:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000000400)={0x78, 0x0, 0x8, {0x3, 0xffffffffffffffe1, 0x0, {0x3, 0x0, 0x3, 0x4, 0x6, 0x101, 0x2, 0xffffffffffffffe1, 0x80, 0x0, 0x9a, r5, r6, 0x5, 0x1}}}, 0x78) r7 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r4, r7, &(0x7f0000000040), 0x100000001) [ 1568.552572] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1568.552572] [ 1568.573823] binder_alloc: 3230: binder_alloc_buf, no vma [ 1568.603251] binder: 3230:3257 transaction failed 29189/-3, size 0-16 line 2970 [ 1568.613480] binder_release_work: 16 callbacks suppressed [ 1568.613487] binder: undelivered TRANSACTION_ERROR: 29201 23:18:32 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7400000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1568.654210] binder: undelivered TRANSACTION_ERROR: 29189 [ 1568.685309] hfsplus: unable to parse mount options [ 1568.697963] input: syz0 as /devices/virtual/input/input260 23:18:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x80000020, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc0045878) [ 1568.771377] hfsplus: unable to parse mount options [ 1568.787503] input: syz0 as /devices/virtual/input/input262 [ 1568.827443] binder: 3276:3280 got transaction with invalid offset (56, min 0 max 0) or object. [ 1568.865789] binder: 3276:3280 transaction failed 29201/-22, size 0-16 line 3033 23:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) readv(r0, &(0x7f0000001640)=[{&(0x7f0000000000)=""/239, 0xef}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4, 0x4}], 0x9) 23:18:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) [ 1568.905788] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1568.905788] [ 1568.960938] binder_alloc: binder_alloc_mmap_handler: 3276 20003000-20006000 already mapped failed -16 [ 1568.998006] binder: BINDER_SET_CONTEXT_MGR already set [ 1569.003977] binder: 3276:3280 ioctl 40046207 0 returned -16 23:18:33 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x100000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1569.049410] input: syz0 as /devices/virtual/input/input263 [ 1569.065256] binder_alloc: 3276: binder_alloc_buf, no vma [ 1569.081371] binder: undelivered TRANSACTION_ERROR: 29201 [ 1569.090927] binder: 3276:3298 transaction failed 29189/-3, size 0-16 line 2970 [ 1569.129067] input: syz0 as /devices/virtual/input/input266 [ 1569.129448] binder: undelivered TRANSACTION_ERROR: 29189 23:18:33 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x3]}}, 0x1c) 23:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1569.261815] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1569.261815] 23:18:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = gettid() ptrace$getenv(0x4201, r1, 0x1b08, &(0x7f0000000200)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz1\x00', {0x1, 0x16b, 0x51, 0x2}, 0x12, [0x7, 0x6, 0xd1c, 0x6, 0x80, 0x8, 0xa3, 0xffffffffffffffff, 0x7, 0x81, 0x1, 0x6, 0x9, 0x8, 0x702700000, 0x0, 0x5, 0xe1, 0xadc, 0x80000000, 0x1, 0x7, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x8, 0x26b, 0x9, 0x5, 0x7, 0x6, 0x9, 0x8, 0x2, 0x9, 0x7fffffff, 0x9, 0x0, 0x80000001, 0xffff, 0x8, 0x7fffffff, 0x6, 0xffffffffffffffff, 0x6, 0x221d746d, 0x8000, 0x1, 0x9, 0x4, 0x4b, 0x400, 0x511a, 0x4, 0x4, 0x1, 0xa365, 0x4, 0x1, 0x40, 0x8000, 0x3], [0x6, 0x2, 0x20, 0x212, 0x7, 0x9, 0x9d1, 0x800, 0x28000000, 0x20, 0x80000001, 0x8, 0x4, 0xbb2a, 0x3, 0x800, 0x0, 0x3f, 0x4, 0x0, 0x976, 0x8, 0x8001, 0x7, 0xf78b, 0xb38d, 0x149, 0x7, 0x780000000000, 0x3ff, 0x5, 0x80, 0xffffffffffffffe0, 0x7, 0x0, 0x2, 0x1, 0x2, 0xf63, 0x4, 0x0, 0x9f71, 0x1ff, 0x81e8, 0xef, 0x5, 0x0, 0x7, 0x5d, 0x9, 0x28, 0x7d, 0x6, 0xa4, 0x7, 0x85, 0x8001, 0x3, 0x8000, 0xffffffff, 0x2, 0x9, 0x5, 0x80000001], [0x7, 0x1000, 0x57, 0x90000000000000, 0x3799, 0xe1, 0x2, 0xfffffffffffffffe, 0x7fff, 0x0, 0xdea, 0xc4b2, 0x5, 0xfff, 0x1f, 0x5, 0x3ff, 0x1, 0x25, 0x1f, 0x1, 0x81, 0x222a, 0xfc, 0x800, 0x2, 0x7, 0x1eb2f55f, 0x7f, 0x6, 0x9, 0x4, 0x2800000000, 0x5, 0x7fff, 0x10001, 0x7, 0x6, 0x240000000000, 0x1, 0x7, 0xea4600000000000, 0x9c89, 0x7f, 0xffffffffffffffff, 0x8001, 0x4, 0x100000000, 0x2, 0x2, 0x5, 0x3f, 0x9, 0x1, 0x4, 0x6a, 0xfffffffffffffff8, 0x4, 0x0, 0x8a, 0x80000001, 0x22e, 0x2, 0x8], [0x2, 0x0, 0x4, 0x2, 0x3, 0x8, 0x20, 0x6, 0x7ff, 0x6, 0x5, 0x9, 0xc2, 0xd9, 0x1, 0x3, 0x9, 0x100000000, 0x0, 0x714, 0x5, 0x0, 0x8000, 0x7f, 0x7, 0x400, 0x27e1, 0x35af, 0x3, 0x8, 0x1f, 0x6, 0xa7e, 0xffffffffffffff01, 0x2, 0x82, 0xdbd, 0x9, 0x818, 0x9, 0xffffffffb3f665fd, 0x6, 0x0, 0x1ff, 0x33d2, 0x3, 0x2f, 0x7ff, 0x9, 0xae, 0x5, 0x4, 0x7, 0x9, 0x5, 0x3f, 0x1, 0x612f, 0x8, 0x100, 0x1, 0x6, 0x512, 0x4]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7, 0x57, 0x7e8c7d12, 0xa170, 0x60000000000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000003c0)="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", 0xfffffffffffffed9) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x109000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r2 = getgid() fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4008556c) [ 1569.330228] binder: 3317:3321 got transaction with invalid offset (56, min 0 max 0) or object. [ 1569.340887] binder: 3317:3321 transaction failed 29201/-22, size 0-16 line 3033 23:18:33 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xce7bc8224a010000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x5, 0x80, 0x8, @broadcast, 'bridge_slave_0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1569.400460] binder_alloc: binder_alloc_mmap_handler: 3317 20003000-20006000 already mapped failed -16 [ 1569.437020] binder: BINDER_SET_CONTEXT_MGR already set [ 1569.442594] binder: 3317:3321 ioctl 40046207 0 returned -16 [ 1569.454586] input: syz0 as /devices/virtual/input/input268 [ 1569.462882] binder_alloc: 3317: binder_alloc_buf, no vma [ 1569.488421] binder: 3317:3334 transaction failed 29189/-3, size 0-16 line 2970 [ 1569.497451] binder: undelivered TRANSACTION_ERROR: 29201 23:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000600)="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", 0x1000, r1) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1569.528328] binder: undelivered TRANSACTION_ERROR: 29189 [ 1569.558605] input: syz0 as /devices/virtual/input/input269 23:18:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1569.587884] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1569.587884] 23:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 23:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400802, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0), 0x4) [ 1569.733140] binder: 3353:3357 got transaction with invalid offset (56, min 0 max 0) or object. [ 1569.783774] binder: 3353:3357 transaction failed 29201/-22, size 0-16 line 3033 [ 1569.825163] binder_alloc: binder_alloc_mmap_handler: 3353 20003000-20006000 already mapped failed -16 [ 1569.837335] input: syz0 as /devices/virtual/input/input273 [ 1569.859265] binder_alloc: 3353: binder_alloc_buf, no vma [ 1569.859360] binder: BINDER_SET_CONTEXT_MGR already set [ 1569.871381] binder: 3353:3367 transaction failed 29189/-3, size 0-16 line 2970 [ 1569.883034] input: syz0 as /devices/virtual/input/input274 [ 1569.910440] binder: undelivered TRANSACTION_ERROR: 29189 [ 1569.916156] binder: undelivered TRANSACTION_ERROR: 29201 [ 1569.938220] binder: 3353:3357 ioctl 40046207 0 returned -16 23:18:34 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xffffffffffffffff]}}, 0x1c) 23:18:34 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7400, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x9) timerfd_create(0x7, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000000800)=[{&(0x7f0000000080)={0x27, 0x0, 0x2, 0x3, 0x4, 0x100000001, "f21f5a591ab72b0c40123bdfd5ac210c753d89bca3093bbe2ee0f13292403386d8bd0e90a19413ce7b9a4bdece9205803351513029b37f276a81b4a98f7f01", 0xf}, 0x60, &(0x7f0000000140)=[{&(0x7f0000000280)="63a15b667c725d619527a6b3bc2363367fa4213a814d30aba1d9431e6431217cc724c8bd2b524f1a12a0176052bbe55c9797916f1c03a93ae08a07dd9996ee2235ff57319675ea5e20c784bad1ab9997ff60499d4ef98793463529b4f136e8f6dae01cea5c6c8a903ff33cca7549f495c992740bc0cbef1f73edb6cde00009591f1dd5e7c889549f05987752d76f231ea8ee0a166554aaba18f8bcbba5279ae2ddc639f1cde0eaaed3068e00151bf35ad686ce0c796ec04617d96dffc46efb65d8382c0f4acdb4c3a5a3ed", 0xcb}], 0x1, &(0x7f0000000380)={0x110, 0x6, 0x6ad96719, "9ab20d7e7012c54cf557948b33bbeb266b94e7de98ecad991badf2270a9efba70cfb072abaceaa488028f0ad035b479c5694da4a3e6a29a35910cbe32c7a4bbb751f52518d492b32b7fadf25ff70e4b57a74b273a86ae3f33f0546494718e28ab1ed590cc4c8d72a8bc80cc65c110d78374a65b687a27e3117cc846160d4cceb186580b7ba294d2e9d0fd21e33e2b95985349438edafaae67d3c4fc9c199c3e15e5623820a1655430a98b6d99d4daacafb96e8bec88c0b638e0103918c8c646845bb9949825fe2f9a93b6970fe0f0ecd6c9213e695227b5c47963c4537094a5488d84026f842c0ec19e566de69d3e0e13cb4520384e73bc0f527"}, 0x110}, {&(0x7f0000000180)={0x27, 0x1, 0x2, 0x7, 0x4, 0xfffffffffffffffa, "81588014a190efe9ac476f9b68bcca547800ee73474b071e1372a996a6152a13164bafcf4e549fd084867aa30043831f895fb990b7eeb6a105f783f50ffe52", 0x1c}, 0x60, &(0x7f0000000700)=[{&(0x7f00000004c0)="b21b6f0eb65448d8a13d3403dce9a63915226f8581ea43d998933ee1c3f6fb739ed489e3ed39cd6e681e5d03c9d4bbfd78ea66b5b4b4d473a3a98f9fe4d439db42b11109dfa1ade6b3269c60137dd7b2a8942cd7e1fd8b63952577eeefad54e92217", 0x62}, {&(0x7f0000000540)="82bf2c97f835f003444438815dc9fbdd6f039847a302c7d677fd871ffe2234bbc2d535f7dab056fedcc096ae1db45c5da40511a7bdb1a5c1aa55d0e32379a26d93cb32979ac6489c8c2a4420f58005de586cb5c2adf523a45b405468fc1dfeaa068e4f65fa8261d606c21947330a6321a38ca4103841fb0eacc2005deea375d1e4cd1c14a6c8016c09ca1f3987227055486b7fb64d1ceba9a1c8708c6bd4a7eb00111795669b61367518d85eb9452adc619dc90092eb375f2385fccdf06dadf0ab8e9dea63766b5c0eb17092f025162d196c856947445c74ae8a36712b5e0f2097", 0xe1}, {&(0x7f0000000640)="eaf2d6b7c65eebc89bbed6d2b7cc38aebfedf97221f60ffc0d4ab4795f2fa32f1986d7c2bb986c4ea3ce205c2fb05d3b691668d2bd9eca6d1596b6ab885580d4966dc46199585bdd43812c4a1006dfcdaeb34ea3a9a7bc2d97db7ce868089312ab4e3e3225129b8c7c6dfc02508d756d000bc457aa5997d6", 0x78}, {&(0x7f00000006c0)="2859b4b34bfff32c2deeb0c92ca92216416bf3a834", 0x15}], 0x4, &(0x7f0000000740)={0xa0, 0x10e, 0x1, "4b5d6381cb615ae6b8673d0e0bdd3d8e53f965018eb2873b34f46e1b78a4839c15d11a4c93ef43a4256e0aaf7297bb04af6c59922c36f78a4ae2bd8773c676107e54618b3c48ddf25572962e93740597c107f63e6c38b8163ce0952c149334a836b77825162135fafd79a60d2c8029b0861c801c87ce826c468329110638a9752a1a906e76e2c3c9e2185b0b316b"}, 0xa0}], 0x2, 0x0) 23:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff591], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) pread64(r0, &(0x7f0000000100)=""/84, 0x54, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x420001, 0x20) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x3, {0x6, 0x401, 0x101, 0x9, 0x4, 0xc54}}) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x2, 0x3, 0xfffffffffffffffa, 0x100, 0x0, 0x3, 0x2, 0x8, 0xffffffffffffff9c, 0x8001, 0x4, 0x5f, 0x4, 0x80, 0x0, 0x2, 0x0, 0x8, 0x3e, 0x3, 0xde, 0xfff, 0x2, 0x3, 0x213c, 0x2d, 0x7, 0x5, 0x3, 0x40, 0x4, 0x3f, 0xc6, 0x5, 0x1d, 0x8, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x1000, 0x3c82, 0xbd81, 0x5, 0x6, 0x11, 0x4}, r1, 0x2, 0xffffffffffffffff, 0x1) 23:18:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1570.098154] input: syz0 as /devices/virtual/input/input275 [ 1570.112110] binder: 3383:3387 got transaction with invalid offset (56, min 0 max 0) or object. [ 1570.135799] binder: 3383:3387 transaction failed 29201/-22, size 0-16 line 3033 [ 1570.145095] input: syz0 as /devices/virtual/input/input278 23:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair(0x1f, 0xa, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x1, 0x0, 0x401, 0x1f, 'syz1\x00', 0x101}, 0x0, [0x3, 0x10001, 0x101, 0x5, 0x3, 0xc9, 0x10000, 0x9, 0x7ff0000000, 0x8001, 0x7608, 0x0, 0x65f, 0x1, 0x7, 0x5ef, 0x7, 0x8, 0x7, 0x0, 0x100, 0x3, 0x3, 0x3f3, 0xa000000000, 0x5, 0x0, 0x7, 0x4, 0x8, 0x800, 0x7, 0x1, 0xb9ca, 0x1, 0x1000, 0x7fff, 0x6, 0x26ed, 0x3ff, 0xc9c, 0x5, 0xff, 0x100000001, 0x937, 0x93b0, 0x8, 0x6, 0x1, 0x100, 0x7, 0xfffffffffffeffff, 0x0, 0xbc, 0x7ff, 0x10000, 0x1, 0x7, 0x0, 0x1, 0xe2d7, 0x1, 0x2, 0x5, 0x400, 0x5, 0x0, 0x0, 0x2, 0x64, 0x3, 0x3, 0x400, 0x8000, 0x6, 0x4, 0x3, 0x8, 0x6, 0x4, 0x6, 0x3ff, 0x9, 0xfffffffffffff001, 0x1, 0x5, 0x80, 0xaf1f, 0x3, 0xc6a, 0x7, 0x7, 0xfff, 0x2, 0x80000001, 0xffff, 0xfffffffffffffff8, 0x7, 0x6c9a, 0x3, 0xa907, 0x28f, 0x3ff, 0x1, 0x6, 0x5, 0x3f, 0x3, 0x0, 0x8, 0x10001, 0xd7db, 0xfb, 0x8, 0x7f, 0x4, 0x5, 0x0, 0x101, 0x800, 0x0, 0x401, 0x6, 0x4, 0xe, 0x8, 0x100000000, 0x1], {0x77359400}}) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000080), 0x100000001) 23:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1570.185850] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1570.185850] [ 1570.209755] binder_alloc: binder_alloc_mmap_handler: 3383 20003000-20006000 already mapped failed -16 [ 1570.220171] binder: BINDER_SET_CONTEXT_MGR already set [ 1570.236934] binder: 3383:3387 ioctl 40046207 0 returned -16 [ 1570.267584] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1570.267584] [ 1570.281014] binder_alloc: 3383: binder_alloc_buf, no vma 23:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0xa000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0xfe2f, 0x2) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x390) pread64(r1, &(0x7f0000000180)=""/233, 0xe9, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1570.303573] binder: undelivered TRANSACTION_ERROR: 29189 [ 1570.317883] binder: undelivered TRANSACTION_ERROR: 29201 23:18:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:34 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1570.472596] binder: 3417:3421 got transaction with invalid offset (56, min 0 max 0) or object. [ 1570.523635] input: syz0 as /devices/virtual/input/input280 [ 1570.531000] binder_alloc: binder_alloc_mmap_handler: 3417 20003000-20006000 already mapped failed -16 [ 1570.553629] binder: BINDER_SET_CONTEXT_MGR already set [ 1570.559599] binder: 3417:3421 ioctl 40046207 0 returned -16 [ 1570.560244] binder_alloc: 3417: binder_alloc_buf, no vma [ 1570.612652] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1570.612652] [ 1570.694978] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1570.694978] 23:18:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:35 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x3f00000000000000]}}, 0x1c) 23:18:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x16}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x1, 0xff) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) 23:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x880000, 0x0) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="c0a125dba959a3d54f36bef73acd132f05ba0a5e4d7114e3c085bac49021e595dfd12a311148605eab158b6d2aa04bf2f8375e22f926d9437f8ae8a632beb521fcbb55bcfed4117f111159bb1716ed32c8dc21532f00bedc7e6ddd4537b41060408010685dbed9352825d48b108c9285b0384f750604be6f0505", 0x7a, 0x100000000}, {&(0x7f0000000180)="74cefb83acfd38aa5523e815c42db93aa9c656fc0ce0e08809bad7983cbf2ebf97d779d474024beffbe5ab33cc42629e9c4bd0a9722ff08a15467971ede7cda6c1398c2cd5b334d64b6c652176eabfbd3d43b0dcf357499ff5d1936ff7b623ca07e8889703bd6ee518cc64010779143b9d86594c73ec9d3e6b54aed1b5fa59ff246e09af9ad6d89f874e162dcd433d947162dedaa907d3be3d9b667c749f77542c72dbc07c05a62209d05c2789cb37bb13499d62f5d15c9ea6517f4db5fb76184048db2b9877bc80eb7e99dbf813529e4ee1cf81fed5c43533764d5076a488e8b11bae0cc9", 0xe5, 0x1000}, {&(0x7f0000000280)="bdcf3c68640f189b5d79f083ef546769b3c02d20b4a371fa9ec4e1eaf1baac3316622be9c7e33dd9d00a3fe35c8c1493d1fd30ccef066c315dc77078d0622be5255ede95dd46b3f8a911121474fccbadbe2f01e7b4fd3ab1431c09eb541fbe390efe486945634a1ca0016c1fc8fd73969f8d271d35b76aa1d70fb7e00d6fbe0ec622913adfdbcd078088c0c33b454c212e6fa3e4be029876051f0912fda3ffd3f3", 0xa1, 0xf10000000000000}, {&(0x7f0000000340)="9f1706b9d63159e31d91ab5f4d29ea154140f06afb5e84d8b6719bc5b8f6274e8ad18d72d22f4ecefe482cfba1a86f90a2a2f7ef76643ff862e4423669a397ca0c149b9a39", 0x45, 0xffff}, {&(0x7f00000003c0)="6f018a7c5631aee635232f91cd4e603c0cefa327d440ccefe084c8c3bb2d27cba490cee14d9ec7d5b953faf723fce245f6a09f13b66789d36000fb47f54e328c2255d08f54f1b5252d318acb85d90ea2ff258931a2acf68dbb9d6f126fd9cc34229ea7faad04fd343506a6240240e53fb3171c6307201f82cd44ecf16182c7f52454358c2a2dd048547e1a42984b2ae1ca8e794a2eecce5dfa0b0f54de18f67c6e6bf70888aec0cbba748e313289001b668384eb8acd7ab4ad81e8", 0xbb, 0x2}], 0x21000, &(0x7f0000000080)='/dev/uinput\x00') ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = socket$inet6(0xa, 0x69a0ac469c7e2a16, 0x5) r2 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x100, 0x2000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000640)={{0x8, 0x0, 0x253, 0xfffffffffffffff9, '\x00', 0x1}, 0x4, 0x200, 0x2, r3, 0xa, 0x10001, 'syz0\x00', &(0x7f00000005c0)=['proc\x00', '/dev/uinput\x00', 'cgroup&selinux\x00', '/dev/uinput\x00', '\x00', '/dev/uinput\x00', '/dev/uinput\x00', '\'md5sumppp1ppp1oem1)\x00', 'system!.\x00', 'cgroupself\x00'], 0x6e, [], [0xffb, 0x8, 0x80000000, 0x9]}) syz_open_dev$adsp(&(0x7f0000000780)='/dev/adsp#\x00', 0x4, 0x0) 23:18:35 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x74, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:35 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x81, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) [ 1570.893618] binder_alloc: binder_alloc_mmap_handler: 3444 20003000-20006000 already mapped failed -16 [ 1570.927972] binder: BINDER_SET_CONTEXT_MGR already set [ 1570.940537] binder: 3444:3448 ioctl 40046207 0 returned -16 23:18:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1570.975286] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1570.975286] 23:18:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1571.100871] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1571.100871] [ 1571.129770] binder_alloc: binder_alloc_mmap_handler: 3469 20003000-20006000 already mapped failed -16 [ 1571.139938] binder: BINDER_SET_CONTEXT_MGR already set [ 1571.145657] binder: 3469:3476 ioctl 40046207 0 returned -16 [ 1571.238540] input: syz0 as /devices/virtual/input/input284 [ 1571.260267] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xf86, 0x4, 0x9, 0x6, 0x7f}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:35 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x989680, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r0, &(0x7f0000000140)=0x2, 0x8) [ 1571.450701] binder_alloc: binder_alloc_mmap_handler: 3495 20003000-20006000 already mapped failed -16 [ 1571.465877] binder: BINDER_SET_CONTEXT_MGR already set [ 1571.474193] binder: 3495:3496 ioctl 40046207 0 returned -16 [ 1571.481097] input: syz0 as /devices/virtual/input/input287 [ 1571.511784] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1571.511784] [ 1571.536678] input: syz0 as /devices/virtual/input/input288 23:18:35 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xff0f000000000000]}}, 0x1c) 23:18:35 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40400202) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ip6gre0\x00'}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x600000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r5, &(0x7f0000000040), 0x100000001) 23:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:35 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:36 executing program 0: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) 23:18:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x202000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = semget(0x3, 0x4, 0x4) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000180)=""/193) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1571.743506] binder_alloc: binder_alloc_mmap_handler: 3523 20003000-20006000 already mapped failed -16 [ 1571.783522] binder: BINDER_SET_CONTEXT_MGR already set [ 1571.789483] binder: 3523:3526 ioctl 40046207 0 returned -16 [ 1571.805723] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 1571.805731] binder_alloc: 3523: binder_alloc_buf, no vma 23:18:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1571.852104] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1571.852104] [ 1571.869726] input: syz0 as /devices/virtual/input/input290 23:18:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1571.952591] input: syz0 as /devices/virtual/input/input292 [ 1572.001438] binder_transaction: 4 callbacks suppressed [ 1572.001452] binder: 3546:3548 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x210000) getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:36 executing program 4: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x30000) r1 = getpgrp(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x210040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1572.086105] binder_alloc: 3546: binder_alloc_buf, no vma [ 1572.092365] binder: BINDER_SET_CONTEXT_MGR already set [ 1572.110092] binder: 3546:3548 ioctl 40046207 0 returned -16 23:18:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1572.312413] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1572.435082] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1572.435082] 23:18:36 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf401]}}, 0x1c) 23:18:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/41) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x8400) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0x9) 23:18:36 executing program 0: r0 = epoll_create1(0x80000) ioctl$void(r0, 0xc0045878) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x4008556c) 23:18:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x9}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") accept$nfc_llcp(r2, 0x0, &(0x7f00000000c0)) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x5, 0x8000) 23:18:36 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1572.748185] binder: 3580:3586 got transaction with invalid offset (56, min 0 max 0) or object. [ 1572.782351] input: syz0 as /devices/virtual/input/input297 [ 1572.792446] binder_alloc: 3580: binder_alloc_buf, no vma 23:18:37 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1572.793244] binder: BINDER_SET_CONTEXT_MGR already set [ 1572.825025] binder: 3580:3586 ioctl 40046207 0 returned -16 [ 1572.825068] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1572.825068] [ 1572.847122] binder_transaction: 14 callbacks suppressed [ 1572.847140] binder: 3580:3592 transaction failed 29189/-3, size 0-16 line 2970 [ 1572.871123] input: syz0 as /devices/virtual/input/input298 23:18:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100), 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x10000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r1, r2, &(0x7f0000000040), 0x100000001) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 23:18:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x7ff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x7, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x800) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000340)=r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$UI_DEV_CREATE(r0, 0x4008556c) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000140)=0x10000, 0x4) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x55e) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 23:18:37 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x400000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x54) [ 1573.094346] binder: 3611:3617 got transaction with invalid offset (56, min 0 max 0) or object. [ 1573.120300] binder: 3611:3617 transaction failed 29201/-22, size 0-16 line 3033 [ 1573.152122] binder: BINDER_SET_CONTEXT_MGR already set [ 1573.157638] binder: 3611:3617 ioctl 40046207 0 returned -16 [ 1573.164697] binder_alloc: 3611: binder_alloc_buf, no vma [ 1573.171746] binder: 3611:3627 transaction failed 29189/-3, size 0-16 line 2970 [ 1573.185331] input: syz0 as /devices/virtual/input/input299 [ 1573.224803] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1573.224803] [ 1573.251123] input: syz0 as /devices/virtual/input/input300 23:18:37 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xe00000000000000]}}, 0x1c) 23:18:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x80, 0x7fffffff, 0xbbe, 0x1, 0x7fffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x7) sendfile(r0, r0, &(0x7f0000000040), 0x100000001) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r4, &(0x7f0000000280)="0e55ac13d0c715ef03175cd76b8c60debf05ba3e2f9b1127dcf6680301570f759fc4baadd51b99b7314a42db5770f828acd0088b99138c21a3712667ee4ba2d1778b72215032160e27f79dbfd0b3a5fcd51a4e8f911c05c53c48e1aea975287255ad69e890ed48a517fa22db33b2539afda6f83893a24322aec796c16d8c9e757691bc049928ac1024dd82a47fb771f17e8d34f936ec6671ee98b6496341e5c4f4387fb26515b8afd4a6f701b5ab5830729757e2d483e66b29a332b070474a4e0cdbc98107262a7074ad285bc73bdda11cbe8d9d2b53099c16d3ff7401b69381dd08bbe5e96eaae6930b06d3f45382ca80c9af16055da7e6", 0xf8) 23:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x60000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x7, r2}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20000080, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:37 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x300, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x3, 0xffffffff}) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1573.463705] binder: 3648:3649 got transaction with invalid offset (56, min 0 max 0) or object. [ 1573.477354] input: syz0 as /devices/virtual/input/input302 [ 1573.484033] binder: 3648:3649 transaction failed 29201/-22, size 0-16 line 3033 23:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x5, {{0xa, 0x4e21, 0xfffffffb, @loopback, 0x4}}}, 0xfffffffffffffea9) [ 1573.507738] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1573.507738] [ 1573.543325] input: syz0 as /devices/virtual/input/input304 [ 1573.555494] binder_alloc_mmap_handler: 3 callbacks suppressed 23:18:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000140)=""/154) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000040), 0x100000001) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x8, 0x80000001}) [ 1573.555512] binder_alloc: binder_alloc_mmap_handler: 3648 20003000-20006000 already mapped failed -16 [ 1573.589171] binder: BINDER_SET_CONTEXT_MGR already set [ 1573.597776] binder: 3648:3649 ioctl 40046207 0 returned -16 [ 1573.611020] binder_alloc: 3648: binder_alloc_buf, no vma [ 1573.618498] binder: 3648:3662 transaction failed 29189/-3, size 0-16 line 2970 [ 1573.635378] binder_release_work: 16 callbacks suppressed [ 1573.635395] binder: undelivered TRANSACTION_ERROR: 29201 [ 1573.657126] binder: undelivered TRANSACTION_ERROR: 29189 23:18:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1573.657305] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1573.657305] 23:18:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x5f42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10001) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000140)={r4, 0x80000001, 0x13, "c4699bfd595b42dd05b7eefe417fbb701cb077"}, 0x1b) [ 1573.805330] binder: 3680:3683 got transaction with invalid offset (56, min 0 max 0) or object. [ 1573.814796] binder: 3680:3683 transaction failed 29201/-22, size 0-16 line 3033 [ 1573.825922] binder_alloc: binder_alloc_mmap_handler: 3680 20003000-20006000 already mapped failed -16 [ 1573.837110] binder: BINDER_SET_CONTEXT_MGR already set [ 1573.842666] binder: 3680:3683 ioctl 40046207 0 returned -16 [ 1573.848619] binder_alloc: 3680: binder_alloc_buf, no vma [ 1573.876772] input: syz0 as /devices/virtual/input/input307 [ 1573.877432] binder: 3680:3688 transaction failed 29189/-3, size 0-16 line 2970 [ 1573.890648] binder: undelivered TRANSACTION_ERROR: 29201 [ 1573.915043] binder: undelivered TRANSACTION_ERROR: 29189 [ 1573.968997] input: syz0 as /devices/virtual/input/input310 [ 1574.028606] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x7ff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x40) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000100)={0x9, 0x7, 0x6321, 0x2, 0x8}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc0, 0x0) write$selinux_context(r2, &(0x7f00000000c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23) 23:18:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:38 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$unix(r0, &(0x7f0000000180)="817615ad5807bfbd1d9587d07be13e228cfd95dbb26b5d37060ed1e13877292a67a9841a9dbd35ed70e2c5d2cb1d154f11eacc99a3563f87e1f994b763ef73a3a41629a975620fd9aebb08ed68ac0748bf7b3d", 0x53, 0xc000, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) close(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x12) mq_getsetattr(r3, &(0x7f00000000c0)={0xd15a, 0x7, 0x1, 0x7, 0x9, 0xa, 0x5, 0x8000}, &(0x7f0000000140)) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300), 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r4, r5, &(0x7f0000000040), 0x8) 23:18:38 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x700000000000000]}}, 0x1c) 23:18:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2400, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x400, 0x480400) r6 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x8, 0x40000) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x800, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000001c0)=0x4) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r2, 0xc20, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x2000c010) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) pwrite64(r0, &(0x7f0000000140)="bf65c31ada36edbb5e8ccfc9d6787ef6511088196a7aee484276ec9dce44279a28471387681a94b263514a4c17e1528c6cb04fd3f5aa292d7e3a07585dc1539bf478df8131c56f02ddecef92b3629d2d6c0336c4b6af32fc48b1e7410b3efcaf679cb533d862cc6616c47721e6f1f191bb1d56e7f60cf2c0566b2861d5aad33bad67fa803e90f9bccc8dd4ffd9a68744afea94410301b073ae91ae69d64ba2b77ced", 0xa2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r2 = getpgrp(0x0) kcmp(r1, r2, 0x5, r0, r0) socketpair$inet(0x2, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0xfffffffffffffffb}, 0x4) [ 1574.334617] binder: 3707:3715 got transaction with invalid offset (56, min 0 max 0) or object. [ 1574.364834] binder: 3707:3715 transaction failed 29201/-22, size 0-16 line 3033 [ 1574.395944] input: syz0 as /devices/virtual/input/input311 [ 1574.409903] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1574.409903] [ 1574.446694] binder_alloc: binder_alloc_mmap_handler: 3707 20003000-20006000 already mapped failed -16 [ 1574.477454] binder: BINDER_SET_CONTEXT_MGR already set 23:18:38 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x400000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1574.493397] input: syz0 as /devices/virtual/input/input312 [ 1574.493681] binder: 3707:3715 ioctl 40046207 0 returned -16 [ 1574.522119] binder_alloc: 3707: binder_alloc_buf, no vma [ 1574.528166] binder: undelivered TRANSACTION_ERROR: 29201 [ 1574.537582] binder: 3707:3728 transaction failed 29189/-3, size 0-16 line 2970 [ 1574.569115] binder: undelivered TRANSACTION_ERROR: 29189 23:18:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1574.635116] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1574.635116] 23:18:38 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) [ 1574.724033] binder: 3744:3747 got transaction with invalid offset (56, min 0 max 0) or object. [ 1574.773334] input: syz0 as /devices/virtual/input/input315 [ 1574.794944] binder: 3744:3747 transaction failed 29201/-22, size 0-16 line 3033 [ 1574.808473] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1574.808473] 23:18:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x4, 0x1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1574.810746] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1574.859918] binder_alloc: binder_alloc_mmap_handler: 3744 20003000-20006000 already mapped failed -16 [ 1574.907034] binder_alloc: 3744: binder_alloc_buf, no vma [ 1574.916839] binder: BINDER_SET_CONTEXT_MGR already set 23:18:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x5800000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1574.951329] binder: 3744:3747 ioctl 40046207 0 returned -16 [ 1574.951336] binder: undelivered TRANSACTION_ERROR: 29189 [ 1574.957651] binder: undelivered TRANSACTION_ERROR: 29201 [ 1574.985859] input: syz0 as /devices/virtual/input/input316 23:18:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1575.163897] binder: 3777:3782 got transaction with invalid offset (56, min 0 max 0) or object. [ 1575.176655] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1575.176655] [ 1575.193064] binder_alloc: binder_alloc_mmap_handler: 3777 20003000-20006000 already mapped failed -16 [ 1575.203487] binder: BINDER_SET_CONTEXT_MGR already set [ 1575.209388] binder: 3777:3782 ioctl 40046207 0 returned -16 [ 1575.216378] binder_alloc: 3777: binder_alloc_buf, no vma [ 1575.223736] binder: undelivered TRANSACTION_ERROR: 29189 [ 1575.230357] binder: undelivered TRANSACTION_ERROR: 29201 23:18:39 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xf00000000000000]}}, 0x1c) 23:18:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x1, 0x4}) ioctl$TIOCSTI(r1, 0x5412, 0x2) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) r8 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) r10 = getgid() r11 = getpgid(0x0) r12 = getuid() getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000007c0)=0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0x0, r1, 0x0, 0x11, &(0x7f0000000980)='/dev/vga_arbiter\x00', 0xffffffffffffffff}, 0x30) r18 = getuid() r19 = getgid() sendmsg$netlink(r1, &(0x7f0000000b00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000140)={0x10, 0x2f, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000a00)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0xe8, 0x4041}, 0x20004001) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7a, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r0, &(0x7f0000000040)=0x4, 0x837c) 23:18:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x101, 0x7, 0x0, 0x8001, 0x6, 0x40, 0xffffffffffffffdc, {0x0, @in6={{0xa, 0x4e20, 0xc0, @loopback, 0x80000000}}, 0x2, 0x40000, 0x780, 0x5, 0x6}}, &(0x7f0000000100)=0xb0) sendfile(r0, r0, &(0x7f00000001c0), 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x81}, 0x8) [ 1575.554015] binder: 3798:3801 got transaction with invalid offset (56, min 0 max 0) or object. [ 1575.579145] input: syz0 as /devices/virtual/input/input319 [ 1575.621423] input: syz0 as /devices/virtual/input/input320 [ 1575.637152] binder_alloc: binder_alloc_mmap_handler: 3798 20003000-20006000 already mapped failed -16 23:18:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x6, 0x23, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000002740)={@mcast1, 0x0}, &(0x7f0000002780)=0x14) connect$can_bcm(r2, &(0x7f00000027c0)={0x1d, r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r4, &(0x7f0000000040), 0x100000001) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)={0x1, 0x6, [@dev={[], 0xf}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a66465495661", @broadcast, @broadcast, @dev={[], 0x12}]}) socket$inet6_sctp(0xa, 0x5, 0x84) [ 1575.662036] binder: BINDER_SET_CONTEXT_MGR already set [ 1575.667350] binder: 3798:3801 ioctl 40046207 0 returned -16 [ 1575.675246] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1575.675246] 23:18:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x2f, 'io'}, {0x2d, 'memory'}, {0x2f, 'pids'}, {0x2f, 'rdma'}]}, 0x1e) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$TIOCEXCL(r1, 0x540c) 23:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x3) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1575.740857] binder_alloc: 3798: binder_alloc_buf, no vma 23:18:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1575.807861] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1575.807861] [ 1575.824331] input: syz0 as /devices/virtual/input/input323 23:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) memfd_create(&(0x7f0000000000)='selfvmnet1}#[$\x00', 0x2) [ 1575.889367] input: syz0 as /devices/virtual/input/input326 [ 1575.924497] binder: 3841:3846 got transaction with invalid offset (56, min 0 max 0) or object. [ 1575.989959] binder_alloc: binder_alloc_mmap_handler: 3841 20003000-20006000 already mapped failed -16 [ 1576.010789] binder: BINDER_SET_CONTEXT_MGR already set [ 1576.016281] binder: 3841:3846 ioctl 40046207 0 returned -16 [ 1576.121070] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:40 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x600000000000000]}}, 0x1c) 23:18:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000140)) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/195, 0xc3}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/225, 0xe1}, {&(0x7f0000001540)=""/127, 0x7f}, {&(0x7f00000015c0)=""/140, 0x8c}], 0x7, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:40 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x48, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x0, 0x1000, &(0x7f0000001040)="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"}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400000, 0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:40 executing program 0: setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0xfffffefffffffffd, 0x0) 23:18:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1576.256757] input: syz0 as /devices/virtual/input/input329 [ 1576.264127] binder_alloc: binder_alloc_mmap_handler: 3864 20003000-20006000 already mapped failed -16 23:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1576.299901] input: syz0 as /devices/virtual/input/input330 [ 1576.300047] binder: BINDER_SET_CONTEXT_MGR already set [ 1576.319140] binder: 3864:3868 ioctl 40046207 0 returned -16 [ 1576.363150] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1576.363150] 23:18:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x8000002, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x8, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="a4ce5ea73578cc1a65a87f4eb98ff98f0321f480b490312541c7a2e68829bf30900e77f9d1576253b430e5cc3814275445c54f0994963bf0acee8a6356e3dfe1082bae45e8e3b5927e9c07cf32be72541ee52181f6e7578767ea98fe7df8c6f18aa5624c2e1fdf124de25181450bb3d6dcaa1ca8561ebae823c0d4a0d5d5d94c43c7c7e0ac6d9ade451e6acc76d241b9605f9e27d1f7056eda9ddbce18ff8a13c2b062fafb9882d77a7add306d7badad0615b24733c1c7da92f18289b895f8b675cdea4fa6435f0764ec327910533f00edab17cb5ce112ffe1948ad55028d7fc62e840", 0xe3}, {&(0x7f0000000100)="006b3dbff0a75c0a54898b314cc8ecd8d781664c7c37f449e1c30d0c8d1d79dcdc575db0", 0x24}, {&(0x7f0000000140)="0733b7a5bc7b4df63b6d56198b0e5c7c9f79303218e9aac341ab8e6572179239ca4f259a9f8a31735c6f6159509537b47372d4d7a837d8053414658e5b3de1abc35d5ac73efd01cca2751364b48bdd636b2892e81439972c68fe29867074681e252037ecf341f2771e1cf6d5d6267a6255324db6316cbaf147c421e249ebbe961e66d5c99033e293d78555911f3132355ac484ed52039bd16380e97e07a89e16dacb8ec2d831411b0c7284267e9bbc890e80ca090543a05db46959b49d878edd8af6d65dc5d00bf9b73b7273c73b2e9703e0fe", 0xd3}, {&(0x7f0000000240)="ccb79fc051129b6c473652537e00bd75b3fa70a5296e78c0bd4babf48cfb4db21088cfc11189d22c57", 0x29}, {&(0x7f0000000280)="a463b005998916cfbca1cc0a8f4c2357e2213b3576c4bd3dcb175933e4b26d916d8be5f401dfc789aa2af65e07aac305b0c4af3859cde14392c947f7df84071335cecb92e7cec6f04ba8a55ef4519ca7012926e6327998bddbbbe403456c5dfa2bb3dc94ed275e8d40f02857fd92dd55b04663ed134ada71d026baa25f8e89aa7713053b00502c3871106cac42a275ff6f0177d51cc5496a04f298ee63f1a7afe2690fd3f98329eae8d417052697ddcc563425246060fb1fc0667800e0c73de45d7425ae99be189d8d19883e5c64b7d6", 0xd0}], 0x5) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1576.501414] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1576.501414] [ 1576.550869] input: syz0 as /devices/virtual/input/input332 23:18:40 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0xe0, 0x1, "028e16577d4c4380540735b1d283bb7ae8c930d3efaae86b48ee50b425f5e461b7c3e00a2760a2cf72adf618e9597356877bdd59e365e20ef21363db6dc14d9ec018e0a503fa828587fd2f16300b9d3471740b0c22ff50ebb15b62276f787f62b30d01e33d3f35152df9cb5300f159dab322b4676c994521cc7ed78916616016bbe2e4c4027dcea7e42680ae59093b9f4192bf685bae8bf17ca4bb18bf820028b9793505074f9ccc21a83341ca1e7a7021387549251a5c744e5c148d1fd999c1afc35d3b41b1d9405d1803e8035c375e97314931e7304cba"}, &(0x7f0000000080), 0x400) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x100000001) 23:18:40 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xfffffffd, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1576.591048] binder_alloc: binder_alloc_mmap_handler: 3892 20003000-20006000 already mapped failed -16 [ 1576.617048] input: syz0 as /devices/virtual/input/input335 [ 1576.628946] binder: BINDER_SET_CONTEXT_MGR already set [ 1576.634361] binder: 3892:3897 ioctl 40046207 0 returned -16 [ 1576.806284] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1576.806284] [ 1576.850788] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:41 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x2400]}}, 0x1c) 23:18:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='/dev/uinput\x00', &(0x7f00000000c0)='syz0\x00', &(0x7f0000000100)='trusted*system\'\x00', &(0x7f0000000140)='syz0\x00', &(0x7f0000000180)='.em1posix_acl_accessppp1security\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='&-\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='syz0\x00', &(0x7f0000000300)='syz0\x00', &(0x7f0000000340)='syz0\x00', &(0x7f0000000380)='{wlan1\x00', &(0x7f00000003c0)='!\x00', &(0x7f0000000400)='posix_acl_access)\x00', &(0x7f0000000440)='\x00']) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:41 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6b6b6b00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1577.070648] input: syz0 as /devices/virtual/input/input336 [ 1577.082243] binder_transaction: 2 callbacks suppressed [ 1577.082257] binder: 3931:3936 got transaction with invalid offset (56, min 0 max 0) or object. [ 1577.119674] input: syz0 as /devices/virtual/input/input337 23:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="04033b5c00007d7552ce193a"], 0xc, 0x2) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0xf, 0x86f8, {0x57, 0x2, 0x80000000, {0x1, 0x3ff}, {0x4, 0x1000}, @ramp={0x3c39, 0x9, {0x9d43, 0xfff, 0x0, 0x8000}}}, {0x56, 0xffff, 0xfff, {0x7, 0x30000000}, {0x1, 0x1}, @rumble={0x100000, 0x3f6d}}}) [ 1577.145458] binder_alloc: binder_alloc_mmap_handler: 3931 20003000-20006000 already mapped failed -16 [ 1577.149659] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1577.149659] [ 1577.187899] binder: BINDER_SET_CONTEXT_MGR already set [ 1577.199423] binder: 3931:3936 ioctl 40046207 0 returned -16 [ 1577.215549] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 1577.215559] binder_alloc: 3931: binder_alloc_buf, no vma 23:18:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2c, 0x81c0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) r3 = getgid() linkat(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x1000) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x40080, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r2, @ANYBLOB="2c3ddefffffffffed8e0942001f4f2b6ec7d0b9ee4bef90b2dd147f572229367bf19069d895553677587f31a389aabb207309aaef3ed76531912399e661fb87e17e911106554cd92c8a088296242b44b0612189b765fe6372d4db332ac0724b03b6c2b429ff3ad01f9ed94", @ANYRESDEC=r3, @ANYBLOB=',func=MODULE_CHECK,obj_role=/dev/uinput\x00,\x00']) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000540)=0x30) mq_timedreceive(r1, &(0x7f0000000040)=""/160, 0xa0, 0x2, &(0x7f0000000100)={0x0, 0x989680}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000340)={0x10001, 0x7}) [ 1577.336911] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:41 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1f00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1577.423667] input: syz0 as /devices/virtual/input/input341 [ 1577.453318] input: syz0 as /devices/virtual/input/input342 [ 1577.461966] binder: 3959:3964 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) close(r1) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r0, r4, &(0x7f0000000040), 0x100000001) [ 1577.555161] binder: BINDER_SET_CONTEXT_MGR already set [ 1577.614123] binder: 3959:3964 ioctl 40046207 0 returned -16 [ 1577.614171] binder_alloc: 3959: binder_alloc_buf, no vma [ 1577.631010] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1577.631010] [ 1577.727358] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1577.727358] 23:18:42 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x91ffffff00000000]}}, 0x1c) 23:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x1, 0x9}, 'port1\x00', 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x58251e68, 0xba, 0x3, 0x0, 0x7, 0x5}) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz1\x00', {0x6, 0xffffffffffffff00, 0x5, 0x6}, 0x10, [0x9, 0xc2d5, 0x0, 0x80000001, 0x8001, 0x62, 0x9, 0x2, 0x4b, 0x9, 0x0, 0x101, 0x8, 0x76d8, 0x4, 0x6241789e, 0x1000, 0x7f, 0x1f, 0x178, 0x3, 0x9, 0x9, 0x10000, 0x2, 0x1ff, 0x897, 0x8, 0xffffffff, 0x0, 0x100, 0x3, 0x9, 0xfffffffffffff801, 0xfffffffffffffffb, 0x7, 0x100000001, 0x3ff, 0x13c, 0xfffffffffffffe01, 0x3dee, 0x2, 0x17, 0x1000, 0x200, 0xee6c, 0x200, 0x14, 0x800, 0x0, 0xbd8d, 0x7ff, 0x100000001, 0x8, 0x127, 0x6, 0x7, 0x8000, 0x5, 0x8, 0x3ff, 0x5, 0x200, 0x6], [0x9, 0x7, 0x2, 0x400, 0x0, 0x9, 0x8, 0x8, 0x8000, 0x0, 0x1, 0x2, 0x1, 0x7, 0x6, 0x9, 0x0, 0x5, 0x5, 0x2, 0x86e8, 0xfffffffffffffffa, 0x100000000, 0x2, 0x7fff, 0x7, 0x8, 0x4, 0xe15d, 0x5, 0x491d9d2b, 0x0, 0x0, 0xc510, 0x3, 0x7, 0x0, 0x80000000, 0x9, 0x2, 0xffffffffffff0c7a, 0x3, 0x2, 0x400, 0x7, 0x0, 0x8, 0x5, 0x0, 0x4, 0x149400, 0x4703, 0x7ff, 0x7f, 0x3, 0x9, 0x7ff, 0x7, 0xa457, 0x100000000, 0x1, 0x6cbc, 0x6, 0x7fffffff], [0x7, 0x1f, 0x5, 0x1200, 0x2b, 0xa49, 0x400, 0xee5, 0x1ff, 0x7, 0x0, 0x10000, 0x4, 0x1, 0xffffffffffffff10, 0x4, 0x3, 0x40, 0xf66, 0x4, 0x5, 0x6, 0x6, 0x3, 0x7ff, 0x9, 0xb6, 0xfffffffffffffffb, 0x7, 0xb1, 0x6, 0x1, 0x7c0, 0x80000001, 0xfffffffffffffffd, 0xc408, 0xf800000000000000, 0xf28, 0x80000000, 0x8, 0x4, 0x0, 0x3, 0x7fffffff, 0x913, 0x2, 0x2, 0x9, 0xffff, 0xfb2d, 0x5, 0x7, 0x4, 0x7, 0x5, 0x100000001, 0x9, 0xad0, 0xc01, 0x4, 0x20, 0x0, 0x0, 0x8], [0x80000001, 0x0, 0x7, 0x6, 0x7, 0x20, 0x5dac2c04, 0x2, 0xffff, 0x8, 0x1, 0xa7e3, 0x1777, 0x6, 0x0, 0xdf37, 0xa8, 0x3e0000000000, 0x3, 0x8001, 0x3, 0x100000000, 0x276d, 0x7fc0000000000000, 0x7fffffff, 0x1, 0xe533, 0xf1, 0x20, 0x1, 0x1000, 0x3, 0xff, 0x7, 0xd560, 0x7fff, 0x1000, 0x3ff, 0x100000000, 0x8001, 0x1ff, 0x3, 0x3f, 0xed, 0x5, 0x10000, 0x40, 0x7f, 0xa5, 0x1, 0x2, 0x14711163, 0xffffffff, 0x7ff, 0x100, 0xb255, 0xfffffffffffffffd, 0xa3d6, 0x8, 0x7, 0x2, 0x7, 0x3ff, 0xffffffff]}, 0x45c) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x9, 0x4) ioctl$UI_DEV_CREATE(r1, 0x4008556c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) write$P9_RRENAME(r1, &(0x7f00000002c0)={0x7, 0x15, 0x2}, 0x7) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={r2, 0x101, 0x4, 0x101, 0xfff, 0x3, 0x401}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000340)={0x9, 0x3, 0x1, 'queue1\x00', 0x2}) 23:18:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x3ff, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="8b7cca277817d69bcfa493c4eeffbef28189d81f283eba31d1993fb8f35ab06662f141fa9dbfa5ae2c0da309e723275b817cc4c267cd02d22e5267c224e8b03a8eae6b99dfb68ec427a9147e1cbb1f012aa72590c92636d9da12d150220f9ee9bc693593e35226b63c102c5390b3420ed58741efbcdb7130baf5c07b60c6e37bdff0ac64444d3336566587d8b7b041a8ce05e540c5c66d84cdfdc792b81e8c988a0e4c8b4a7bf194937494664cfa2cba03cd4fbb7fa8373a0d6a43638577dbf3", 0xc0, 0x7fffffff}, {&(0x7f0000000180)="f2a8c62c", 0x4, 0x3}], 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='dir_umask=00000000000000000000001,uid<', @ANYRESDEC=r2, @ANYBLOB="2c7063723d30303030303030303030303030303030303032392c736d61636b6673726f6f743d776c616e30282c6f626a5f757365723d5d40656d302d297d27e6252d656d3125252d6d643573756d2c646f6e745f61707072616973652c646566636f66746578743d73797361646d5f752c00"]) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:42 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1577.913748] binder: 3996:3999 got transaction with invalid offset (56, min 0 max 0) or object. [ 1577.924011] binder_transaction: 15 callbacks suppressed [ 1577.924041] binder: 3996:3999 transaction failed 29201/-22, size 0-16 line 3033 [ 1577.934959] binder: BINDER_SET_CONTEXT_MGR already set [ 1577.943468] binder_alloc: 3996: binder_alloc_buf, no vma [ 1577.949565] binder: 3996:3999 ioctl 40046207 0 returned -16 [ 1577.955550] binder: 3996:4003 transaction failed 29189/-3, size 0-16 line 2970 [ 1577.967204] hfs: unable to parse mount options 23:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1d) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x101000) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1578.010525] input: syz0 as /devices/virtual/input/input345 [ 1578.037051] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1578.037051] [ 1578.086828] hfs: unable to parse mount options [ 1578.124318] binder: 4017:4022 got transaction with invalid offset (56, min 0 max 0) or object. [ 1578.135778] binder: 4017:4022 transaction failed 29201/-22, size 0-16 line 3033 [ 1578.147496] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1578.147496] [ 1578.151512] binder: BINDER_SET_CONTEXT_MGR already set 23:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1578.170366] input: syz0 as /devices/virtual/input/input346 [ 1578.171162] binder_alloc: 4017: binder_alloc_buf, no vma [ 1578.187940] binder: 4017:4022 ioctl 40046207 0 returned -16 [ 1578.211875] binder: 4017:4028 transaction failed 29189/-3, size 0-16 line 2970 23:18:42 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x14a22c87bce, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/bnep\x00') ioctl$KDMKTONE(r1, 0x4b30, 0xffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x7fff, 0x8, [0x200, 0x6]}) ioctl$UI_DEV_CREATE(r0, 0x5501) dup2(r0, r0) 23:18:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1578.402863] input: syz0 as /devices/virtual/input/input350 [ 1578.433212] binder: 4043:4049 got transaction with invalid offset (56, min 0 max 0) or object. [ 1578.456077] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1578.456077] [ 1578.492541] binder: 4043:4049 transaction failed 29201/-22, size 0-16 line 3033 23:18:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1578.513988] input: syz0 as /devices/virtual/input/input351 [ 1578.548327] binder: BINDER_SET_CONTEXT_MGR already set [ 1578.555964] binder_alloc: 4043: binder_alloc_buf, no vma [ 1578.562191] binder: 4043:4049 ioctl 40046207 0 returned -16 [ 1578.588218] binder: 4043:4058 transaction failed 29189/-3, size 0-16 line 2970 [ 1578.595753] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:43 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x800, 0x8205, 0x3ff, 0x100000001, r2}, &(0x7f00000001c0)=0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0xffff, 0x3, 0x6, 0x4, 0x1, 0x3, 0x0, 0x83, 0x1b4, 0x0, 0x7e6524a3, 0xf0}, {0x0, 0xe1, 0x1f, 0x8, 0x0, 0x6, 0x3a, 0x0, 0x7, 0x3, 0x0, 0x9}, {0xb372, 0x30000000, 0x7, 0x7f, 0x190f, 0x7, 0x2, 0xfff, 0x1, 0x6, 0x1, 0x2, 0x8}], 0x7fff}) ioctl$UI_DEV_CREATE(r0, 0x5501) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, 0x24, 0x400, 0x70bd29, 0x25dfdbfb, {0x16}, [@generic="0b46492971efea0bb162f2eaf90f1e9069fd502496d4759f8af41821db881ab7927a9815b1caba9202f7b2941eaa4105a50183495742fac204dbea0637b61149ad6d5b581590f8cea3ca4a853720162ebe3e5103a449cb3838cf0b8fb501c3c64071bcd2fb", @typed={0x8, 0x68, @fd=r1}, @nested={0x64, 0x4, [@generic="ccfdd417eaabd1c93c66ac63587b59bd55d72d7a562f74", @typed={0x8, 0x6b, @pid=r4}, @generic="fa490bbe5ef63b3bf39ed1d64e3093f452fd390937ed4a5cafa66512ce2cd8ca66cfe6ec1fd360", @typed={0x14, 0x1f, @ipv6=@ipv4={[], [], @broadcast}}, @typed={0x4, 0x6b}]}, @typed={0xc, 0x67, @u64=0xbd}, @typed={0x8, 0x5b, @pid=r5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x8040) 23:18:43 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x3060133f]}}, 0x1c) 23:18:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000000080)}, 0x10) [ 1579.013667] input: syz0 as /devices/virtual/input/input352 [ 1579.025806] binder: 4070:4076 got transaction with invalid offset (56, min 0 max 0) or object. [ 1579.052654] input: syz0 as /devices/virtual/input/input354 23:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0xfff7ffffff7ffffa, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000080)="ab572bcaf391ee1f923ddd49ed57466db746c5084b837f30e092644a7cdd56eb1da2b2fbb5593b92ed6535a0be48fe80123e6b09d5a42c6e234965bbd4cec7a8c8f9027648e35999b35a197c1d1a7f45dcd14b3cbbc5de3e9e688d79e5bc6ec33274ee958f058ec093ef85ef2f10a4aa6a0a4f0131d8764c86f63da6984ced458631e0ab21e789c64d36780ae1c18809e8c43dcf5e87ada4fd7afbc8a3564d86f8850d0659ee57930ebce50de438bab5b7da40cb", 0xb4) [ 1579.061971] binder: 4070:4076 transaction failed 29201/-22, size 0-16 line 3033 [ 1579.093938] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1579.093938] [ 1579.129652] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1579.129671] binder_alloc: binder_alloc_mmap_handler: 4070 20003000-20006000 already mapped failed -16 [ 1579.160938] binder: BINDER_SET_CONTEXT_MGR already set [ 1579.166501] binder: 4070:4076 ioctl 40046207 0 returned -16 [ 1579.212041] binder_alloc: 4070: binder_alloc_buf, no vma [ 1579.224069] binder: 4070:4097 transaction failed 29189/-3, size 0-16 line 2970 [ 1579.234676] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1579.234676] [ 1579.234754] binder_release_work: 18 callbacks suppressed [ 1579.234761] binder: undelivered TRANSACTION_ERROR: 29189 23:18:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @remote}, 0x8) 23:18:43 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffd, 0x0) 23:18:43 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8000002000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1579.329815] binder: undelivered TRANSACTION_ERROR: 29201 23:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80900, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff, 0x5}) 23:18:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r2 = socket(0x840000000002, 0x3, 0x1) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1579.414603] input: syz0 as /devices/virtual/input/input355 [ 1579.460099] input: syz0 as /devices/virtual/input/input356 [ 1579.486844] binder: 4110:4117 got transaction with invalid offset (56, min 0 max 0) or object. [ 1579.529269] binder: 4110:4117 transaction failed 29201/-22, size 0-16 line 3033 23:18:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1579.573104] binder_alloc: binder_alloc_mmap_handler: 4110 20003000-20006000 already mapped failed -16 [ 1579.582951] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1579.582951] [ 1579.616823] binder: BINDER_SET_CONTEXT_MGR already set [ 1579.622820] binder: 4110:4117 ioctl 40046207 0 returned -16 [ 1579.631743] binder_alloc: 4110: binder_alloc_buf, no vma [ 1579.650510] binder: 4110:4131 transaction failed 29189/-3, size 0-16 line 2970 23:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc00480}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x36, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @local}}}, 0x84) 23:18:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1579.664534] binder: undelivered TRANSACTION_ERROR: 29189 [ 1579.676788] binder: undelivered TRANSACTION_ERROR: 29201 [ 1579.696840] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1579.696840] [ 1579.864777] binder: 4145:4147 got transaction with invalid offset (56, min 0 max 0) or object. [ 1579.895289] binder_alloc: binder_alloc_mmap_handler: 4145 20003000-20006000 already mapped failed -16 [ 1579.923240] binder: BINDER_SET_CONTEXT_MGR already set [ 1579.928855] binder_alloc: 4145: binder_alloc_buf, no vma [ 1579.934489] binder: 4145:4147 ioctl 40046207 0 returned -16 [ 1579.941489] binder: undelivered TRANSACTION_ERROR: 29189 [ 1579.959157] binder: undelivered TRANSACTION_ERROR: 29201 23:18:44 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x300]}}, 0x1c) 23:18:44 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="01b39a04ca4231280000000006000000ac1414aa000000007f000001ac1414bb00000000e000000178a43098770bc7eda065e2b26cb093dcec767e44b087214a5e62"], 0x28) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000100)={0x20, 0x105000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 23:18:44 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x780c000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3, 0x1000, 0xff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xfffffffffffffffd) 23:18:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x7, 0xfffffffffffffffb) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x333) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x306}, 0x20, {0x2, 0x4e23, @broadcast}, 'bond_slave_1\x00'}) 23:18:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x5, 0x2) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f00000000c0), 0x100000001) r4 = getpid() sendmsg$nl_netfilter(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x324, 0x3, 0xb, 0x321, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="bad3c89fb61814e933c87719203dae7f5523e09e9379b3fb0909eda6f98067a078d16bd2909217253c73d4bf59dfd1403615ef6196ea1b13ef09698f101aac175c524530e8d58634ab93054cdfab95b395d19542066f623d8dc90d6bd852332711f33defd084b5450470611d0511f233b377e421dfd354adfe27052d330b25b563fb191a1437a9eb9b83c7a9d55a359c9c0d410937e67aeac8", @typed={0x8, 0x1c, @pid=r4}, @generic="d1b2d03485aaf3de35d64bade2db2e0f283ab575c4d23540896b6f371f1f0f79bd027bfe141320c8a5f5ecb439fa7618e5e32a94f2d8c271c70f184534790c6bc4b8f924b72194cb3b7637614bca174ce2a823ceba9134d6546b07db31404ae1f5c24ce71c66d5d6c7070f5b62f087a7f2c201535de4c2a61f7517d5cafad27967e759f5294c8a63ef802a519e0c180cf1cf77d5722602e8513dd6af7fbcab8a74ce8b34e64de6625a1605f2d2d5d4effd33a64e64bc7166c9adb7ccd0f74168ec211e0b8041f09e43dcd6437539b9947684679a25050b1fd4b32e22ef328996418315332c2ac03ebbdb4e17f0", @generic="06adbd888c358e1b90de152557a71dfb8a73b39a0b082f185dc32fffb4430e4c703df9bda2e5f494ba5d8b8e2f919ebb03abd46ed6ee7a3d9ecdfc02df80895815d8eaaa82d8daa3257c181897a064b04c801f6d516b414ed77e70bd91faca11e2ef0104d6039601bb3acc2113b5383a", @typed={0x40, 0x37, @binary="ed5aca02c90c92d45befe6ac96819d61e495831fc1ddb2ad1b19650b4e967cb4d150841dbba1702e661bf2c33fcfb3207f39313af7b6c09b3c36db"}, @generic="6469254126542810242ea253d49d66fa4b8edf7d0cf313826e525787ecf8362562d3b6a573c978a80865f38add10d408c37f50ab02ce198bd4ac9957fcbcef2733c3bd98b1ff4c36ad9ed65b6415ff4773676e5464cf71dd239c7e52cb93a4f1591ea8229030fa51229c66f18adc8ce45d6134911cba55018023b4dede81b84942b88491bb629cc47166a6ee89eb2523293950c4acb4dbbef4b2e62cb4b9bf558eeeed81654786a574967dbcc7cac88e9e3eb49f09c1e79bc3b32487afcae1ccd707e7affd41c56074f84b30a07fc16d"]}, 0x324}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 23:18:44 executing program 0: delete_module(&(0x7f0000000000)='/dev/uinput\x00', 0xa00) r0 = socket$kcm(0x29, 0x8, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0xfffffffffffffffd, 0x0) ioctl$UI_DEV_CREATE(r1, 0x4008556c) [ 1580.123697] binder: 4157:4164 got transaction with invalid offset (56, min 0 max 0) or object. [ 1580.147458] input: syz0 as /devices/virtual/input/input361 [ 1580.154983] binder_alloc: binder_alloc_mmap_handler: 4157 20003000-20006000 already mapped failed -16 [ 1580.195968] binder: BINDER_SET_CONTEXT_MGR already set [ 1580.202112] binder: 4157:4164 ioctl 40046207 0 returned -16 [ 1580.210577] input: syz0 as /devices/virtual/input/input364 [ 1580.221636] binder_alloc: 4157: binder_alloc_buf, no vma [ 1580.248342] binder: undelivered TRANSACTION_ERROR: 29201 [ 1580.257624] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1580.257624] [ 1580.273773] binder: undelivered TRANSACTION_ERROR: 29189 23:18:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0x8, 0x2, {0x57, 0x9, 0x6, {0x8, 0xffff}, {0x7f}, @const={0x7fff, {0xff, 0xfff, 0x65, 0x5}}}, {0x56, 0x8385, 0x7, {0x0, 0x1}, {0xffff, 0x3c}, @const={0x40, {0x3, 0x6, 0x4, 0x10000}}}}) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0xb00, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/204) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x8) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x204480, 0x0) 23:18:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1b) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl$RTC_AIE_ON(r1, 0x7001) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7fff, 0x4) 23:18:44 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xe003000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1580.480011] input: syz0 as /devices/virtual/input/input365 [ 1580.511397] input: syz0 as /devices/virtual/input/input366 [ 1580.518026] binder: 4193:4200 got transaction with invalid offset (56, min 0 max 0) or object. [ 1580.552204] binder_alloc: binder_alloc_mmap_handler: 4193 20003000-20006000 already mapped failed -16 [ 1580.586366] binder: BINDER_SET_CONTEXT_MGR already set [ 1580.593389] binder: 4193:4200 ioctl 40046207 0 returned -16 [ 1580.600170] binder_alloc: 4193: binder_alloc_buf, no vma [ 1580.616609] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1580.616609] [ 1580.632458] binder: undelivered TRANSACTION_ERROR: 29201 [ 1580.645213] binder: undelivered TRANSACTION_ERROR: 29189 [ 1580.682489] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:45 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x3f00]}}, 0x1c) 23:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)=""/53, &(0x7f00000000c0)=0x35) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x20000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xda33ae8546994262, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200000, 0x22) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x400, 0x40000) syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x0, 0x100) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = dup2(r0, r0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000280)={0x6, 0x3, 0x101}) r3 = socket$inet_udp(0x2, 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={@ipv4={[], [], @multicast1}, 0x7d, r4}) close(r3) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000001c0)=0x3f, 0x2) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sysfs$1(0x1, &(0x7f0000000180)='vmnet0!-\x00') sendfile(r5, r6, &(0x7f0000000040), 0x100000001) 23:18:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200640, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x8, 0x5, 0x4, 0xb9b3, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:45 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x40000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1580.966847] binder_alloc: binder_alloc_mmap_handler: 4219 20003000-20006000 already mapped failed -16 [ 1580.986913] input: syz0 as /devices/virtual/input/input369 [ 1580.996157] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.001617] binder: 4219:4221 ioctl 40046207 0 returned -16 23:18:45 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_DEV_CREATE(r1, 0x4008556c) 23:18:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1581.045257] input: syz0 as /devices/virtual/input/input371 [ 1581.073632] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1581.073632] 23:18:45 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10) ioctl$KDSETMODE(r0, 0x4b3a, 0x3f) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) init_module(&(0x7f0000000040)='/dev/uinput\x00', 0xc, &(0x7f0000000080)="626465762dc500") r2 = getpid() ptrace$poke(0x5, r2, &(0x7f0000000100), 0x7) ioctl$UI_DEV_CREATE(r1, 0x4008556c) 23:18:45 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7b00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xed) r3 = msgget$private(0x0, 0x500) msgctl$IPC_RMID(r3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x9, 0x4, 0x7, r2}, &(0x7f00000000c0)=0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x195000, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000140), 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1581.196714] binder_alloc: binder_alloc_mmap_handler: 4244 20003000-20006000 already mapped failed -16 [ 1581.228256] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.234069] binder: 4244:4248 ioctl 40046207 0 returned -16 23:18:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1581.349908] input: syz0 as /devices/virtual/input/input375 [ 1581.415311] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1581.415311] [ 1581.439032] input: syz0 as /devices/virtual/input/input376 [ 1581.446102] binder_alloc: binder_alloc_mmap_handler: 4260 20003000-20006000 already mapped failed -16 [ 1581.458979] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.466687] binder: 4260:4263 ioctl 40046207 0 returned -16 [ 1581.533328] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1581.533328] [ 1581.678950] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:18:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xffffffffbfffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x7, &(0x7f0000000140)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000060000004005000000000000c800000088020000c8000000c8010000a8040000a8040000a8040000a8040000a804000006000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d68a000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c80000000000000000000000000000000000000000000000000030005450524f58590000000000000000000000000000000000000000000000000200000001000080000000084e24000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000010000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000030000000000000040005450524f5859000000000000000000000000000000000000000000000001750e000004000000000000000000000000000000000000004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280045434e000000000000000000000000000000000000000000000000000000005b01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000128010000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000040000000000000040007365740000000000000000000000000000000000000000000000000000007f0000000000000000000000140000008c0000000800000008000000010801802800434845434b53554d00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000003800636f6e6e6279746573000000000000000000000000000000000000000000090000000000000004000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000002006030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5a0) sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x10800, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 23:18:46 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xe00]}}, 0x1c) 23:18:46 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xffffff7f00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="6744d5657687ed075243755a7d1a75e14b1f2a77715d4086673403442afd3cc9deaed8dbcd2c55217e1c81329a160fc430a857cfcbdca586cef304f96cdd0789fa8f0254147c1095e244880bdf2ec0fd153077c6a4c6a164d1e4ec81526dda4d732cfd4a8ab07bfc610ddafbaeb6a40fcee1510da49f82ac5abf5fd319abd2a8ede3157e43305a3a1c19b58ca16b4b4d33df1a6d6ac5c680ad52d45b43ca11516dbe4c388852c73d32e0d623516ea8aeee3c4f3e98c2e16e51bb5d02", 0xbc}, {&(0x7f00000001c0)="fca662a9a8f92febfd738d4a5c89c57b76618219e05553407d76b5ac27654752126fc9fb8c2dceff66e8cd5e4e203a79db92f7f112a37f4c116b4cb217a8612f4e532813b465d06b59d881234bacd462ab882fdffe2870ac05910e6ac256047b2b3c0c7281000220", 0x68}, {&(0x7f0000000240)="3d8cd57c75f754e9f662d82f47044c5e89c52a8c1c60a7604a9fdc79633049a841c5f581f5fc04772950c9c980989137028e4061f313d0e5edeb137815ff2991cfbdecc19b73f1b21c0ddfa97eb6661e4bf5a40849122367256ab05c5876070dc32f69f2a5ac387a38203a0566a0660a0b83ff39cd401ee74bdc8a7442141cc4c7884b7539d2df896e8a8206f29dc7760d7bab58bab41e75f3e34b358b6fa2525e28712e048f7e73ab915d6c40c6503e29309d7cc2337e3a06abb79c099fa6267dfa136cee712dc1", 0xc8}, {&(0x7f0000000340)="5b13cebbc13c4cdae6285626ac131918c4ef01aad9b7a73c938062dc09f8696094660de14db8eac15352f2290a71bca85ba566fe55dcfe6592a96c50550927c071a8739c4320e9bcccf4c894def33b8cba4e82b8ce2dc186a8b77767395a22f64c04b007c8894f5b7a3e5d41d9dca0d7b6d1d2dc07917fa9b6423f33fb5c5e4853fe7d342dd5fabb288b7921c98dea3934cbfcd2e8", 0x95}, {&(0x7f0000000400)="b3cc7aba7b37f14656e226", 0xb}, {&(0x7f0000000440)="300c717ba03c3b", 0x7}, {&(0x7f0000000480)="4b9b48e5ee16eab2bf36e27095aef0a32cd813f8094619f626c2adffddd4f83bfd0353aba171bc32506889966f829782cde1e52f012578d443d6f17294f2efc1b8a65ce005cbca9be8c9f51298a871717d1cb7f17a82c0c424be5b307afaf5d75d9846ae91e58dba8294179376ebabdbf93241bd07db271ba59027c586b1f2984c91da9a2ca942b03ccab37543eac60fe9d81b1caa7d4146b8a419354b", 0x9d}, {&(0x7f0000000600)="c0d79041fb91412336a786bf85f096bad8ccbacf6be6d523b5f70a9f7bedc0f262a6dd322a133524be25c68d21d7051183bb62e146cae88324e17e4ba67c5d6169533c4672b9ab763120df63172c65198139185a5cad7b71271473da051a136baa862ccfaad0fcb2026e8017668b98161de42d7fe77d574ca5d307c85e81c168b92c02a5c7c633db9199b35f1bebb3a2b9b46972f69715c47b628cf0bcda33f3db44e8f3f2318f6b7af00f6caab52df527590c67eb89ca046829e7dd5d7533e5b392397cb803ce35fef79ee59e057cfcc9fb60bcbb0d90e67537b28d865a36e06669d5931c2f4d551f340f9a70170f5ed813e218c35c", 0xf6}], 0x8, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0xfffffffffffffffc, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x1ab000000000000) ioctl$UI_DEV_CREATE(r0, 0x4008556c) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x101800, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x7fffffff, 0x40}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10000, 0x1) accept$inet(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00') ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000440)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x2) pipe(&(0x7f00000000c0)) [ 1581.903829] binder_alloc: binder_alloc_mmap_handler: 4289 20003000-20006000 already mapped failed -16 [ 1581.928650] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.934585] binder: 4289:4297 ioctl 40046207 0 returned -16 23:18:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1582.013045] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1582.013045] [ 1582.058380] input: syz0 as /devices/virtual/input/input379 [ 1582.110098] input: syz0 as /devices/virtual/input/input380 [ 1582.138049] binder_transaction: 4 callbacks suppressed [ 1582.138062] binder: 4312:4320 got transaction with invalid offset (56, min 0 max 0) or object. 23:18:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={r0, 0x0, 0x9, 0x4, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)={r0}) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fcntl$notify(r2, 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") r6 = inotify_add_watch(r5, &(0x7f0000000300)='./file0\x00', 0x10000001) inotify_rm_watch(r5, r6) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000280)=0xffff) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x0, {0xa, 0x4e21, 0x64f9, @dev={0xfe, 0x80, [], 0xd}, 0x56c}}}, {&(0x7f0000000080)=""/31, 0x1f}, &(0x7f00000000c0), 0x4}, 0xa0) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) [ 1582.144946] REISERFS warning (device loop1): reiserfs_fill_super: Cannot allocate commit workqueue 23:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x29, 0x2, 0x2}}, 0x14) [ 1582.206417] binder_alloc: binder_alloc_mmap_handler: 4312 20003000-20006000 already mapped failed -16 [ 1582.242967] binder: BINDER_SET_CONTEXT_MGR already set [ 1582.248504] binder: 4312:4320 ioctl 40046207 0 returned -16 23:18:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x48000) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:18:46 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xffff1f00, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x4200) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x70, 0x1f, 0x2, 0x8, 0x400, 0x0, 0x3, 0x100, 0x4, 0x1, 0x100000000, 0x9, 0x81, 0x3, 0xfffffffffffffffd, 0x1, 0x7, 0x9, 0x7fff, 0x400, 0x8001, 0xff, 0x3, 0x1, 0x8, 0x1af, 0x10000, 0x5, 0x3dc, 0x7, 0x800, 0x10000, 0x6, 0x9, 0x9, 0x1, 0xffffffffffffff4b, 0x0, 0xffff, 0x0, @perf_config_ext={0x81, 0x1}, 0x80, 0x2, 0xfffffffffffffc00, 0x7, 0x3, 0x1, 0x80000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0x9) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) [ 1582.279171] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1582.279180] binder_alloc: 4312: binder_alloc_buf, no vma 23:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x1, 0x5, 0x1ef, 'queue1\x00', 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) 23:18:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1582.412600] input: syz0 as /devices/virtual/input/input383 [ 1582.493566] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1582.493566] [ 1582.537109] input: syz0 as /devices/virtual/input/input386 [ 1582.565707] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1582.590474] binder: 4358:4361 got transaction with invalid offset (56, min 0 max 0) or object. [ 1582.666584] binder: BINDER_SET_CONTEXT_MGR already set [ 1582.691843] binder: 4358:4361 ioctl 40046207 0 returned -16 [ 1582.692663] binder_alloc: 4358: binder_alloc_buf, no vma 23:18:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xffffffff, 0x4) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7ff, 0x2) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000140)="206804f1e7871d3424299e7cad3527115f705b8ef458fa2c76f160af59f306624ee7f0c0351166260d8ee4060224bcca156736602f7ac1825b660aba7ded0624e86eb58651c3dca2c991f61d0727ad2189d602aef4fa233d01e71a2c4a3bf8527990703efb7ed63b8a3a4b9a7d8c4d185fbec68a42c3d2f9f4f8acf77bb997407aff1da6022e783fe14fffcd22101ddd04c24c98d7b99504902c11a7a38d60d9c70535f3e7e48ef730876881e196ed60207fd179fac45a69") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) 23:18:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:47 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0xaaaa]}}, 0x1c) 23:18:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x100000001) 23:18:47 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x4000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000003c0)=0x9f) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001b00)=r0) kexec_load(0xfffffffffffffff9, 0x5, &(0x7f0000000740)=[{&(0x7f0000000480)="cb53c07f358cf5ae6bec2366813669825ebdf82103bccd2162b7064244fccc9545d80dcc7607493859499bc3e347a15bf8e8ca547c52ec8be8840bea7723ac5ca4ebf196c9f617e841f17f4b391a120e67", 0x51, 0x8, 0x2}, {&(0x7f0000000500)="e999773c51515710f47398", 0xb, 0x800, 0x4}, {&(0x7f0000000600)="f3fc7899865506c95de9efcd325a63f0a56f3250f8e83a6ed7cece94676433d5f08c429a891b56ed4b301eafed4a6ba129e0f55c110b866c2d4a7d522c3b10acc7fbb6537b2ebd9317e697b7c64bdc42e04688576f2c55794b0e0a946d570ce630d931f7c0d77e8a17a8c8dbd6ae6c3a01788fe020cc98db077d286fd1e58683496b3da5599cad1b7d967f7d68bb83e87fd057a5de734b4171f8ccab8fed40d214ecb820ba136bf930175c89c3cadfda3a12b2ed9550161f5a3103772e233bcbb1aa9cbcdf25ded0a3631b1e1dce", 0xce, 0x3, 0x81}, {&(0x7f0000000540)="4999cacb0862394c9bd5f7d22fcc80972f8f2da73791654b5e9e81465a99a5777d069c6efe202d481dcc60bd6c2e279ef4f1f69eef162665e647c0479d3b7936a5127e4f52c7c7810c99b0f0786fcc57f797a1aec78dd58c3bc06ac74c1d68a8c0a98f0f405dc0fdfdb3247cb876495677dbc40508b277fc69a4f6199d2d", 0x7e, 0x5, 0x6}, {&(0x7f0000000700)="443cdb0fcf8f979c91a6fbc6b34f29a05c6e0a13309d2f380a63edf178e9c76b43aebc", 0x23, 0x6, 0x6}], 0x140000) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x800, 0xa2000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001a40)={0x0, @in={{0x2, 0x4e21, @local}}, 0x9, 0x2, 0x1000, 0x7, 0x10}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000440)={r3, 0x9}, &(0x7f0000000800)=0x8) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000900)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0xffffffffffffffff, 0x7, 0xe629, 0x8, 0x20, "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"}, 0x1118) fstat(r1, &(0x7f0000000880)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x3, r1}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1582.949957] input: syz0 as /devices/virtual/input/input388 [ 1582.977235] binder: 4375:4384 got transaction with invalid offset (56, min 0 max 0) or object. [ 1583.008739] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1583.008739] [ 1583.035089] binder_transaction: 18 callbacks suppressed [ 1583.035107] binder: 4375:4384 transaction failed 29201/-22, size 0-16 line 3033 [ 1583.071660] input: syz0 as /devices/virtual/input/input389 [ 1583.081399] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.100597] binder_alloc: 4375: binder_alloc_buf, no vma [ 1583.106356] binder: 4375:4397 transaction failed 29189/-3, size 0-16 line 2970 [ 1583.114279] binder: 4375:4384 ioctl 40046207 0 returned -16 23:18:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x4008556c) 23:18:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101180, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140)={0xf49c}, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1583.138564] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1583.138564] 23:18:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/pid\x00') r4 = socket(0x840000000001, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") sendfile(r4, r5, &(0x7f0000000040), 0x100000001) getpeername$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) 23:18:47 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x204000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) [ 1583.246134] input: syz0 as /devices/virtual/input/input391 23:18:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2c00000000000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) [ 1583.330123] input: syz0 as /devices/virtual/input/input392 [ 1583.367431] binder: 4417:4421 got transaction with invalid offset (56, min 0 max 0) or object. [ 1583.421971] binder: 4417:4421 transaction failed 29201/-22, size 0-16 line 3033 [ 1583.443815] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.449458] binder: 4417:4421 ioctl 40046207 0 returned -16 [ 1583.455386] binder_alloc: 4417: binder_alloc_buf, no vma 23:18:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r1, 0x9}}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:18:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x32, @empty, 0x4e24, 0x2, 'nq\x00', 0x2, 0x10001, 0x49}, {@multicast2, 0x4e20, 0x0, 0x3, 0x1, 0x6}}, 0x44) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000001c0)=0x1, &(0x7f0000000280)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getpeername$netlink(r3, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r4 = add_key$keyring(&(0x7f0000002900)='keyring\x00', &(0x7f0000002940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000002980)='syzkaller\x00', &(0x7f00000029c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r4, 0x0, 0x5, r5) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb3556aa7b9ce38ff18b1006d7c0206a74e33326530000000000000000000000") recvmsg$kcm(r6, &(0x7f0000002840)={&(0x7f0000000340)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/167, 0xa7}, {&(0x7f0000001480)=""/109, 0x6d}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/51, 0x33}, {&(0x7f0000002540)=""/74, 0x4a}, {&(0x7f00000025c0)=""/227, 0xe3}, {&(0x7f00000026c0)=""/253, 0xfd}], 0x8, 0x0, 0x0, 0x1}, 0x2) sendfile(r6, r7, &(0x7f0000000040), 0x100000001) r8 = add_key$keyring(&(0x7f0000002880)='keyring\x00', &(0x7f00000028c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r8) [ 1583.467282] binder: 4417:4434 transaction failed 29189/-3, size 0-16 line 2970 23:18:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) [ 1583.585946] binder: 4442:4444 got transaction with invalid offset (56, min 0 max 0) or object. [ 1583.597074] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1583.597074] [ 1583.617109] binder: 4442:4444 transaction failed 29201/-22, size 0-16 line 3033 [ 1583.638281] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.643983] binder_alloc: 4442: binder_alloc_buf, no vma [ 1583.651341] binder: 4442:4444 ioctl 40046207 0 returned -16 [ 1583.657490] binder: 4442:4450 transaction failed 29189/-3, size 0-16 line 2970 [ 1583.711063] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1583.711063] 23:18:48 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7ff, 0x2002040) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0xfffffffffffffffb, 0x0) ioctl$UI_DEV_CREATE(r1, 0x4008556c) accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f0000000000)=0x60, 0x80800) 23:18:48 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000540)=0xc54) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0x37f, &(0x7f000000e600)={&(0x7f000000dd40)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) membarrier(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x3, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x1}, 0x8) listen(r4, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22, 0xe00, @empty={[0x0, 0x0, 0x100000000000000]}}, 0x1c) 23:18:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x20]}}], 0x40, 0x0, &(0x7f0000000140)="ecc262d288b191714d30877ff7f6772f8c01e3a38282e01bc3cdc3f5543e804b679b9469cebf1b2b1a25c67286b26286f3194ab86c70510663e5cf4bce60143f"}) 23:18:48 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000d80)={[{@jdev={'jdev', 0x22, './file0'}}]}) 23:18:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x6, 0xffffffff, 0x2, 0x8}, 0xd, [0x9, 0xff, 0x6, 0x1, 0x1, 0x3, 0xfffffffffffffffc, 0x8000, 0x5, 0x3, 0x6a, 0x5, 0x7fff, 0x2, 0x1, 0x101, 0x20, 0x0, 0x5, 0xffff, 0x4, 0x2, 0x7, 0xffffffffffff4df6, 0xddb3, 0x8, 0x3f, 0x6, 0x1, 0x8, 0x400000000000, 0x8000, 0xc60, 0x0, 0x6, 0x20, 0xfffffffffffffffe, 0x4, 0x1c00000000000, 0xa668, 0x6, 0x200, 0x6, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x6, 0xffffffffffffff81, 0x5, 0x60000000000000, 0x7, 0xde7, 0x89, 0x7, 0x4, 0x3, 0x9, 0x0, 0x1ff, 0x0, 0x6, 0x10001, 0x5992, 0xff], [0x8, 0x9, 0x5, 0x4, 0x289c, 0x1000, 0xfffffffffffffff8, 0x13eb, 0x3, 0x3e, 0xf85, 0x7fffffff, 0x92b, 0x9, 0x1, 0x101, 0xffffffff80000000, 0x3ff, 0x9, 0x3, 0x8, 0x100000000, 0x100000000, 0x800, 0x4, 0xb0f0, 0x3, 0x5, 0x7, 0x5, 0x9, 0xfffffffffffffffa, 0x1ea9, 0xffffffffffffff26, 0xe6ec, 0x1, 0x4, 0x9a, 0x86e9, 0x9, 0xff, 0x5, 0x8, 0xd8, 0x7a, 0xfffffffffffffffe, 0x200, 0x0, 0x1, 0x3, 0x9, 0x6, 0x7, 0x9, 0xff, 0x18, 0x0, 0x7, 0x4, 0x401, 0x5, 0x0, 0x5, 0x40], [0x5, 0x1000, 0x4, 0x4, 0x1, 0x80000001, 0x4, 0x6, 0x69e, 0x7fff, 0x7, 0x9, 0x0, 0x3, 0x1, 0xb3d6, 0x7, 0x8, 0x200, 0x9, 0x5, 0x57, 0x9, 0xffffffff00000000, 0x22b7, 0xffffffff80000000, 0x9, 0x7, 0x9, 0x6, 0xb74a, 0xfffffffffffffe01, 0x1, 0x9, 0x200, 0x3, 0x5d, 0x7, 0xffff, 0x1f, 0x5, 0x7fffffff, 0x2, 0x8, 0x2, 0x87, 0x7, 0x8, 0x101, 0x101, 0x6, 0x3ff, 0x81, 0x200, 0x80, 0x6, 0xf140, 0x3, 0xff, 0x0, 0x1000, 0x0, 0x1], [0x0, 0x4, 0x1, 0x80000000, 0xa39, 0x81, 0x2, 0x80000001, 0x1000, 0x9, 0x7, 0x0, 0xa48, 0x2b2, 0x200, 0x56a3, 0x6, 0x1f, 0x4, 0x7fff, 0xffffffffffff8001, 0x9, 0x80000001, 0x2, 0x8, 0x8, 0xffff, 0x2, 0x9, 0x7, 0x9, 0x0, 0xfffffffffffffff7, 0x4, 0x3, 0x200, 0x100000000, 0x100, 0x1, 0x3, 0xf, 0x3f, 0xb02, 0x8, 0x7, 0x8, 0xff, 0xe0, 0x101, 0x835f, 0x10000, 0xada, 0x7, 0x2, 0x4, 0x3, 0x6, 0x80000001, 0x8, 0x7fff, 0x598, 0x8, 0x5, 0x8020]}, 0x45c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1f, 0x4e39cefeeb438830) write$binfmt_elf32(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x10001, 0x4, 0x0, 0x3, 0x3, 0x3e, 0x40, 0x3a, 0x38, 0x247, 0x17d0, 0x6, 0x20, 0x2, 0x8c, 0x2e, 0x3ff}, [{0x4, 0x6, 0x1, 0x80000000, 0x0, 0x3, 0x2, 0x1}], "a1d12e68a9870ea0c9cf6f46abcd14db99ebc69a97bd72bf79a8394b55e4ddbc267ee5b86d28cd87fa3f50e15df592dcc5d2e89e3fbee1a96e8d338b277a0d375f938198e2cce746232780b1bc089bb0ae1dc72a7061f6d0f785439ff196164260a82c59138736e9bfd982e9f57a580ecff90cb9c57d59782ecc7bf53fa37b3c7b95bc8f2a9acd0e5746a88c981ebfd1f9b41166a2a245a6c23cd5b259e40a747129a2fc73d1c8", [[], []]}, 0x2ff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1583.879136] binder: 4460:4467 got transaction with invalid offset (56, min 0 max 0) or object. [ 1583.895610] WARNING: CPU: 0 PID: 4469 at mm/slab_common.c:1031 kmalloc_slab+0x56/0x70 [ 1583.903607] Kernel panic - not syncing: panic_on_warn set ... [ 1583.903607] [ 1583.909476] binder: 4460:4467 transaction failed 29201/-22, size 0-16 line 3033 [ 1583.910987] CPU: 0 PID: 4469 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 1583.910998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.911005] Call Trace: [ 1583.911058] dump_stack+0x1c4/0x2b4 [ 1583.941230] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1583.946454] panic+0x238/0x4e7 [ 1583.949667] ? add_taint.cold.5+0x16/0x16 [ 1583.953834] ? __warn.cold.8+0x148/0x1ba [ 1583.957916] ? kmalloc_slab+0x56/0x70 [ 1583.961735] __warn.cold.8+0x163/0x1ba [ 1583.965667] ? rcu_bh_qs+0xc0/0xc0 [ 1583.969253] ? kmalloc_slab+0x56/0x70 [ 1583.971024] kobject: 'loop1' (00000000fe676353): kobject_uevent_env [ 1583.973072] report_bug+0x254/0x2d0 [ 1583.973096] do_error_trap+0x1fc/0x4d0 [ 1583.973115] ? math_error+0x3f0/0x3f0 [ 1583.973138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1583.980088] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.983171] ? trace_hardirqs_on_caller+0x310/0x310 [ 1583.983202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1583.983231] do_invalid_op+0x1b/0x20 [ 1583.987227] binder: 4460:4467 ioctl 40046207 0 returned -16 [ 1583.990914] invalid_op+0x14/0x20 [ 1583.990933] RIP: 0010:kmalloc_slab+0x56/0x70 [ 1583.990950] Code: c5 60 ab 00 89 5d c3 48 85 ff b8 10 00 00 00 74 f4 83 ef 01 c1 ef 03 0f b6 87 80 aa 00 89 eb d8 31 c0 81 e6 00 02 00 00 75 db <0f> 0b 5d c3 48 8b 04 c5 a0 aa 00 89 5d c3 66 90 66 2e 0f 1f 84 00 [ 1583.990959] RSP: 0018:ffff880188367978 EFLAGS: 00010246 [ 1583.990974] RAX: 0000000000000000 RBX: 00000000ffffff82 RCX: ffffc90009f20000 [ 1583.990983] RDX: 0000000000000078 RSI: 0000000000000000 RDI: 0000003fffffe0a0 [ 1583.991006] RBP: ffff880188367978 R08: ffff8801cdad4140 R09: ffffed00372de761 [ 1583.991027] R10: ffff880188367a48 R11: ffff8801b96f3b0f R12: 0000000000000000 [ 1583.991041] R13: 0000000000000000 R14: ffff880188190c80 R15: 00000000006080c0 [ 1584.003907] kobject: 'loop1' (00000000fe676353): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1584.006178] __kmalloc+0x25/0x760 [ 1584.006203] ? input_mt_init_slots+0xe5/0x4a0 [ 1584.006225] input_mt_init_slots+0xe5/0x4a0 [ 1584.038032] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "jdev" is only correct [ 1584.038032] [ 1584.047244] uinput_ioctl_handler.isra.10+0x2049/0x2540 [ 1584.047266] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 1584.047301] ? ___might_sleep+0x1ed/0x300 [ 1584.047322] ? arch_local_save_flags+0x40/0x40 [ 1584.142069] ? __might_fault+0x12b/0x1e0 [ 1584.146137] ? lock_downgrade+0x900/0x900 [ 1584.150296] uinput_ioctl+0x4c/0x60 [ 1584.153927] ? uinput_compat_ioctl+0x90/0x90 [ 1584.158342] do_vfs_ioctl+0x1de/0x1720 [ 1584.162238] ? ioctl_preallocate+0x300/0x300 [ 1584.166654] ? selinux_file_mprotect+0x620/0x620 [ 1584.171418] ? rhashtable_walk_next+0x101/0x6c0 [ 1584.176098] ? __sanitizer_cov_trace_cmp8+0xb/0x20 [ 1584.181031] ? put_timespec64+0x10f/0x1b0 [ 1584.185184] ? nsecs_to_jiffies+0x30/0x30 [ 1584.189338] ? do_syscall_64+0x9a/0x820 [ 1584.193323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1584.198884] ? security_file_ioctl+0x94/0xc0 [ 1584.203303] ksys_ioctl+0xa9/0xd0 [ 1584.206762] __x64_sys_ioctl+0x73/0xb0 [ 1584.210657] do_syscall_64+0x1b9/0x820 [ 1584.214550] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1584.219922] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1584.224856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1584.229704] ? trace_hardirqs_on_caller+0x310/0x310 [ 1584.234730] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1584.239761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1584.244614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1584.249805] RIP: 0033:0x457569 [ 1584.253001] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1584.271919] RSP: 002b:00007fe8c30a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1584.279635] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 1584.286901] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1584.294187] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1584.301458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8c30a36d4 [ 1584.308728] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 00000000ffffffff [ 1584.317189] Kernel Offset: disabled [ 1584.320940] Rebooting in 86400 seconds..