$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x11000000]}, 0x10) 13:58:19 executing program 7 (fault-call:4 fault-nth:72): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:19 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:19 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000fffffff500"}) [ 312.462741] binder: 23554:23556 got transaction to invalid handle [ 312.469092] binder: 23554:23556 transaction failed 29201/-22, size 0-12288 line 2852 [ 312.476770] FAULT_INJECTION: forcing a failure. [ 312.476770] name failslab, interval 1, probability 0, space 0, times 0 [ 312.483686] XFS (loop3): mtpt option not allowed on this system [ 312.488263] CPU: 0 PID: 23559 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 312.488278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.510588] Call Trace: [ 312.513194] dump_stack+0x1b9/0x294 [ 312.516844] ? dump_stack_print_info.cold.2+0x52/0x52 [ 312.522045] ? is_bpf_text_address+0xd7/0x170 [ 312.524757] binder_alloc: binder_alloc_mmap_handler: 23554 20002000-20006000 already mapped failed -16 [ 312.526550] ? kernel_text_address+0x79/0xf0 [ 312.526564] ? __unwind_start+0x166/0x330 [ 312.526587] should_fail.cold.4+0xa/0x1a [ 312.526604] ? __save_stack_trace+0x7e/0xd0 [ 312.526624] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 312.550872] binder: BINDER_SET_CONTEXT_MGR already set [ 312.552959] ? save_stack+0xa9/0xd0 [ 312.552975] ? save_stack+0x43/0xd0 [ 312.552989] ? kasan_kmalloc+0xc4/0xe0 [ 312.553003] ? kasan_slab_alloc+0x12/0x20 [ 312.553022] ? find_held_lock+0x36/0x1c0 [ 312.553053] ? check_same_owner+0x320/0x320 [ 312.553070] ? rcu_note_context_switch+0x710/0x710 [ 312.553090] __should_failslab+0x124/0x180 [ 312.569773] binder: 23554:23562 got transaction to invalid handle [ 312.570672] should_failslab+0x9/0x14 [ 312.570689] kmem_cache_alloc_node_trace+0x26f/0x770 [ 312.570714] __kmalloc_node_track_caller+0x33/0x70 [ 312.570735] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 312.570750] __alloc_skb+0x14d/0x780 [ 312.570764] ? skb_scrub_packet+0x580/0x580 [ 312.570783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.574720] binder: 23554:23562 transaction failed 29201/-22, size 0-12288 line 2852 [ 312.578811] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 312.578829] ? ip_mc_drop_socket+0x270/0x270 [ 312.578848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.578866] ? ip_generic_getfrag+0x11c/0x2d0 [ 312.584375] binder: 23554:23556 ioctl 40046207 0 returned -16 [ 312.587227] ? ip_reply_glue_bits+0xc0/0xc0 [ 312.587246] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 312.587263] ? skb_put+0x17b/0x1e0 [ 312.587283] __ip_append_data.isra.47+0x21a6/0x2a60 [ 312.587306] ? ip_reply_glue_bits+0xc0/0xc0 [ 312.587329] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 312.587347] ? ip_route_input_noref+0x250/0x250 [ 312.653242] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.658008] ? find_held_lock+0x36/0x1c0 [ 312.658026] ? ipv4_mtu+0x375/0x580 [ 312.658044] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 312.658064] ? lock_downgrade+0x8e0/0x8e0 [ 312.658087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 312.658101] ? ip_setup_cork+0x4dc/0x7c0 [ 312.658119] ip_make_skb+0x2aa/0x340 [ 312.663802] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.668498] ? ip_reply_glue_bits+0xc0/0xc0 [ 312.668519] ? ip_flush_pending_frames+0x30/0x30 [ 312.668535] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 312.668558] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.668574] ? xfrm_lookup_route+0x64/0x1f0 [ 312.668599] udp_sendmsg+0x25aa/0x3970 [ 312.668621] ? ip_reply_glue_bits+0xc0/0xc0 [ 312.668641] ? udp_push_pending_frames+0xf0/0xf0 [ 312.668663] ? graph_lock+0x170/0x170 [ 312.783605] ? find_held_lock+0x36/0x1c0 [ 312.787668] ? lock_downgrade+0x8e0/0x8e0 [ 312.791820] ? lock_release+0xa10/0xa10 [ 312.795788] ? check_same_owner+0x320/0x320 [ 312.800109] ? __check_object_size+0x95/0x5d9 [ 312.804628] inet_sendmsg+0x19f/0x690 [ 312.808413] ? __might_sleep+0x95/0x190 [ 312.812382] ? ipip_gro_receive+0x100/0x100 [ 312.816700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.822225] ? security_socket_sendmsg+0x94/0xc0 [ 312.826964] ? ipip_gro_receive+0x100/0x100 [ 312.831278] sock_sendmsg+0xd5/0x120 [ 312.834998] __sys_sendto+0x3d7/0x670 [ 312.838800] ? __ia32_sys_getpeername+0xb0/0xb0 [ 312.843476] ? wait_for_completion+0x870/0x870 [ 312.848066] ? __lock_is_held+0xb5/0x140 [ 312.852140] ? __sb_end_write+0xac/0xe0 [ 312.856120] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.861637] ? fput+0x130/0x1a0 [ 312.864902] ? ksys_write+0x1a6/0x250 [ 312.868687] ? __ia32_sys_read+0xb0/0xb0 [ 312.872732] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.878255] __x64_sys_sendto+0xe1/0x1a0 [ 312.882303] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 312.887306] do_syscall_64+0x1b1/0x800 [ 312.891178] ? finish_task_switch+0x1ca/0x840 [ 312.895660] ? syscall_return_slowpath+0x5c0/0x5c0 [ 312.900581] ? syscall_return_slowpath+0x30f/0x5c0 [ 312.905509] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 312.910867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.915697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.920877] RIP: 0033:0x4559f9 [ 312.924058] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.943377] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 312.951076] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 312.958332] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 312.965602] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 312.972863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 312.980122] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000048 [ 313.021936] XFS (loop3): mtpt option not allowed on this system 13:58:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 13:58:20 executing program 7 (fault-call:4 fault-nth:73): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x890d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x2756]}, 0x10) 13:58:20 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000000000100"}) 13:58:20 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r3 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{0x8, 0x7a}, 'port0\x00', 0x40, 0x2, 0x7, 0x3bb5ab91, 0x4, 0x7, 0x9, 0x0, 0x4, 0x5}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_proto_private(r3, 0x89e8, &(0x7f0000000080)="8560a820632dd347e0ebadc8dc97e09e3713cefb6bd25fe14a8ec303f15227eda4ff55fa2cec0c8baa3d63cb5c6055a2bfa2fbe060e4f2859f83a185f51a54004f92d27c7d6de5dd7e97c110b86445b2b5410c726696aca4058e5ee031bf6af6") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r4 = socket(0xa, 0x1, 0x0) dup2(r4, r1) 13:58:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)="78667302", &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 313.211462] binder: 23591:23592 got transaction to invalid handle [ 313.217819] binder: 23591:23592 transaction failed 29201/-22, size 0-12288 line 2852 13:58:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 313.253506] FAULT_INJECTION: forcing a failure. [ 313.253506] name failslab, interval 1, probability 0, space 0, times 0 [ 313.264817] CPU: 1 PID: 23600 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 313.271751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.272290] binder_alloc: binder_alloc_mmap_handler: 23591 20002000-20006000 already mapped failed -16 [ 313.281106] Call Trace: [ 313.281132] dump_stack+0x1b9/0x294 [ 313.281153] ? dump_stack_print_info.cold.2+0x52/0x52 13:58:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="f55e2b4986795b836769d3ad4b080c898d33c7c007bbf7a21a62ca6e920300a02f45df397ebbca9860876d3c829e2f9e84eb7d93cab00c123dd343827f71b7953efc4d8143219eb0ad031ba9512321e6950f956ac895b7ade74f6f7c9986ac559aea580ddfed0da61c5d31dd60d0351eb694ef412ccb57c8a8a6980c2ca291397fdc80a327855f0a7491b45179c06bc7f36fcd0c6280239927727e2c03ed74ac38d3b715cb8a51a0d2ee9d1cbb7c505926e647ce208b2c7ca13265d12ce97d562b0c00b6332749742c3614af74cb4d857a6fad6edc1f74fec8409f5cc510a5fd5be82de5470069890a08897436ee93c492bcd0b4d069be41c1d23c368b08c72656de561539dedfebbbb60e0bc4fbd588b7603e6b4a021f1b3568cbcd688de891e4349af16036df30fea43336bb3e02966f7c4b5648ddf2dcfc48e4ffa03a8cceb050df70886f6ca7b614e1566a792427d1641be70d2303c9f046020f8e313eb75abc55098287ebbd2748e8fc4dca08468eed4bfbafc1562b81bf765d5a5d9e8cb2ec0c9935b16492cbe781829699dce49092ded1c90ea3441699459c73350a1f8c511e6d438e67656a2ecbc37ae3e2464d95ffbbe52534a3c82cc450c03763bee081d21d8b32c6120b498221f27986f66ea9a33d113e902651a24b0bfc7f7e3e8ec0ab5264890727e835a9707cc60d8bc2f2f7e77634e8ee300f7be597d3f0f3a353a8c996818f4fc86cfb228b085ea98739ef919a428e5913f08e7576f2aeaff63f10921f45a99aa215d91e5c42e234eb4ff7eac0961ed3b2cc311112ab5e54a498e864f5d9528152300e34830f41f239b45d1f05b8cfa2d91761644d5f781a85fcada16069a66b32c4f44e179bbbcceb227d5cc47929061ff2b77b004e6b378c6e26c9b77a59b6b2effbf9fc89fc22772f7fd74a41c3a2650f6901f34d2e1ae1de1321f368be5148324396bf951ca02e22bbe603fa3c4fb5d9aa654927397d30a6a2dfa8f2cc5101fa0a2420f5551953d0c2ffe8e2fa6eb8a456aec384b205d3ee4dcbc3704905b706f3c5cc684772ad5bcc0dd388232f9a6762ad5ef172465f7a07c372c7d5badccd2c3761e72d16d9ea21c854c2fd30822d3d270c095e8ab588f022b8e4b7ba8f28a00340c477281fa3adecb1944371db41719e2f023f3d1c19343fea2a2029db3b4067ffa56ff110744db8cdb31b14548f669a3c4b3697d08fca97fee4a48a59e822265f22e72f7ac468f7a47f84dbd4fe915ddcff2ca0018514de93a4a928aa522873b902e4dab3d7c56fa7a95755fe97ee9b338858ad7357a00846b7e97ab74766d47b1775007efcc52144f731af974a41d2c8fe4c775d832b3e6defb864989ed5f830526dc86a7ba151a0fe1e4d1078576482be8208065f6af8b04d74c6553a26ec48a0694398b1c016da67b5609efca267fbd687d4c4cbc90f9c3bee8d5d652adc914037c0db5e36ece8a76b9ee7a11eec6ec4a60d97ac07adfa1bd5087a044f30a09300cc3459c60261490b085cdb349c82be0205e8cbf61276b9bb2ba685b2ee643d8e022f1400aa73d21850385720d73bf0991345b83ee43a5d03e4804fb2f2a29bf4bed1c02165da8c3db87be85d99180ed2dd6e8a56883d4d1a26f0ad1dee9fbe3318eff86fd574b1775bf5db643a1e185789739c3bba49f92ba9860dcc72ab747b9161d177a5c1155ac29118abb333f331fbfd2c9e268aeb6264738c99586d83ca389adbe0f0b797f5d7564f19d6469b89fa37904559ccfab5d03c0c7153ee7ee1fa378537b43a74efdad6bf3c193a77ba4a21acd3b37e99b8fd92e29361fc1777b6f680b2cd0ad98aa36607cb7403cabd68667d3ededfb5f86d98f2c53ee2c4def9de5aacf090f5898eacd0b313b55299d3bb81258a73aa4ec20e50a00005c931b061b5d9ca9a99e85592093211dfd783ed7d37d87272498df51e648f81bf680673fe678193a7378e8512be77befc0126aa46c1e2da499147cde01beb9d5d8f36f1811c76081c80bef568614c4cf0dffb5031243859ff95da5397364264e08e0967fdc155096d640d7f38eda808bee20c4b212b68758966a0b3abb43e0bd61b23acbf652442a50ec6366204e975579923cbbdaeb9749461c0a02a7fc2d2d82b763dd1fcffec022350b4682ba8a5dc462c5452d78d7d6b23eea7213c93b731af773947e6cd18aab0485048d3b45b5f498ed53a21be1fbdc23d23423c00fcc6719228e408cfdfddfd0208e5f05648fd64cce45948525c3d05bcdfc8d3bdfbb31e9632857b97fff1280aedbfb0b79bd78d9df57c2ac57505892646bbbde5c35117985e4cb324c019dee774963c51fe4665769e1f06147bae7d40088961ef1852fcce5a040dc444245499a4a815b86e5c60951fbd782eedc1d8ac657a1b4fb1897ee12b6532cfac2c18e613abb70d7e5479a24f203ca6906670498ecfeadf4aa4b3a1dd0c43914302c61e1c9c084d5719a8f8923616ee618fc035b7e480f288348bb213c42d842e260cbdb57b8ebae1eb30b4eada0db649e62dccd6c1349e541a57d88d25c97d4f93c5e680bfccefc6ab63aa7466e50c58030c14bbdce22b21de298128b01b1176b7b39a94725b124697506bc9b82a619bd993ce3f15574445c7de5f046990fd8dd12ddf929e05ecf7736e69b7df582e1698a9269cd05212b4b34f4394752ef8d04f902d8d4e8731e98e0f80fedb8a920375114c80665c7b34c2245e54f9cbf6a470370bedd93c74a46bebcf89db299737ee7217a8f44915bd378d11f6d59642c986aa2d3f6fac2c2f880d6c5f633da442f5ba0d04783a38cde65aeca0b6a1cf4ec8f5f65b4c46a9db4cca5de79fef1ddad44993ff3787a6abe6509a7aaead1e0be24eb59d1930cce36730dce337fc8684c3005f54ebbef29a6ff597b2ac301724aef3ad05c3693d5d3626a3fab98e3f06b534799134fed7c5e1ce0f6ada8a27b266ca4377c0c65883bb02f53fd76a8fa5d87853c413352eeb710e8e3dc6b81764be2947366bbdfc208bf332b1dcf70e69b0bfd400ce31bd1da6eaa7b09eac71d9c6e0fa6f7084ad71fe41247db5334eb5938db36fca4e83f85a20376407aa696f00781a3270bda478998f08b79d4c2834a92d17d4c0963828c3011e540573288860f960d659ace5ec4bd5838d219b0b4852adf0e9fc54707e47216bb81287febe20dd2fa341ca387f325cf90ba6ca1d7dcb08fd7fbc3b5ffbd81b2562f56333412f6eed3c14eff5020c7c7057f2dc9ae0e38fb430b969e15661495c411506a8b39caa140b0bf93c46131144b8ee53c07e94f7817cefa3b4e110d803af3d4ad141cdd35015998155f16eda604580c9ecb7739c8128f7b34e8c0f6e15b96c5b98b5b2952ece52cd16191b26f9684b7c01fd918b00096b0a1117776480587a5946a22f963f93cdbef86880515f0d95ab0574e6db9cd7519ba68c9b806ad598c7aa05682d2125cadc941a49c6eaf08e68464303cfb82f89b4026b56f89472489ad9f96188bfb6d9ad8dab962cb8fdad348ac032879630296c60983b8f69f8bb1a6b5bd87f3b3f702e3efe8ec71f4743a48a74d06d5d96ffbcfefba391b1f2d79d6f8eb5d6f6d7bc31e0cae7a7a4018b8c9b22b44717e2862aad2d901d7345ed35a6218b11ce23dde5986a63cda8bf7fba489e6da9ae8d4544c623a1ffb2fa5abda188738a52cdc3987f01ac6ebfa29f5a25a68b61d3879d3f2d3c4109550ef29fd4ce0528399a58c496b6bceb514db6f3df5cb611e9198d4568860eb3d8a69962a0aff03e90c473a867483d1b5e3ae6b960fbd6a8287492a584da378fbc3a98bd5e6b3f29535d9da91f628e90bf423f286d827ebbf2355bf8c80629d703b1a9a5cc056d4a0524ed86d58e5f89a97169560389b935898ee896cb34963edd56aa1e0d51a12df606b4d6dd5fda600c1f2c09cffee88bee058df327981fc52b26f2ad148bedeb9fce53a434988bab494e3effd118bbccaab76df55aa3cb05fcaa74b315fb1b141e718e6b17f90313aa95e0f97df8cf7cfaca774d63df8bcf86bb467d79697b9c4def577ec3f97f9b0b59c5773a6d91710a0f092294571cd1d0b506d29c5514789de777924239b9b16048eb8d80b75db959f2033a1bf8ff182d67535fa67c06ca1df513ca8c7b98526cc6f959e135a671bb8068288a782040cb9b84b8fb2ecf26bec1f5e896f3b597d53d038474d108c0524b11eb352ed0a34a2c9ed7dd1f17ac8a44037112e32c23404f2daba35e916e54712efe9d4df3e0e124cab0f83220f9c9564de1fe4b86f64c7201af93f32d3e0447a25b6279df4535a5e6d60f382c0ab1b9e2220e705f0ab6ba8f38f1175aa51b2883560f8a901f1e91e818f932a17a838464fba1f0d08403aadefe744782b14547ddef0452886c0c66af4c5555780bbb6bf9b64bf1a7ab16ca60d1f14ad6d9324cab5679678b318de2f63405ef438848c741eaed7cffc1d35b41a1f4509c2b5a231125c0d2562cf74e7d92af0bc92cdc36d89ca57ec6a8d8ac229cfd1326b458623adaed2d7b4a4dc6849be154c0f93f7f19e72936e6e0e36af6a95e868fa2ae5b012224d8fc0aa6c8dcd85379fa415baa10a8a2f21922f0011f7e33933001c6188a6bf8209705cad9b2cd5a939d2132c7199547da68511ac8de2bacceda486d5bfbd1bb35db4230e430601bd21d809ba1f0c2bdf00a9e8774ce53598df41e3f0cb2aa29384763bb5f605c3e5e6260c908af58e56f133a9087e8eca1b3682a096c1a3030382faddaadc8eb50167578b8fa1dba4edeb3958c396f7f4b3de16710495e204f6bb7d3d20877755ddf3675a886f0e0ef0413d57fcce2c84dc1bcee3fb6bd9b8eb982fb6b470f569d1065ba9ce98f281fc3e601c2d848fb8b7f87c4f754833b7c314d4d641e2a9c0679af73a4afe0fed36dc886a4123dbe0873c6cb0849a2ae3e4608b795ea3c93ff73fe2d8a26ee445bdd8a5d5392565d8fb13253345fe52ba0a10b478a4460c5fa395e4df6d9e216e7907303ccc3329303010559a29befa30d681b33ed9f80d9597bf5990a634492c571cdb17f3369a43123936fccad8c26f08e9454ca254bab72703a7e63427ec48e565b87b2e80a03bbcfccb6d2f8074ca5d84ff55e5b38e01ec2ad3181564d197bb62e7b20dc5c5cdf7d5479c05b5580342d23e83b73107fb777489220f26b6d91ae756d8d6241688db884519e2bdc006a8024316768e4dcfaef3c4073a4b15e8b5e3d85a54946849e1fc2aa0279d8937ba730f36771249d50038a432ff00acf2d23dd6417c4f01ce7dd53e1c050065a655f9e56699b4743ae4cfb0e9249348f2a3d07db13d78b31e49b9e59519b4cae17b20a81acd024056959dd0f890dfc8baa674ae4f3ace15dd820eeb6b031b3cf4362dbc0c9505f14e8c3fb44d8bc8219daf448ff9de449df5fe91ea4f40c86686ac17c73795c0bbc1e2b64ef1adc552f190ab08555eaa37f3fa3720096edad77e5255b256064b6659758f1ff7eeb8e4e270e2969bd3d87e4aff90a1a8d7c28094f57f85e60503c772ffcfdf01ab11d13713eccab5d09c6690dac96879fd39d95a5d91130cdeebe7fc7ef194e594d84c1707ebab4b94f55868f631a45ac8dd4e196bb0c18336e35969a13987aa41f3426722f3cbc2cd7f16fdb326b9a8c8e11593be5f6b06d8e3a4dfb1d52fb68b130f55e78341e234c6394046b3b3ac44fe4c248ad397223222d284149563b42e0c46b72fdb3cc5af5cbaf84f11dd4630d4878bdf7b4af021d49e7d788939366912f873c0ce97fd207", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000003940)=ANY=[@ANYBLOB="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"], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) [ 313.281174] ? unwind_get_return_address+0x61/0xa0 [ 313.281190] ? __save_stack_trace+0x7e/0xd0 [ 313.281210] should_fail.cold.4+0xa/0x1a [ 313.311260] binder: BINDER_SET_CONTEXT_MGR already set [ 313.315291] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 313.315310] ? save_stack+0xa9/0xd0 [ 313.315326] ? save_stack+0x43/0xd0 [ 313.315345] ? kasan_kmalloc+0xc4/0xe0 [ 313.336800] ? __kmalloc_node_track_caller+0x47/0x70 [ 313.341912] ? __alloc_skb+0x14d/0x780 [ 313.345818] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 313.347406] binder: 23591:23611 got transaction to invalid handle [ 313.351007] ? ip_make_skb+0x2aa/0x340 [ 313.351023] ? udp_sendmsg+0x25aa/0x3970 [ 313.351040] ? inet_sendmsg+0x19f/0x690 [ 313.351053] ? sock_sendmsg+0xd5/0x120 [ 313.351066] ? __sys_sendto+0x3d7/0x670 [ 313.351079] ? __x64_sys_sendto+0xe1/0x1a0 [ 313.351094] ? do_syscall_64+0x1b1/0x800 [ 313.351115] ? find_held_lock+0x36/0x1c0 [ 313.357358] binder: 23591:23611 transaction failed 29201/-22, size 0-12288 line 2852 [ 313.361212] ? check_same_owner+0x320/0x320 13:58:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 313.361232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.367287] binder: 23591:23592 ioctl 40046207 0 returned -16 [ 313.369220] ? rcu_note_context_switch+0x710/0x710 [ 313.369243] __should_failslab+0x124/0x180 [ 313.369260] should_failslab+0x9/0x14 [ 313.369274] kmem_cache_alloc_node+0x272/0x780 [ 313.369296] __alloc_skb+0x111/0x780 [ 313.369312] ? skb_scrub_packet+0x580/0x580 [ 313.413947] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.417931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.417949] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 313.417968] ? ip_mc_drop_socket+0x270/0x270 [ 313.417985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.418001] ? ip_generic_getfrag+0x11c/0x2d0 [ 313.418018] ? ip_reply_glue_bits+0xc0/0xc0 [ 313.418040] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 313.418055] ? skb_put+0x17b/0x1e0 [ 313.418073] __ip_append_data.isra.47+0x21a6/0x2a60 [ 313.422903] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.426110] ? ip_reply_glue_bits+0xc0/0xc0 [ 313.426136] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 313.426151] ? ip_route_input_noref+0x250/0x250 [ 313.426170] ? find_held_lock+0x36/0x1c0 [ 313.426185] ? ipv4_mtu+0x375/0x580 [ 313.426202] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 313.426221] ? lock_downgrade+0x8e0/0x8e0 [ 313.426245] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 313.426259] ? ip_setup_cork+0x4dc/0x7c0 [ 313.426276] ip_make_skb+0x2aa/0x340 [ 313.538148] ? ip_reply_glue_bits+0xc0/0xc0 [ 313.542486] ? ip_flush_pending_frames+0x30/0x30 [ 313.547256] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 313.552812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.558365] ? xfrm_lookup_route+0x64/0x1f0 [ 313.562687] udp_sendmsg+0x25aa/0x3970 [ 313.566585] ? ip_reply_glue_bits+0xc0/0xc0 [ 313.570903] ? udp_push_pending_frames+0xf0/0xf0 [ 313.575655] ? graph_lock+0x170/0x170 [ 313.579510] ? find_held_lock+0x36/0x1c0 [ 313.583587] ? lock_downgrade+0x8e0/0x8e0 [ 313.587730] ? lock_release+0xa10/0xa10 [ 313.591701] ? check_same_owner+0x320/0x320 [ 313.596029] ? __check_object_size+0x95/0x5d9 [ 313.600524] inet_sendmsg+0x19f/0x690 [ 313.604334] ? __might_sleep+0x95/0x190 [ 313.608300] ? ipip_gro_receive+0x100/0x100 [ 313.612622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.618161] ? security_socket_sendmsg+0x94/0xc0 [ 313.622916] ? ipip_gro_receive+0x100/0x100 [ 313.627242] sock_sendmsg+0xd5/0x120 [ 313.631052] __sys_sendto+0x3d7/0x670 [ 313.634858] ? __ia32_sys_getpeername+0xb0/0xb0 [ 313.639531] ? wait_for_completion+0x870/0x870 [ 313.644114] ? __lock_is_held+0xb5/0x140 [ 313.648168] ? __sb_end_write+0xac/0xe0 [ 313.652131] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 313.657661] ? fput+0x130/0x1a0 [ 313.660950] ? ksys_write+0x1a6/0x250 [ 313.664759] ? __ia32_sys_read+0xb0/0xb0 [ 313.668816] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 313.674345] __x64_sys_sendto+0xe1/0x1a0 [ 313.678398] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 313.683422] do_syscall_64+0x1b1/0x800 [ 313.687312] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 313.692150] ? syscall_return_slowpath+0x5c0/0x5c0 [ 313.697076] ? syscall_return_slowpath+0x30f/0x5c0 [ 313.702002] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 313.707376] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.712231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.717413] RIP: 0033:0x4559f9 [ 313.720595] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.739873] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 313.747591] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 13:58:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xf401]}, 0x10) [ 313.754855] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 313.762118] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 313.769382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 313.776653] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000049 13:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:21 executing program 7 (fault-call:4 fault-nth:74): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 313.803120] binder: 23618:23619 got transaction to invalid handle [ 313.810225] binder: 23618:23619 transaction failed 29201/-22, size 0-12288 line 2852 [ 313.862259] binder_alloc: binder_alloc_mmap_handler: 23618 20002000-20006000 already mapped failed -16 [ 313.907924] binder: BINDER_SET_CONTEXT_MGR already set [ 313.917998] binder: 23618:23631 ioctl 40046207 0 returned -16 [ 313.925803] binder: 23618:23633 got transaction to invalid handle [ 313.932275] binder: 23618:23633 transaction failed 29201/-22, size 0-12288 line 2852 [ 313.942747] FAULT_INJECTION: forcing a failure. [ 313.942747] name failslab, interval 1, probability 0, space 0, times 0 [ 313.954145] CPU: 1 PID: 23639 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 313.955589] XFS (loop3): mtpt option not allowed on this system [ 313.961075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.961081] Call Trace: [ 313.961105] dump_stack+0x1b9/0x294 [ 313.961125] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.961153] ? is_bpf_text_address+0xd7/0x170 [ 313.961176] ? kernel_text_address+0x79/0xf0 [ 313.996835] ? __unwind_start+0x166/0x330 [ 314.001011] should_fail.cold.4+0xa/0x1a [ 314.005092] ? __save_stack_trace+0x7e/0xd0 [ 314.009431] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.014558] ? save_stack+0xa9/0xd0 [ 314.018198] ? save_stack+0x43/0xd0 [ 314.021831] ? kasan_kmalloc+0xc4/0xe0 [ 314.025726] ? kasan_slab_alloc+0x12/0x20 [ 314.029890] ? find_held_lock+0x36/0x1c0 [ 314.033985] ? check_same_owner+0x320/0x320 [ 314.038317] ? rcu_note_context_switch+0x710/0x710 [ 314.043265] __should_failslab+0x124/0x180 [ 314.047506] should_failslab+0x9/0x14 [ 314.051316] kmem_cache_alloc_node_trace+0x26f/0x770 [ 314.056440] __kmalloc_node_track_caller+0x33/0x70 [ 314.061388] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 314.066157] __alloc_skb+0x14d/0x780 [ 314.069880] ? skb_scrub_packet+0x580/0x580 [ 314.073267] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.074208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.074228] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 314.074246] ? ip_mc_drop_socket+0x270/0x270 [ 314.074264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.074279] ? ip_generic_getfrag+0x11c/0x2d0 [ 314.074297] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.082237] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.085268] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.085287] ? skb_put+0x17b/0x1e0 [ 314.085308] __ip_append_data.isra.47+0x21a6/0x2a60 [ 314.085331] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.085356] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 314.085370] ? ip_route_input_noref+0x250/0x250 [ 314.085389] ? find_held_lock+0x36/0x1c0 [ 314.147202] ? ipv4_mtu+0x375/0x580 [ 314.150830] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 314.156273] ? lock_downgrade+0x8e0/0x8e0 [ 314.160412] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 314.165941] ? ip_setup_cork+0x4dc/0x7c0 [ 314.170002] ip_make_skb+0x2aa/0x340 [ 314.173712] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.178030] ? ip_flush_pending_frames+0x30/0x30 [ 314.182781] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 314.188306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.193840] ? xfrm_lookup_route+0x64/0x1f0 [ 314.198149] udp_sendmsg+0x25aa/0x3970 [ 314.202042] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.206368] ? udp_push_pending_frames+0xf0/0xf0 [ 314.211123] ? graph_lock+0x170/0x170 [ 314.214914] ? find_held_lock+0x36/0x1c0 [ 314.218968] ? lock_downgrade+0x8e0/0x8e0 [ 314.223108] ? lock_release+0xa10/0xa10 [ 314.227066] ? check_same_owner+0x320/0x320 [ 314.231372] ? __check_object_size+0x95/0x5d9 [ 314.235866] inet_sendmsg+0x19f/0x690 [ 314.239655] ? __might_sleep+0x95/0x190 [ 314.243614] ? ipip_gro_receive+0x100/0x100 [ 314.247921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.253447] ? security_socket_sendmsg+0x94/0xc0 [ 314.258186] ? ipip_gro_receive+0x100/0x100 [ 314.262509] sock_sendmsg+0xd5/0x120 [ 314.266216] __sys_sendto+0x3d7/0x670 [ 314.270013] ? __ia32_sys_getpeername+0xb0/0xb0 [ 314.274674] ? wait_for_completion+0x870/0x870 [ 314.279252] ? __lock_is_held+0xb5/0x140 [ 314.283300] ? __sb_end_write+0xac/0xe0 [ 314.287265] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.292791] ? fput+0x130/0x1a0 [ 314.296068] ? ksys_write+0x1a6/0x250 [ 314.299873] ? __ia32_sys_read+0xb0/0xb0 [ 314.303913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.309448] __x64_sys_sendto+0xe1/0x1a0 [ 314.313502] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 314.318502] do_syscall_64+0x1b1/0x800 [ 314.322372] ? finish_task_switch+0x1ca/0x840 [ 314.326852] ? syscall_return_slowpath+0x5c0/0x5c0 [ 314.331774] ? syscall_return_slowpath+0x30f/0x5c0 [ 314.336689] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 314.342045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.346871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.352047] RIP: 0033:0x4559f9 [ 314.355216] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.374396] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 314.382091] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 314.389347] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 314.396614] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 314.403876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 314.411128] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 000000000000004a 13:58:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003e80)=@dstopts={0x2f, 0x200, [], [@generic={0x10001, 0x1000, "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"}]}, 0x1010) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x12, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xffffffffffffffe5}, 0x0) r3 = socket(0x9, 0x3, 0x690000000) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0xc5, 0xfff}, 0x2) 13:58:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x5627]}, 0x10) 13:58:21 executing program 7 (fault-call:4 fault-nth:75): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:21 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") prctl$setname(0xf, &(0x7f0000000000)='/dev/net/tun\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) dup2(r3, r1) 13:58:21 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) [ 314.465241] XFS (loop3): mtpt option not allowed on this system r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}) [ 314.547740] FAULT_INJECTION: forcing a failure. [ 314.547740] name failslab, interval 1, probability 0, space 0, times 0 [ 314.559077] CPU: 1 PID: 23669 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 314.566012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.575372] Call Trace: [ 314.577972] dump_stack+0x1b9/0x294 [ 314.581615] ? dump_stack_print_info.cold.2+0x52/0x52 [ 314.586822] ? unwind_get_return_address+0x61/0xa0 [ 314.591769] ? __save_stack_trace+0x7e/0xd0 [ 314.596129] should_fail.cold.4+0xa/0x1a [ 314.600208] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.605315] ? save_stack+0xa9/0xd0 [ 314.608955] ? save_stack+0x43/0xd0 [ 314.612593] ? kasan_kmalloc+0xc4/0xe0 [ 314.616490] ? __kmalloc_node_track_caller+0x47/0x70 [ 314.621600] ? __alloc_skb+0x14d/0x780 [ 314.625494] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 314.630687] ? ip_make_skb+0x2aa/0x340 [ 314.634583] ? udp_sendmsg+0x25aa/0x3970 [ 314.638651] ? inet_sendmsg+0x19f/0x690 [ 314.642632] ? sock_sendmsg+0xd5/0x120 [ 314.646516] ? __sys_sendto+0x3d7/0x670 [ 314.650475] ? __x64_sys_sendto+0xe1/0x1a0 [ 314.654694] ? do_syscall_64+0x1b1/0x800 [ 314.658744] ? find_held_lock+0x36/0x1c0 [ 314.662818] ? check_same_owner+0x320/0x320 [ 314.667142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.672683] ? rcu_note_context_switch+0x710/0x710 [ 314.677630] __should_failslab+0x124/0x180 [ 314.681863] should_failslab+0x9/0x14 [ 314.685646] kmem_cache_alloc_node+0x272/0x780 [ 314.690225] __alloc_skb+0x111/0x780 [ 314.693951] ? skb_scrub_packet+0x580/0x580 [ 314.698277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.703817] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 314.709179] ? ip_mc_drop_socket+0x270/0x270 [ 314.713593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.719132] ? ip_generic_getfrag+0x11c/0x2d0 [ 314.723634] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.727951] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.732964] ? skb_put+0x17b/0x1e0 [ 314.736499] __ip_append_data.isra.47+0x21a6/0x2a60 [ 314.741512] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.745831] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 314.751616] ? ip_route_input_noref+0x250/0x250 [ 314.756273] ? find_held_lock+0x36/0x1c0 [ 314.760316] ? ipv4_mtu+0x375/0x580 [ 314.763932] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 314.769372] ? lock_downgrade+0x8e0/0x8e0 [ 314.773519] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 314.779048] ? ip_setup_cork+0x4dc/0x7c0 [ 314.783098] ip_make_skb+0x2aa/0x340 [ 314.786813] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.791128] ? ip_flush_pending_frames+0x30/0x30 [ 314.795866] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 314.801390] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.806913] ? xfrm_lookup_route+0x64/0x1f0 [ 314.811222] udp_sendmsg+0x25aa/0x3970 [ 314.815109] ? ip_reply_glue_bits+0xc0/0xc0 [ 314.819421] ? udp_push_pending_frames+0xf0/0xf0 [ 314.824190] ? graph_lock+0x170/0x170 [ 314.827995] ? find_held_lock+0x36/0x1c0 [ 314.832054] ? lock_downgrade+0x8e0/0x8e0 [ 314.836189] ? lock_release+0xa10/0xa10 [ 314.840152] ? check_same_owner+0x320/0x320 [ 314.844466] ? __check_object_size+0x95/0x5d9 [ 314.848957] inet_sendmsg+0x19f/0x690 [ 314.852738] ? __might_sleep+0x95/0x190 [ 314.856693] ? ipip_gro_receive+0x100/0x100 [ 314.861006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.866537] ? security_socket_sendmsg+0x94/0xc0 [ 314.871277] ? ipip_gro_receive+0x100/0x100 [ 314.875593] sock_sendmsg+0xd5/0x120 [ 314.879303] __sys_sendto+0x3d7/0x670 [ 314.883086] ? __ia32_sys_getpeername+0xb0/0xb0 [ 314.887751] ? wait_for_completion+0x870/0x870 [ 314.892321] ? __lock_is_held+0xb5/0x140 [ 314.896395] ? __sb_end_write+0xac/0xe0 [ 314.900366] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.905898] ? fput+0x130/0x1a0 [ 314.909176] ? ksys_write+0x1a6/0x250 [ 314.912963] ? __ia32_sys_read+0xb0/0xb0 [ 314.917024] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.922556] __x64_sys_sendto+0xe1/0x1a0 [ 314.926613] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 314.931623] do_syscall_64+0x1b1/0x800 [ 314.935492] ? finish_task_switch+0x1ca/0x840 [ 314.939969] ? syscall_return_slowpath+0x5c0/0x5c0 [ 314.944880] ? syscall_return_slowpath+0x30f/0x5c0 [ 314.949796] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 314.955158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.959998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.965181] RIP: 0033:0x4559f9 [ 314.968357] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.987605] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 13:58:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 314.995307] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 315.002581] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 315.009849] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 315.017118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 315.024370] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 000000000000004b [ 315.041771] binder: 23671:23673 got transaction to invalid handle 13:58:22 executing program 7 (fault-call:4 fault-nth:76): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 315.048159] binder: 23671:23673 transaction failed 29201/-22, size 0-12288 line 2852 [ 315.068883] binder_alloc: binder_alloc_mmap_handler: 23671 20002000-20006000 already mapped failed -16 [ 315.123613] XFS (loop3): mtpt option not allowed on this system [ 315.135573] binder: BINDER_SET_CONTEXT_MGR already set [ 315.135598] binder: 23671:23684 got transaction to invalid handle [ 315.142799] FAULT_INJECTION: forcing a failure. [ 315.142799] name failslab, interval 1, probability 0, space 0, times 0 [ 315.147201] binder: 23671:23684 transaction failed 29201/-22, size 0-12288 line 2852 [ 315.158422] CPU: 1 PID: 23692 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 315.173200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.182558] Call Trace: [ 315.185163] dump_stack+0x1b9/0x294 [ 315.188802] ? dump_stack_print_info.cold.2+0x52/0x52 [ 315.190163] binder: 23671:23673 ioctl 40046207 0 returned -16 [ 315.193999] ? is_bpf_text_address+0xd7/0x170 [ 315.194022] ? kernel_text_address+0x79/0xf0 [ 315.194037] ? __unwind_start+0x166/0x330 [ 315.194057] should_fail.cold.4+0xa/0x1a [ 315.194071] ? __save_stack_trace+0x7e/0xd0 13:58:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvmsg(r0, &(0x7f0000002b80)={&(0x7f0000002b00)=@xdp, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002dc0)=""/234, 0xea}, {&(0x7f0000002ec0)=""/232, 0xe8}], 0x2, &(0x7f00000030c0)=""/168, 0xa8, 0xfffffffffffffff9}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x10001, 0x5, &(0x7f0000001540)=[{&(0x7f00000000c0)="c310fd37db99da719ee9b9c505a02b7c61a7778fe2125e3e3256990660e1c1bdb521b73fa5c637203e55268bbe1d02ce1cbe1cb4430239f88af02b15f557322fd4", 0x41, 0xfffffffffffffbff}, {&(0x7f0000000180)="ffaf9be274e636a03c452dcb9717b98dfd44b7662beeb4d4a9e75d6485de2460e65ef17729d435170351bf29a768870079277d059eea6ad5ac73", 0x3a, 0x7f}, {&(0x7f0000001200)="53df7029a9f37bddcbb92bbd87a87ac8bf76a7396fd10336f187c18932607573f606516125652fe8a5771960ede6bae7283b373adee628b64c6962fb47edc5cf38d995d984becaa8cf75e1fea8542692cafe8c2304f0c64dbbda0febfa59df3415c654d645da37faadcb5608c8ac48c85fa71d75db6303aed985307785283d86814a6d50316fbf365b3ee613279fa2cb59ca9d833708e9535b", 0x99}, {&(0x7f00000014c0)="af74057b281c83464fa356856afc1b10aa06f79e7db6483373e4c73db411948ea88c601fd0bc1d4e80e0ab372cb1735eb2b7adf0cf534935f45ec309c81b37f0ea459aea21aa694e3167fbfb1c9a5b9abf4a303e3fde7bac7eca160d915947bdb661ef7128cda4486934238071361edf3d9154e1cd493390f78941", 0x7b}, {&(0x7f0000001840)="193a5588dbb2c8cb138e873cb3968fc9b694ab687a0fec94e47dbbda4b7807619d5b7c01e700be78104a059fdddc1edb07a58d639f277a35a934c75d3a78f59e21078536c83fa3ce9b7772e521c4754cacb2c288ad6a493753af946f508e8bd35313df8138b0a7ac6e443180148fb15f488e13c4fad63f0439a6eb7f42c9ba7160db515a0fac983b8acf149066b3ee27542ef2c6c158a5e2be4492619cb8c93bd8d7c71d99e0da3ef86ca68575094e352c9da2e3e0ba552919ba1dd5156b386352e3295176cad81807bd023b1fb53e51cb0758a04262a9f3f79e1b3971c1e659dc4dff5afdfa30", 0xe7, 0x6}], 0x80000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e0000dbc59f85000000000075c00000"]) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f00000012c0)='/dev/midi#\x00', 0x8, 0x10840) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000003200)=ANY=[@ANYBLOB="180000000000000017010000030000000d3f0000809aeed4529ff1b068ffcd4475b737922df067605a5f1e34c881ab9e479a64b3564630742389b14c4a7d091855816cec507bcbb6a2316e14b7bdb8202c0f2cea132d63dc635cd4bd2e159f424f09e8852810d48e61a37a"], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) sendfile(r3, r1, 0x0, 0xfffffffffffffffb) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000002a00)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x18, r4, 0x302, 0x70bd28, 0x25dfdbfe, {0x3}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x24008000) [ 315.194089] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.226474] ? save_stack+0xa9/0xd0 [ 315.230103] ? save_stack+0x43/0xd0 [ 315.233721] ? kasan_kmalloc+0xc4/0xe0 [ 315.237589] ? kasan_slab_alloc+0x12/0x20 [ 315.241734] ? find_held_lock+0x36/0x1c0 [ 315.245812] ? check_same_owner+0x320/0x320 [ 315.250136] ? rcu_note_context_switch+0x710/0x710 [ 315.255060] __should_failslab+0x124/0x180 [ 315.259297] should_failslab+0x9/0x14 [ 315.263111] kmem_cache_alloc_node_trace+0x26f/0x770 [ 315.268232] __kmalloc_node_track_caller+0x33/0x70 [ 315.273185] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 315.277971] __alloc_skb+0x14d/0x780 [ 315.281698] ? skb_scrub_packet+0x580/0x580 [ 315.286034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.291606] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 315.296983] ? ip_mc_drop_socket+0x270/0x270 [ 315.301402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.306943] ? ip_generic_getfrag+0x11c/0x2d0 [ 315.311446] ? ip_reply_glue_bits+0xc0/0xc0 [ 315.314478] binder: undelivered TRANSACTION_ERROR: 29201 13:58:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 315.315772] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 315.315790] ? skb_put+0x17b/0x1e0 [ 315.315811] __ip_append_data.isra.47+0x21a6/0x2a60 [ 315.315834] ? ip_reply_glue_bits+0xc0/0xc0 [ 315.315861] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 315.315879] ? ip_route_input_noref+0x250/0x250 [ 315.315898] ? find_held_lock+0x36/0x1c0 [ 315.321899] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.326331] ? ipv4_mtu+0x375/0x580 [ 315.326349] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 315.326369] ? lock_downgrade+0x8e0/0x8e0 [ 315.326393] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 315.326408] ? ip_setup_cork+0x4dc/0x7c0 [ 315.326427] ip_make_skb+0x2aa/0x340 [ 315.326445] ? ip_reply_glue_bits+0xc0/0xc0 [ 315.326463] ? ip_flush_pending_frames+0x30/0x30 [ 315.326480] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 315.400262] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.405817] ? xfrm_lookup_route+0x64/0x1f0 [ 315.410168] udp_sendmsg+0x25aa/0x3970 [ 315.414076] ? ip_reply_glue_bits+0xc0/0xc0 [ 315.418417] ? udp_push_pending_frames+0xf0/0xf0 [ 315.423186] ? graph_lock+0x170/0x170 [ 315.427006] ? find_held_lock+0x36/0x1c0 [ 315.431089] ? lock_downgrade+0x8e0/0x8e0 [ 315.435254] ? lock_release+0xa10/0xa10 [ 315.436085] binder: 23705:23709 got transaction to invalid handle [ 315.439232] ? check_same_owner+0x320/0x320 [ 315.439251] ? __check_object_size+0x95/0x5d9 [ 315.439272] inet_sendmsg+0x19f/0x690 [ 315.439286] ? __might_sleep+0x95/0x190 [ 315.439302] ? ipip_gro_receive+0x100/0x100 [ 315.439324] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.445562] binder: 23705:23709 transaction failed 29201/-22, size 0-12288 line 2852 [ 315.449878] ? security_socket_sendmsg+0x94/0xc0 [ 315.449897] ? ipip_gro_receive+0x100/0x100 [ 315.458464] binder_alloc: binder_alloc_mmap_handler: 23705 20002000-20006000 already mapped failed -16 [ 315.462104] sock_sendmsg+0xd5/0x120 [ 315.462121] __sys_sendto+0x3d7/0x670 [ 315.462139] ? __ia32_sys_getpeername+0xb0/0xb0 [ 315.462159] ? wait_for_completion+0x870/0x870 [ 315.462179] ? __lock_is_held+0xb5/0x140 [ 315.462204] ? __sb_end_write+0xac/0xe0 [ 315.462222] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 315.468035] binder: BINDER_SET_CONTEXT_MGR already set [ 315.472052] ? fput+0x130/0x1a0 [ 315.472072] ? ksys_write+0x1a6/0x250 [ 315.472092] ? __ia32_sys_read+0xb0/0xb0 [ 315.472112] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 315.472131] __x64_sys_sendto+0xe1/0x1a0 [ 315.472146] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 315.472164] do_syscall_64+0x1b1/0x800 [ 315.480707] binder: 23705:23710 got transaction to invalid handle [ 315.484764] ? finish_task_switch+0x1ca/0x840 [ 315.484782] ? syscall_return_slowpath+0x5c0/0x5c0 [ 315.484799] ? syscall_return_slowpath+0x30f/0x5c0 [ 315.484819] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 315.484839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.484862] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.484877] RIP: 0033:0x4559f9 [ 315.489201] binder: 23705:23710 transaction failed 29201/-22, size 0-12288 line 2852 [ 315.498612] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 [ 315.503374] binder: 23705:23709 ioctl 40046207 0 returned -16 [ 315.506141] 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> [ 315.527516] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.528989] 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.529087] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 315.529101] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 315.529113] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 315.534862] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.537635] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 315.537643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 315.537651] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 000000000000004c 13:58:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:23 executing program 7 (fault-call:4 fault-nth:77): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001200)="128e86c5086cf8b19b5aef69511ca8d0978923dc98b33cd560eeffff668ef7db71376c6b475bfa5d6c130e8b8c35bf26d8773e1a6f1d568cb5658ec74107bffdfa28434178df0cc9077d8cf523c794efa495cb877fddd35f9294b6af31b2a2e931a50142849dea99b8d43cc27785522949fdf8f5a9f8ba5e12d85e945fe8aa92a42a57547f100e2f29976d7f4a760df29aa804dc12115236c1b8e1490df1ccc96b6f91dcdea5d01fbd44c4179965977d6f67805d432e297a455988b5104397b886ee784bebb5ae886d3a6852624a593abb81948407082805022e3a55d9a8351c9eaf9f3d6426", 0xe6, r2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'ecb(blowfish)\x00'}], 0xa, "2bb5070737593fb27f1f465c2cfb2bc2ca1d3f8b987b0074d863138b1ffda83560"}, 0x3b) r3 = accept$alg(r1, 0x0, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x19, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000001440)=0x0) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000001500)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000001540)) sendmmsg$alg(r3, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 13:58:23 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x10001, 0x3}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200041, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x1, r3, 0x2, 0xffffffffffffffff}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r5 = socket(0xa, 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000140)={0x100000001, 0x4, 0x1}) dup2(r5, r1) 13:58:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x8f16000000000000]}, 0x10) 13:58:23 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000200"}) 13:58:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 316.314663] binder: 23728:23733 got transaction to invalid handle [ 316.319980] XFS (loop3): mtpt option not allowed on this system [ 316.320989] binder: 23728:23733 transaction failed 29201/-22, size 0-12288 line 2852 [ 316.345327] FAULT_INJECTION: forcing a failure. [ 316.345327] name failslab, interval 1, probability 0, space 0, times 0 [ 316.356677] CPU: 1 PID: 23732 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 316.363611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.372968] Call Trace: [ 316.375568] dump_stack+0x1b9/0x294 [ 316.379216] ? dump_stack_print_info.cold.2+0x52/0x52 [ 316.384419] ? unwind_get_return_address+0x61/0xa0 [ 316.389356] ? __save_stack_trace+0x7e/0xd0 [ 316.393692] should_fail.cold.4+0xa/0x1a [ 316.397766] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 316.402877] ? save_stack+0xa9/0xd0 [ 316.406510] ? save_stack+0x43/0xd0 [ 316.410141] ? kasan_kmalloc+0xc4/0xe0 13:58:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 316.414031] ? __kmalloc_node_track_caller+0x47/0x70 [ 316.419137] ? __alloc_skb+0x14d/0x780 [ 316.423030] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 316.428227] ? ip_make_skb+0x2aa/0x340 [ 316.432120] ? udp_sendmsg+0x25aa/0x3970 [ 316.434200] binder_alloc: binder_alloc_mmap_handler: 23728 20002000-20006000 already mapped failed -16 [ 316.436178] ? inet_sendmsg+0x19f/0x690 [ 316.436193] ? sock_sendmsg+0xd5/0x120 [ 316.436207] ? __sys_sendto+0x3d7/0x670 [ 316.436221] ? __x64_sys_sendto+0xe1/0x1a0 [ 316.436238] ? do_syscall_64+0x1b1/0x800 [ 316.436260] ? find_held_lock+0x36/0x1c0 [ 316.436292] ? check_same_owner+0x320/0x320 [ 316.436309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.436326] ? rcu_note_context_switch+0x710/0x710 [ 316.448758] binder: BINDER_SET_CONTEXT_MGR already set [ 316.449734] __should_failslab+0x124/0x180 [ 316.449753] should_failslab+0x9/0x14 [ 316.449772] kmem_cache_alloc_node+0x272/0x780 [ 316.449796] __alloc_skb+0x111/0x780 [ 316.449812] ? skb_scrub_packet+0x580/0x580 13:58:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 316.449829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.449843] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 316.449862] ? ip_mc_drop_socket+0x270/0x270 [ 316.455064] binder: 23728:23748 ioctl 40046207 0 returned -16 [ 316.457691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.457708] ? ip_generic_getfrag+0x11c/0x2d0 [ 316.457726] ? ip_reply_glue_bits+0xc0/0xc0 [ 316.457743] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 316.457759] ? skb_put+0x17b/0x1e0 [ 316.457783] __ip_append_data.isra.47+0x21a6/0x2a60 [ 316.457803] ? ip_reply_glue_bits+0xc0/0xc0 [ 316.486077] binder: 23728:23749 got transaction to invalid handle [ 316.490114] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 316.490130] ? ip_route_input_noref+0x250/0x250 [ 316.490150] ? find_held_lock+0x36/0x1c0 [ 316.490165] ? ipv4_mtu+0x375/0x580 [ 316.490183] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 316.490202] ? lock_downgrade+0x8e0/0x8e0 [ 316.490225] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 316.490242] ? ip_setup_cork+0x4dc/0x7c0 [ 316.494485] binder: 23728:23749 transaction failed 29201/-22, size 0-12288 line 2852 [ 316.498246] ip_make_skb+0x2aa/0x340 [ 316.498265] ? ip_reply_glue_bits+0xc0/0xc0 [ 316.498284] ? ip_flush_pending_frames+0x30/0x30 [ 316.521714] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.526108] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 316.526133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.526150] ? xfrm_lookup_route+0x64/0x1f0 [ 316.526172] udp_sendmsg+0x25aa/0x3970 [ 316.526196] ? ip_reply_glue_bits+0xc0/0xc0 [ 316.526220] ? udp_push_pending_frames+0xf0/0xf0 [ 316.526244] ? graph_lock+0x170/0x170 [ 316.526268] ? find_held_lock+0x36/0x1c0 [ 316.532778] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.537666] ? lock_downgrade+0x8e0/0x8e0 [ 316.537684] ? lock_release+0xa10/0xa10 [ 316.537699] ? check_same_owner+0x320/0x320 [ 316.537715] ? __check_object_size+0x95/0x5d9 [ 316.537736] inet_sendmsg+0x19f/0x690 [ 316.537749] ? __might_sleep+0x95/0x190 [ 316.537768] ? ipip_gro_receive+0x100/0x100 [ 316.537788] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.537806] ? security_socket_sendmsg+0x94/0xc0 [ 316.537819] ? ipip_gro_receive+0x100/0x100 [ 316.537835] sock_sendmsg+0xd5/0x120 [ 316.722504] __sys_sendto+0x3d7/0x670 [ 316.726304] ? __ia32_sys_getpeername+0xb0/0xb0 [ 316.730963] ? wait_for_completion+0x870/0x870 [ 316.735542] ? __lock_is_held+0xb5/0x140 [ 316.739608] ? __sb_end_write+0xac/0xe0 [ 316.743583] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 316.749119] ? fput+0x130/0x1a0 [ 316.752401] ? ksys_write+0x1a6/0x250 [ 316.756207] ? __ia32_sys_read+0xb0/0xb0 [ 316.760260] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 316.765782] __x64_sys_sendto+0xe1/0x1a0 [ 316.769847] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 316.774866] do_syscall_64+0x1b1/0x800 [ 316.778751] ? syscall_return_slowpath+0x5c0/0x5c0 [ 316.783678] ? syscall_return_slowpath+0x30f/0x5c0 [ 316.788615] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 316.793987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.798827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.804008] RIP: 0033:0x4559f9 [ 316.807205] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 316.826534] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 316.834248] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 316.841529] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 316.848809] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 316.856091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 316.863363] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 000000000000004d 13:58:24 executing program 7 (fault-call:4 fault-nth:78): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 316.894379] XFS (loop3): mtpt option not allowed on this system [ 316.912645] encrypted_key: insufficient parameters specified [ 316.920706] binder: 23755:23756 got transaction to invalid handle [ 316.927063] binder: 23755:23756 transaction failed 29201/-22, size 0-12288 line 2852 13:58:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x2f8a]}, 0x10) 13:58:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000002000000030000000d453494000000000000006ab498846bd5964c0747b042bfebfd563a3aaf61e681adea1f1b1884de38ec8a5248a03a11ba1a02263032906489f1e1b94ac6f3768963e38969efed468f616de51a9b2bcfb3bdaa776e83b959756acafc31e768e82ca855baa835dae1b158687c4eafa1f43ae8f18eaef0d35eb8f77181cef0bc098cb319473f7fe19017550000000000004819112205ebe659594219f2d8988f6ca7710920eeae3d1307854af9e19139bb9c9a57acb267fc82c6dc6d1a01fee3c77dd5c40d2276697e3453caaf06a28a302fa76e8698e993fc2b93a8d6897f699cd4facbe5f9598f"], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="f55e2b4986795b836769d3ad4b080c898d33c7c007bbf7a21a62ca6e920300a02f45df397ebbca9860876d3c829e2f9e84eb7d93cab00c123dd343827f71b7953efc4d8143219eb0ad031ba9512321e6950f956ac895b7ade74f6f7c9986ac559aea580ddfed0da61c5d31dd60d0351eb694ef412ccb57c8a8a6980c2ca291397fdc80a327855f0a7491b45179c06bc7f36fcd0c6280239927727e2c03ed74ac38d3b715cb8a51a0d2ee9d1cbb7c505926e647ce208b2c7ca13265d12ce97d562b0c00b6332749742c3614af74cb4d857a6fad6edc1f74fec8409f5cc510a5fd5be82de5470069890a08897436ee93c492bcd0b4d069be41c1d23c368b08c72656de561539dedfebbbb60e0bc4fbd588b7603e6b4a021f1b3568cbcd688de891e4349af16036df30fea43336bb3e02966f7c4b5648ddf2dcfc48e4ffa03a8cceb050df70886f6ca7b614e1566a792427d1641be70d2303c9f046020f8e313eb75abc55098287ebbd2748e8fc4dca08468eed4bfbafc1562b81bf765d5a5d9e8cb2ec0c9935b16492cbe781829699dce49092ded1c90ea3441699459c73350a1f8c511e6d438e67656a2ecbc37ae3e2464d95ffbbe52534a3c82cc450c03763bee081d21d8b32c6120b498221f27986f66ea9a33d113e902651a24b0bfc7f7e3e8ec0ab5264890727e835a9707cc60d8bc2f2f7e77634e8ee300f7be597d3f0f3a353a8c996818f4fc86cfb228b085ea98739ef919a428e5913f08e7576f2aeaff63f10921f45a99aa215d91e5c42e234eb4ff7eac0961ed3b2cc311112ab5e54a498e864f5d9528152300e34830f41f239b45d1f05b8cfa2d91761644d5f781a85fcada16069a66b32c4f44e179bbbcceb227d5cc47929061ff2b77b004e6b378c6e26c9b77a59b6b2effbf9fc89fc22772f7fd74a41c3a2650f6901f34d2e1ae1de1321f368be5148324396bf951ca02e22bbe603fa3c4fb5d9aa654927397d30a6a2dfa8f2cc5101fa0a2420f5551953d0c2ffe8e2fa6eb8a456aec384b205d3ee4dcbc3704905b706f3c5cc684772ad5bcc0dd388232f9a6762ad5ef172465f7a07c372c7d5badccd2c3761e72d16d9ea21c854c2fd30822d3d270c095e8ab588f022b8e4b7ba8f28a00340c477281fa3adecb1944371db41719e2f023f3d1c19343fea2a2029db3b4067ffa56ff110744db8cdb31b14548f669a3c4b3697d08fca97fee4a48a59e822265f22e72f7ac468f7a47f84dbd4fe915ddcff2ca0018514de93a4a928aa522873b902e4dab3d7c56fa7a95755fe97ee9b338858ad7357a00846b7e97ab74766d47b1775007efcc52144f731af974a41d2c8fe4c775d832b3e6defb864989ed5f830526dc86a7ba151a0fe1e4d1078576482be8208065f6af8b04d74c6553a26ec48a0694398b1c016da67b5609efca267fbd687d4c4cbc90f9c3bee8d5d652adc914037c0db5e36ece8a76b9ee7a11eec6ec4a60d97ac07adfa1bd5087a044f30a09300cc3459c60261490b085cdb349c82be0205e8cbf61276b9bb2ba685b2ee643d8e022f1400aa73d21850385720d73bf0991345b83ee43a5d03e4804fb2f2a29bf4bed1c02165da8c3db87be85d99180ed2dd6e8a56883d4d1a26f0ad1dee9fbe3318eff86fd574b1775bf5db643a1e185789739c3bba49f92ba9860dcc72ab747b9161d177a5c1155ac29118abb333f331fbfd2c9e268aeb6264738c99586d83ca389adbe0f0b797f5d7564f19d6469b89fa37904559ccfab5d03c0c7153ee7ee1fa378537b43a74efdad6bf3c193a77ba4a21acd3b37e99b8fd92e29361fc1777b6f680b2cd0ad98aa36607cb7403cabd68667d3ededfb5f86d98f2c53ee2c4def9de5aacf090f5898eacd0b313b55299d3bb81258a73aa4ec20e50a00005c931b061b5d9ca9a99e85592093211dfd783ed7d37d87272498df51e648f81bf680673fe678193a7378e8512be77befc0126aa46c1e2da499147cde01beb9d5d8f36f1811c76081c80bef568614c4cf0dffb5031243859ff95da5397364264e08e0967fdc155096d640d7f38eda808bee20c4b212b68758966a0b3abb43e0bd61b23acbf652442a50ec6366204e975579923cbbdaeb9749461c0a02a7fc2d2d82b763dd1fcffec022350b4682ba8a5dc462c5452d78d7d6b23eea7213c93b731af773947e6cd18aab0485048d3b45b5f498ed53a21be1fbdc23d23423c00fcc6719228e408cfdfddfd0208e5f05648fd64cce45948525c3d05bcdfc8d3bdfbb31e9632857b97fff1280aedbfb0b79bd78d9df57c2ac57505892646bbbde5c35117985e4cb324c019dee774963c51fe4665769e1f06147bae7d40088961ef1852fcce5a040dc444245499a4a815b86e5c60951fbd782eedc1d8ac657a1b4fb1897ee12b6532cfac2c18e613abb70d7e5479a24f203ca6906670498ecfeadf4aa4b3a1dd0c43914302c61e1c9c084d5719a8f8923616ee618fc035b7e480f288348bb213c42d842e260cbdb57b8ebae1eb30b4eada0db649e62dccd6c1349e541a57d88d25c97d4f93c5e680bfccefc6ab63aa7466e50c58030c14bbdce22b21de298128b01b1176b7b39a94725b124697506bc9b82a619bd993ce3f15574445c7de5f046990fd8dd12ddf929e05ecf7736e69b7df582e1698a9269cd05212b4b34f4394752ef8d04f902d8d4e8731e98e0f80fedb8a920375114c80665c7b34c2245e54f9cbf6a470370bedd93c74a46bebcf89db299737ee7217a8f44915bd378d11f6d59642c986aa2d3f6fac2c2f880d6c5f633da442f5ba0d04783a38cde65aeca0b6a1cf4ec8f5f65b4c46a9db4cca5de79fef1ddad44993ff3787a6abe6509a7aaead1e0be24eb59d1930cce36730dce337fc8684c3005f54ebbef29a6ff597b2ac301724aef3ad05c3693d5d3626a3fab98e3f06b534799134fed7c5e1ce0f6ada8a27b266ca4377c0c65883bb02f53fd76a8fa5d87853c413352eeb710e8e3dc6b81764be2947366bbdfc208bf332b1dcf70e69b0bfd400ce31bd1da6eaa7b09eac71d9c6e0fa6f7084ad71fe41247db5334eb5938db36fca4e83f85a20376407aa696f00781a3270bda478998f08b79d4c2834a92d17d4c0963828c3011e540573288860f960d659ace5ec4bd5838d219b0b4852adf0e9fc54707e47216bb81287febe20dd2fa341ca387f325cf90ba6ca1d7dcb08fd7fbc3b5ffbd81b2562f56333412f6eed3c14eff5020c7c7057f2dc9ae0e38fb430b969e15661495c411506a8b39caa140b0bf93c46131144b8ee53c07e94f7817cefa3b4e110d803af3d4ad141cdd35015998155f16eda604580c9ecb7739c8128f7b34e8c0f6e15b96c5b98b5b2952ece52cd16191b26f9684b7c01fd918b00096b0a1117776480587a5946a22f963f93cdbef86880515f0d95ab0574e6db9cd7519ba68c9b806ad598c7aa05682d2125cadc941a49c6eaf08e68464303cfb82f89b4026b56f89472489ad9f96188bfb6d9ad8dab962cb8fdad348ac032879630296c60983b8f69f8bb1a6b5bd87f3b3f702e3efe8ec71f4743a48a74d06d5d96ffbcfefba391b1f2d79d6f8eb5d6f6d7bc31e0cae7a7a4018b8c9b22b44717e2862aad2d901d7345ed35a6218b11ce23dde5986a63cda8bf7fba489e6da9ae8d4544c623a1ffb2fa5abda188738a52cdc3987f01ac6ebfa29f5a25a68b61d3879d3f2d3c4109550ef29fd4ce0528399a58c496b6bceb514db6f3df5cb611e9198d4568860eb3d8a69962a0aff03e90c473a867483d1b5e3ae6b960fbd6a8287492a584da378fbc3a98bd5e6b3f29535d9da91f628e90bf423f286d827ebbf2355bf8c80629d703b1a9a5cc056d4a0524ed86d58e5f89a97169560389b935898ee896cb34963edd56aa1e0d51a12df606b4d6dd5fda600c1f2c09cffee88bee058df327981fc52b26f2ad148bedeb9fce53a434988bab494e3effd118bbccaab76df55aa3cb05fcaa74b315fb1b141e718e6b17f90313aa95e0f97df8cf7cfaca774d63df8bcf86bb467d79697b9c4def577ec3f97f9b0b59c5773a6d91710a0f092294571cd1d0b506d29c5514789de777924239b9b16048eb8d80b75db959f2033a1bf8ff182d67535fa67c06ca1df513ca8c7b98526cc6f959e135a671bb8068288a782040cb9b84b8fb2ecf26bec1f5e896f3b597d53d038474d108c0524b11eb352ed0a34a2c9ed7dd1f17ac8a44037112e32c23404f2daba35e916e54712efe9d4df3e0e124cab0f83220f9c9564de1fe4b86f64c7201af93f32d3e0447a25b6279df4535a5e6d60f382c0ab1b9e2220e705f0ab6ba8f38f1175aa51b2883560f8a901f1e91e818f932a17a838464fba1f0d08403aadefe744782b14547ddef0452886c0c66af4c5555780bbb6bf9b64bf1a7ab16ca60d1f14ad6d9324cab5679678b318de2f63405ef438848c741eaed7cffc1d35b41a1f4509c2b5a231125c0d2562cf74e7d92af0bc92cdc36d89ca57ec6a8d8ac229cfd1326b458623adaed2d7b4a4dc6849be154c0f93f7f19e72936e6e0e36af6a95e868fa2ae5b012224d8fc0aa6c8dcd85379fa415baa10a8a2f21922f0011f7e33933001c6188a6bf8209705cad9b2cd5a939d2132c7199547da68511ac8de2bacceda486d5bfbd1bb35db4230e430601bd21d809ba1f0c2bdf00a9e8774ce53598df41e3f0cb2aa29384763bb5f605c3e5e6260c908af58e56f133a9087e8eca1b3682a096c1a3030382faddaadc8eb50167578b8fa1dba4edeb3958c396f7f4b3de16710495e204f6bb7d3d20877755ddf3675a886f0e0ef0413d57fcce2c84dc1bcee3fb6bd9b8eb982fb6b470f569d1065ba9ce98f281fc3e601c2d848fb8b7f87c4f754833b7c314d4d641e2a9c0679af73a4afe0fed36dc886a4123dbe0873c6cb0849a2ae3e4608b795ea3c93ff73fe2d8a26ee445bdd8a5d5392565d8fb13253345fe52ba0a10b478a4460c5fa395e4df6d9e216e7907303ccc3329303010559a29befa30d681b33ed9f80d9597bf5990a634492c571cdb17f3369a43123936fccad8c26f08e9454ca254bab72703a7e63427ec48e565b87b2e80a03bbcfccb6d2f8074ca5d84ff55e5b38e01ec2ad3181564d197bb62e7b20dc5c5cdf7d5479c05b5580342d23e83b73107fb777489220f26b6d91ae756d8d6241688db884519e2bdc006a8024316768e4dcfaef3c4073a4b15e8b5e3d85a54946849e1fc2aa0279d8937ba730f36771249d50038a432ff00acf2d23dd6417c4f01ce7dd53e1c050065a655f9e56699b4743ae4cfb0e9249348f2a3d07db13d78b31e49b9e59519b4cae17b20a81acd024056959dd0f890dfc8baa674ae4f3ace15dd820eeb6b031b3cf4362dbc0c9505f14e8c3fb44d8bc8219daf448ff9de449df5fe91ea4f40c86686ac17c73795c0bbc1e2b64ef1adc552f190ab08555eaa37f3fa3720096edad77e5255b256064b6659758f1ff7eeb8e4e270e2969bd3d87e4aff90a1a8d7c28094f57f85e60503c772ffcfdf01ab11d13713eccab5d09c6690dac96879fd39d95a5d91130cdeebe7fc7ef194e594d84c1707ebab4b94f55868f631a45ac8dd4e196bb0c18336e35969a13987aa41f3426722f3cbc2cd7f16fdb326b9a8c8e11593be5f6b06d8e3a4dfb1d52fb68b130f55e78341e234c6394046b3b3ac44fe4c248ad397223222d284149563b42e0c46b72fdb3cc5af5cbaf84f11dd4630d4878bdf7b4af021d49e7d788939366912f873c0ce97fd207", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000014c0)={0x4, 0x800e, 0x8, 0xf2b, 0x0}, &(0x7f0000001500)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001540)={r3, @in6={{0xa, 0x4e23, 0xfffffffffffffffe, @dev={0xfe, 0x80, [], 0x12}, 0x3}}}, &(0x7f0000001800)=0x84) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000001840)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xb}, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffff9c) dup2(r2, r2) r4 = syz_open_dev$admmidi(&(0x7f0000001880)='/dev/admmidi#\x00', 0xc1, 0x210040) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1000, 0x80000000}, &(0x7f00000000c0)=0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000001440)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={r5, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f00000001c0)=0x10) [ 317.023615] FAULT_INJECTION: forcing a failure. [ 317.023615] name failslab, interval 1, probability 0, space 0, times 0 [ 317.034922] CPU: 0 PID: 23769 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 317.041859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.051231] Call Trace: [ 317.053833] dump_stack+0x1b9/0x294 [ 317.057479] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.062107] binder_alloc: binder_alloc_mmap_handler: 23755 20002000-20006000 already mapped failed -16 [ 317.062677] ? is_bpf_text_address+0xd7/0x170 [ 317.062703] ? kernel_text_address+0x79/0xf0 [ 317.081027] ? __unwind_start+0x166/0x330 [ 317.085193] should_fail.cold.4+0xa/0x1a [ 317.089268] ? __save_stack_trace+0x7e/0xd0 [ 317.093603] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 317.098726] ? save_stack+0xa9/0xd0 [ 317.102364] ? save_stack+0x43/0xd0 [ 317.106003] ? kasan_kmalloc+0xc4/0xe0 [ 317.109896] ? kasan_slab_alloc+0x12/0x20 [ 317.114055] ? find_held_lock+0x36/0x1c0 [ 317.115191] binder: BINDER_SET_CONTEXT_MGR already set [ 317.118137] ? check_same_owner+0x320/0x320 [ 317.118157] ? rcu_note_context_switch+0x710/0x710 [ 317.118179] __should_failslab+0x124/0x180 [ 317.118196] should_failslab+0x9/0x14 [ 317.118217] kmem_cache_alloc_node_trace+0x26f/0x770 [ 317.145804] __kmalloc_node_track_caller+0x33/0x70 [ 317.148164] binder: 23755:23772 got transaction to invalid handle [ 317.150743] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 317.150760] __alloc_skb+0x14d/0x780 [ 317.150777] ? skb_scrub_packet+0x580/0x580 [ 317.150796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.150812] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 317.150830] ? ip_mc_drop_socket+0x270/0x270 [ 317.150848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.157107] binder: 23755:23772 transaction failed 29201/-22, size 0-12288 line 2852 [ 317.161802] ? ip_generic_getfrag+0x11c/0x2d0 [ 317.161820] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.161838] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 317.168589] binder: 23755:23756 ioctl 40046207 0 returned -16 [ 317.169839] ? skb_put+0x17b/0x1e0 13:58:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x8b0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8000, 0x80) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000080)=""/48) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) [ 317.169861] __ip_append_data.isra.47+0x21a6/0x2a60 [ 317.169884] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.169911] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 317.169924] ? ip_route_input_noref+0x250/0x250 [ 317.169943] ? find_held_lock+0x36/0x1c0 [ 317.169957] ? ipv4_mtu+0x375/0x580 [ 317.169975] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 317.227817] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.231268] ? lock_downgrade+0x8e0/0x8e0 [ 317.231295] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 317.231312] ? ip_setup_cork+0x4dc/0x7c0 [ 317.231330] ip_make_skb+0x2aa/0x340 [ 317.231349] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.231368] ? ip_flush_pending_frames+0x30/0x30 [ 317.231385] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 317.240629] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.241835] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.241854] ? xfrm_lookup_route+0x64/0x1f0 [ 317.241876] udp_sendmsg+0x25aa/0x3970 [ 317.241900] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.241923] ? udp_push_pending_frames+0xf0/0xf0 [ 317.241945] ? graph_lock+0x170/0x170 [ 317.241968] ? find_held_lock+0x36/0x1c0 [ 317.328389] ? lock_downgrade+0x8e0/0x8e0 [ 317.332525] ? lock_release+0xa10/0xa10 [ 317.336485] ? check_same_owner+0x320/0x320 [ 317.340793] ? __check_object_size+0x95/0x5d9 [ 317.345277] inet_sendmsg+0x19f/0x690 [ 317.349058] ? __might_sleep+0x95/0x190 [ 317.353027] ? ipip_gro_receive+0x100/0x100 [ 317.357343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.362883] ? security_socket_sendmsg+0x94/0xc0 [ 317.367643] ? ipip_gro_receive+0x100/0x100 [ 317.371948] sock_sendmsg+0xd5/0x120 [ 317.375655] __sys_sendto+0x3d7/0x670 [ 317.379459] ? __ia32_sys_getpeername+0xb0/0xb0 [ 317.384122] ? wait_for_completion+0x870/0x870 [ 317.388697] ? __lock_is_held+0xb5/0x140 [ 317.392780] ? __sb_end_write+0xac/0xe0 [ 317.396737] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 317.402256] ? fput+0x130/0x1a0 [ 317.405519] ? ksys_write+0x1a6/0x250 [ 317.409315] ? __ia32_sys_read+0xb0/0xb0 [ 317.413359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 317.418878] __x64_sys_sendto+0xe1/0x1a0 [ 317.422932] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 317.427956] do_syscall_64+0x1b1/0x800 [ 317.431833] ? finish_task_switch+0x1ca/0x840 [ 317.436324] ? syscall_return_slowpath+0x5c0/0x5c0 [ 317.441236] ? syscall_return_slowpath+0x30f/0x5c0 [ 317.446161] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 317.451532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.456359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.461538] RIP: 0033:0x4559f9 [ 317.464705] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.483887] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 317.491590] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 317.498848] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 317.506108] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 317.513362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 13:58:24 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x80b, 0x3fffc0000000000, 0x40}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) dup2(r3, r1) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x54) 13:58:24 executing program 7 (fault-call:4 fault-nth:79): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 317.520616] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 000000000000004e 13:58:24 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000001100"}) [ 317.551825] XFS (loop3): mtpt option not allowed on this system 13:58:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 317.640470] XFS (loop3): mtpt option not allowed on this system [ 317.693169] binder: 23793:23794 got transaction to invalid handle [ 317.697943] FAULT_INJECTION: forcing a failure. [ 317.697943] name failslab, interval 1, probability 0, space 0, times 0 [ 317.699499] binder: 23793:23794 transaction failed 29201/-22, size 0-12288 line 2852 [ 317.710756] CPU: 1 PID: 23807 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 317.725530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.734888] Call Trace: [ 317.737491] dump_stack+0x1b9/0x294 [ 317.741137] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.746342] ? is_bpf_text_address+0xd7/0x170 [ 317.750851] ? kernel_text_address+0x79/0xf0 [ 317.755295] ? __unwind_start+0x166/0x330 [ 317.759461] should_fail.cold.4+0xa/0x1a [ 317.761610] binder: BINDER_SET_CONTEXT_MGR already set [ 317.763525] ? __save_stack_trace+0x7e/0xd0 [ 317.763549] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 317.763573] ? save_stack+0xa9/0xd0 [ 317.763585] ? save_stack+0x43/0xd0 [ 317.763601] ? kasan_kmalloc+0xc4/0xe0 [ 317.769085] binder: 23793:23817 got transaction to invalid handle [ 317.773171] ? kasan_slab_alloc+0x12/0x20 [ 317.773190] ? find_held_lock+0x36/0x1c0 [ 317.773223] ? check_same_owner+0x320/0x320 [ 317.773238] ? rcu_note_context_switch+0x710/0x710 [ 317.773257] __should_failslab+0x124/0x180 [ 317.778379] binder: 23793:23817 transaction failed 29201/-22, size 0-12288 line 2852 [ 317.781986] should_failslab+0x9/0x14 [ 317.782006] kmem_cache_alloc_node_trace+0x26f/0x770 [ 317.785802] binder: 23793:23814 ioctl 40046207 0 returned -16 [ 317.789488] __kmalloc_node_track_caller+0x33/0x70 [ 317.789507] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 317.789523] __alloc_skb+0x14d/0x780 [ 317.789540] ? skb_scrub_packet+0x580/0x580 [ 317.789556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.789575] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 317.843933] binder_alloc: binder_alloc_mmap_handler: 23793 20002000-20006000 already mapped failed -16 [ 317.845554] ? ip_mc_drop_socket+0x270/0x270 [ 317.845575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.845591] ? ip_generic_getfrag+0x11c/0x2d0 [ 317.845609] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.845627] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 317.845643] ? skb_put+0x17b/0x1e0 [ 317.845664] __ip_append_data.isra.47+0x21a6/0x2a60 [ 317.910906] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.915221] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 317.921015] ? ip_route_input_noref+0x250/0x250 [ 317.925676] ? find_held_lock+0x36/0x1c0 [ 317.929731] ? ipv4_mtu+0x375/0x580 [ 317.933355] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 317.938791] ? lock_downgrade+0x8e0/0x8e0 [ 317.942924] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 317.948443] ? ip_setup_cork+0x4dc/0x7c0 [ 317.952499] ip_make_skb+0x2aa/0x340 [ 317.956212] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.960526] ? ip_flush_pending_frames+0x30/0x30 [ 317.965263] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 317.970787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.976321] ? xfrm_lookup_route+0x64/0x1f0 [ 317.980662] udp_sendmsg+0x25aa/0x3970 [ 317.984538] ? ip_reply_glue_bits+0xc0/0xc0 [ 317.988848] ? udp_push_pending_frames+0xf0/0xf0 [ 317.993609] ? graph_lock+0x170/0x170 [ 317.997412] ? find_held_lock+0x36/0x1c0 [ 318.001484] ? lock_downgrade+0x8e0/0x8e0 [ 318.005628] ? lock_release+0xa10/0xa10 [ 318.009600] ? check_same_owner+0x320/0x320 [ 318.013918] ? __check_object_size+0x95/0x5d9 [ 318.018417] inet_sendmsg+0x19f/0x690 [ 318.022210] ? __might_sleep+0x95/0x190 [ 318.026179] ? ipip_gro_receive+0x100/0x100 [ 318.030498] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.036031] ? security_socket_sendmsg+0x94/0xc0 [ 318.040772] ? ipip_gro_receive+0x100/0x100 [ 318.045082] sock_sendmsg+0xd5/0x120 [ 318.048792] __sys_sendto+0x3d7/0x670 [ 318.052576] ? __ia32_sys_getpeername+0xb0/0xb0 [ 318.057240] ? wait_for_completion+0x870/0x870 [ 318.061821] ? __lock_is_held+0xb5/0x140 [ 318.065872] ? __sb_end_write+0xac/0xe0 [ 318.069829] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 318.075368] ? fput+0x130/0x1a0 [ 318.078656] ? ksys_write+0x1a6/0x250 [ 318.082462] ? __ia32_sys_read+0xb0/0xb0 [ 318.086509] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 318.092043] __x64_sys_sendto+0xe1/0x1a0 [ 318.096094] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 318.101102] do_syscall_64+0x1b1/0x800 [ 318.104981] ? finish_task_switch+0x1ca/0x840 [ 318.109471] ? syscall_return_slowpath+0x5c0/0x5c0 [ 318.114403] ? syscall_return_slowpath+0x30f/0x5c0 [ 318.119335] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 318.124688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.129515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.134695] RIP: 0033:0x4559f9 [ 318.137872] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.157120] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 318.164813] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 318.172068] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 318.179320] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 318.186571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 318.193828] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 000000000000004f [ 318.269777] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.276093] binder: undelivered TRANSACTION_ERROR: 29201 13:58:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xef5b]}, 0x10) 13:58:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$ax25(0x3, 0x7, 0x8, &(0x7f0000000040)) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 13:58:25 executing program 7 (fault-call:4 fault-nth:80): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:25 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 13:58:25 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) r4 = dup2(r3, r3) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000100)={0x3, 0x0, [0x0, 0x3dc5fa69, 0x100, 0x6, 0x20, 0xfa2, 0x4]}) [ 318.380462] XFS (loop3): mtpt option not allowed on this system [ 318.387952] binder: 23834:23835 got transaction to invalid handle [ 318.394294] binder: 23834:23835 transaction failed 29201/-22, size 0-12288 line 2852 [ 318.400058] FAULT_INJECTION: forcing a failure. [ 318.400058] name failslab, interval 1, probability 0, space 0, times 0 [ 318.413477] CPU: 1 PID: 23842 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 318.420409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.429770] Call Trace: [ 318.432374] dump_stack+0x1b9/0x294 [ 318.436017] ? dump_stack_print_info.cold.2+0x52/0x52 [ 318.441223] ? is_bpf_text_address+0xd7/0x170 [ 318.442559] binder_alloc: binder_alloc_mmap_handler: 23834 20002000-20006000 already mapped failed -16 [ 318.445728] ? kernel_text_address+0x79/0xf0 [ 318.445744] ? __unwind_start+0x166/0x330 [ 318.445767] should_fail.cold.4+0xa/0x1a [ 318.445783] ? __save_stack_trace+0x7e/0xd0 [ 318.445803] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.471478] binder: BINDER_SET_CONTEXT_MGR already set [ 318.472133] ? save_stack+0xa9/0xd0 [ 318.472151] ? save_stack+0x43/0xd0 [ 318.478909] binder: 23834:23853 got transaction to invalid handle [ 318.482497] ? kasan_kmalloc+0xc4/0xe0 [ 318.482512] ? kasan_slab_alloc+0x12/0x20 [ 318.482532] ? find_held_lock+0x36/0x1c0 [ 318.482564] ? check_same_owner+0x320/0x320 [ 318.482585] ? rcu_note_context_switch+0x710/0x710 [ 318.486304] binder: 23834:23853 transaction failed 29201/-22, size 0-12288 line 2852 [ 318.489898] __should_failslab+0x124/0x180 [ 318.489914] should_failslab+0x9/0x14 [ 318.489931] kmem_cache_alloc_node_trace+0x26f/0x770 [ 318.497176] binder: 23834:23835 ioctl 40046207 0 returned -16 [ 318.500023] __kmalloc_node_track_caller+0x33/0x70 [ 318.500043] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 318.500059] __alloc_skb+0x14d/0x780 [ 318.500075] ? skb_scrub_packet+0x580/0x580 [ 318.500092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.500109] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 318.500127] ? ip_mc_drop_socket+0x270/0x270 [ 318.533801] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.538630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.538649] ? ip_generic_getfrag+0x11c/0x2d0 [ 318.538667] ? ip_reply_glue_bits+0xc0/0xc0 [ 318.538685] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 318.538700] ? skb_put+0x17b/0x1e0 [ 318.538718] __ip_append_data.isra.47+0x21a6/0x2a60 [ 318.545625] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.549536] ? ip_reply_glue_bits+0xc0/0xc0 [ 318.549564] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 318.549578] ? ip_route_input_noref+0x250/0x250 [ 318.549615] ? find_held_lock+0x36/0x1c0 [ 318.549630] ? ipv4_mtu+0x375/0x580 [ 318.584553] binder: 23857:23858 got transaction with invalid offsets ptr [ 318.588627] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 318.588650] ? lock_downgrade+0x8e0/0x8e0 [ 318.588674] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 318.588688] ? ip_setup_cork+0x4dc/0x7c0 [ 318.588707] ip_make_skb+0x2aa/0x340 [ 318.593435] binder: 23857:23858 transaction failed 29201/-14, size 0-12288 line 2995 [ 318.597513] ? ip_reply_glue_bits+0xc0/0xc0 [ 318.597532] ? ip_flush_pending_frames+0x30/0x30 [ 318.597549] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 318.597570] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.597591] ? xfrm_lookup_route+0x64/0x1f0 [ 318.597611] udp_sendmsg+0x25aa/0x3970 [ 318.606638] binder_alloc: binder_alloc_mmap_handler: 23857 20002000-20006000 already mapped failed -16 [ 318.611138] ? ip_reply_glue_bits+0xc0/0xc0 [ 318.611165] ? udp_push_pending_frames+0xf0/0xf0 [ 318.611190] ? graph_lock+0x170/0x170 [ 318.611222] ? find_held_lock+0x36/0x1c0 [ 318.624251] binder: BINDER_SET_CONTEXT_MGR already set [ 318.626762] ? lock_downgrade+0x8e0/0x8e0 [ 318.626782] ? lock_release+0xa10/0xa10 [ 318.626796] ? check_same_owner+0x320/0x320 [ 318.626813] ? __check_object_size+0x95/0x5d9 [ 318.626834] inet_sendmsg+0x19f/0x690 [ 318.631751] binder_alloc: 23857: binder_alloc_buf, no vma [ 318.635568] ? __might_sleep+0x95/0x190 [ 318.635591] ? ipip_gro_receive+0x100/0x100 [ 318.635612] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.635629] ? security_socket_sendmsg+0x94/0xc0 [ 318.635644] ? ipip_gro_receive+0x100/0x100 [ 318.635657] sock_sendmsg+0xd5/0x120 [ 318.635673] __sys_sendto+0x3d7/0x670 [ 318.639321] binder: 23857:23859 transaction failed 29189/-3, size 0-12288 line 2967 [ 318.646110] ? __ia32_sys_getpeername+0xb0/0xb0 [ 318.646134] ? wait_for_completion+0x870/0x870 [ 318.652461] binder: 23857:23858 ioctl 40046207 0 returned -16 [ 318.655716] ? __lock_is_held+0xb5/0x140 [ 318.655743] ? __sb_end_write+0xac/0xe0 [ 318.655762] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 318.655774] ? fput+0x130/0x1a0 [ 318.655792] ? ksys_write+0x1a6/0x250 [ 318.655812] ? __ia32_sys_read+0xb0/0xb0 [ 318.677451] binder: undelivered TRANSACTION_ERROR: 29189 [ 318.681250] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 318.681273] __x64_sys_sendto+0xe1/0x1a0 [ 318.681291] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 318.681310] do_syscall_64+0x1b1/0x800 [ 318.681323] ? finish_task_switch+0x1ca/0x840 [ 318.681339] ? syscall_return_slowpath+0x5c0/0x5c0 [ 318.686571] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.691632] ? syscall_return_slowpath+0x30f/0x5c0 [ 318.691652] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 318.691672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.691692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.691704] RIP: 0033:0x4559f9 [ 318.691708] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.922158] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 13:58:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 318.929849] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 318.937102] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 318.944355] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 318.951607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 318.958858] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000050 13:58:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x163) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) alarm(0x6) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) r3 = memfd_create(&(0x7f00000001c0)='/dev/snapshot\x00', 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000001200)=@sack_info={0x0, 0x36, 0x7}, &(0x7f0000001240)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000014c0)={r4, @in6={{0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x3ff}}}, 0x84) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10b100, 0x0) mknodat(r5, &(0x7f0000000180)='./file0\x00', 0x1000, 0x1ff) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) getpeername$inet(r6, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10) 13:58:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 318.993825] XFS (loop3): mtpt option not allowed on this system [ 319.065681] binder: 23861:23865 got transaction to invalid handle [ 319.072056] binder: 23861:23865 transaction failed 29201/-22, size 0-12288 line 2852 [ 319.128724] binder_alloc: binder_alloc_mmap_handler: 23861 20002000-20006000 already mapped failed -16 [ 319.192190] binder: BINDER_SET_CONTEXT_MGR already set [ 319.194157] binder: 23861:23880 got transaction to invalid handle [ 319.203839] binder: 23861:23880 transaction failed 29201/-22, size 0-12288 line 2852 [ 319.212211] binder: 23861:23865 ioctl 40046207 0 returned -16 [ 319.233719] binder: undelivered TRANSACTION_ERROR: 29201 13:58:26 executing program 6: socket(0x11, 0x100000803, 0x0) r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x1, 0x0) dup2(r1, r0) 13:58:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\a', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x4b05]}, 0x10) 13:58:26 executing program 7 (fault-call:4 fault-nth:81): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="18000001000000001701000002000000030000000d3f9400"], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="f55e2b4986795b836769d3ad4b080c898d33c7c007bbf7a21a62ca6e920300a02f45df397ebbca9860876d3c829e2f9e84eb7d93cab00c123dd343827f71b7953efc4d8143219eb0ad031ba9512321e6950f956ac895b7ade74f6f7c9986ac559aea580ddfed0da61c5d31dd60d0351eb694ef412ccb57c8a8a6980c2ca291397fdc80a327855f0a7491b45179c06bc7f36fcd0c6280239927727e2c03ed74ac38d3b715cb8a51a0d2ee9d1cbb7c505926e647ce208b2c7ca13265d12ce97d562b0c00b6332749742c3614af74cb4d857a6fad6edc1f74fec8409f5cc510a5fd5be82de5470069890a08897436ee93c492bcd0b4d069be41c1d23c368b08c72656de561539dedfebbbb60e0bc4fbd588b7603e6b4a021f1b3568cbcd688de891e4349af16036df30fea43336bb3e02966f7c4b5648ddf2dcfc48e4ffa03a8cceb050df70886f6ca7b614e1566a792427d1641be70d2303c9f046020f8e313eb75abc55098287ebbd2748e8fc4dca08468eed4bfbafc1562b81bf765d5a5d9e8cb2ec0c9935b16492cbe781829699dce49092ded1c90ea3441699459c73350a1f8c511e6d438e67656a2ecbc37ae3e2464d95ffbbe52534a3c82cc450c03763bee081d21d8b32c6120b498221f27986f66ea9a33d113e902651a24b0bfc7f7e3e8ec0ab5264890727e835a9707cc60d8bc2f2f7e77634e8ee300f7be597d3f0f3a353a8c996818f4fc86cfb228b085ea98739ef919a428e5913f08e7576f2aeaff63f10921f45a99aa215d91e5c42e234eb4ff7eac0961ed3b2cc311112ab5e54a498e864f5d9528152300e34830f41f239b45d1f05b8cfa2d91761644d5f781a85fcada16069a66b32c4f44e179bbbcceb227d5cc47929061ff2b77b004e6b378c6e26c9b77a59b6b2effbf9fc89fc22772f7fd74a41c3a2650f6901f34d2e1ae1de1321f368be5148324396bf951ca02e22bbe603fa3c4fb5d9aa654927397d30a6a2dfa8f2cc5101fa0a2420f5551953d0c2ffe8e2fa6eb8a456aec384b205d3ee4dcbc3704905b706f3c5cc684772ad5bcc0dd388232f9a6762ad5ef172465f7a07c372c7d5badccd2c3761e72d16d9ea21c854c2fd30822d3d270c095e8ab588f022b8e4b7ba8f28a00340c477281fa3adecb1944371db41719e2f023f3d1c19343fea2a2029db3b4067ffa56ff110744db8cdb31b14548f669a3c4b3697d08fca97fee4a48a59e822265f22e72f7ac468f7a47f84dbd4fe915ddcff2ca0018514de93a4a928aa522873b902e4dab3d7c56fa7a95755fe97ee9b338858ad7357a00846b7e97ab74766d47b1775007efcc52144f731af974a41d2c8fe4c775d832b3e6defb864989ed5f830526dc86a7ba151a0fe1e4d1078576482be8208065f6af8b04d74c6553a26ec48a0694398b1c016da67b5609efca267fbd687d4c4cbc90f9c3bee8d5d652adc914037c0db5e36ece8a76b9ee7a11eec6ec4a60d97ac07adfa1bd5087a044f30a09300cc3459c60261490b085cdb349c82be0205e8cbf61276b9bb2ba685b2ee643d8e022f1400aa73d21850385720d73bf0991345b83ee43a5d03e4804fb2f2a29bf4bed1c02165da8c3db87be85d99180ed2dd6e8a56883d4d1a26f0ad1dee9fbe3318eff86fd574b1775bf5db643a1e185789739c3bba49f92ba9860dcc72ab747b9161d177a5c1155ac29118abb333f331fbfd2c9e268aeb6264738c99586d83ca389adbe0f0b797f5d7564f19d6469b89fa37904559ccfab5d03c0c7153ee7ee1fa378537b43a74efdad6bf3c193a77ba4a21acd3b37e99b8fd92e29361fc1777b6f680b2cd0ad98aa36607cb7403cabd68667d3ededfb5f86d98f2c53ee2c4def9de5aacf090f5898eacd0b313b55299d3bb81258a73aa4ec20e50a00005c931b061b5d9ca9a99e85592093211dfd783ed7d37d87272498df51e648f81bf680673fe678193a7378e8512be77befc0126aa46c1e2da499147cde01beb9d5d8f36f1811c76081c80bef568614c4cf0dffb5031243859ff95da5397364264e08e0967fdc155096d640d7f38eda808bee20c4b212b68758966a0b3abb43e0bd61b23acbf652442a50ec6366204e975579923cbbdaeb9749461c0a02a7fc2d2d82b763dd1fcffec022350b4682ba8a5dc462c5452d78d7d6b23eea7213c93b731af773947e6cd18aab0485048d3b45b5f498ed53a21be1fbdc23d23423c00fcc6719228e408cfdfddfd0208e5f05648fd64cce45948525c3d05bcdfc8d3bdfbb31e9632857b97fff1280aedbfb0b79bd78d9df57c2ac57505892646bbbde5c35117985e4cb324c019dee774963c51fe4665769e1f06147bae7d40088961ef1852fcce5a040dc444245499a4a815b86e5c60951fbd782eedc1d8ac657a1b4fb1897ee12b6532cfac2c18e613abb70d7e5479a24f203ca6906670498ecfeadf4aa4b3a1dd0c43914302c61e1c9c084d5719a8f8923616ee618fc035b7e480f288348bb213c42d842e260cbdb57b8ebae1eb30b4eada0db649e62dccd6c1349e541a57d88d25c97d4f93c5e680bfccefc6ab63aa7466e50c58030c14bbdce22b21de298128b01b1176b7b39a94725b124697506bc9b82a619bd993ce3f15574445c7de5f046990fd8dd12ddf929e05ecf7736e69b7df582e1698a9269cd05212b4b34f4394752ef8d04f902d8d4e8731e98e0f80fedb8a920375114c80665c7b34c2245e54f9cbf6a470370bedd93c74a46bebcf89db299737ee7217a8f44915bd378d11f6d59642c986aa2d3f6fac2c2f880d6c5f633da442f5ba0d04783a38cde65aeca0b6a1cf4ec8f5f65b4c46a9db4cca5de79fef1ddad44993ff3787a6abe6509a7aaead1e0be24eb59d1930cce36730dce337fc8684c3005f54ebbef29a6ff597b2ac301724aef3ad05c3693d5d3626a3fab98e3f06b534799134fed7c5e1ce0f6ada8a27b266ca4377c0c65883bb02f53fd76a8fa5d87853c413352eeb710e8e3dc6b81764be2947366bbdfc208bf332b1dcf70e69b0bfd400ce31bd1da6eaa7b09eac71d9c6e0fa6f7084ad71fe41247db5334eb5938db36fca4e83f85a20376407aa696f00781a3270bda478998f08b79d4c2834a92d17d4c0963828c3011e540573288860f960d659ace5ec4bd5838d219b0b4852adf0e9fc54707e47216bb81287febe20dd2fa341ca387f325cf90ba6ca1d7dcb08fd7fbc3b5ffbd81b2562f56333412f6eed3c14eff5020c7c7057f2dc9ae0e38fb430b969e15661495c411506a8b39caa140b0bf93c46131144b8ee53c07e94f7817cefa3b4e110d803af3d4ad141cdd35015998155f16eda604580c9ecb7739c8128f7b34e8c0f6e15b96c5b98b5b2952ece52cd16191b26f9684b7c01fd918b00096b0a1117776480587a5946a22f963f93cdbef86880515f0d95ab0574e6db9cd7519ba68c9b806ad598c7aa05682d2125cadc941a49c6eaf08e68464303cfb82f89b4026b56f89472489ad9f96188bfb6d9ad8dab962cb8fdad348ac032879630296c60983b8f69f8bb1a6b5bd87f3b3f702e3efe8ec71f4743a48a74d06d5d96ffbcfefba391b1f2d79d6f8eb5d6f6d7bc31e0cae7a7a4018b8c9b22b44717e2862aad2d901d7345ed35a6218b11ce23dde5986a63cda8bf7fba489e6da9ae8d4544c623a1ffb2fa5abda188738a52cdc3987f01ac6ebfa29f5a25a68b61d3879d3f2d3c4109550ef29fd4ce0528399a58c496b6bceb514db6f3df5cb611e9198d4568860eb3d8a69962a0aff03e90c473a867483d1b5e3ae6b960fbd6a8287492a584da378fbc3a98bd5e6b3f29535d9da91f628e90bf423f286d827ebbf2355bf8c80629d703b1a9a5cc056d4a0524ed86d58e5f89a97169560389b935898ee896cb34963edd56aa1e0d51a12df606b4d6dd5fda600c1f2c09cffee88bee058df327981fc52b26f2ad148bedeb9fce53a434988bab494e3effd118bbccaab76df55aa3cb05fcaa74b315fb1b141e718e6b17f90313aa95e0f97df8cf7cfaca774d63df8bcf86bb467d79697b9c4def577ec3f97f9b0b59c5773a6d91710a0f092294571cd1d0b506d29c5514789de777924239b9b16048eb8d80b75db959f2033a1bf8ff182d67535fa67c06ca1df513ca8c7b98526cc6f959e135a671bb8068288a782040cb9b84b8fb2ecf26bec1f5e896f3b597d53d038474d108c0524b11eb352ed0a34a2c9ed7dd1f17ac8a44037112e32c23404f2daba35e916e54712efe9d4df3e0e124cab0f83220f9c9564de1fe4b86f64c7201af93f32d3e0447a25b6279df4535a5e6d60f382c0ab1b9e2220e705f0ab6ba8f38f1175aa51b2883560f8a901f1e91e818f932a17a838464fba1f0d08403aadefe744782b14547ddef0452886c0c66af4c5555780bbb6bf9b64bf1a7ab16ca60d1f14ad6d9324cab5679678b318de2f63405ef438848c741eaed7cffc1d35b41a1f4509c2b5a231125c0d2562cf74e7d92af0bc92cdc36d89ca57ec6a8d8ac229cfd1326b458623adaed2d7b4a4dc6849be154c0f93f7f19e72936e6e0e36af6a95e868fa2ae5b012224d8fc0aa6c8dcd85379fa415baa10a8a2f21922f0011f7e33933001c6188a6bf8209705cad9b2cd5a939d2132c7199547da68511ac8de2bacceda486d5bfbd1bb35db4230e430601bd21d809ba1f0c2bdf00a9e8774ce53598df41e3f0cb2aa29384763bb5f605c3e5e6260c908af58e56f133a9087e8eca1b3682a096c1a3030382faddaadc8eb50167578b8fa1dba4edeb3958c396f7f4b3de16710495e204f6bb7d3d20877755ddf3675a886f0e0ef0413d57fcce2c84dc1bcee3fb6bd9b8eb982fb6b470f569d1065ba9ce98f281fc3e601c2d848fb8b7f87c4f754833b7c314d4d641e2a9c0679af73a4afe0fed36dc886a4123dbe0873c6cb0849a2ae3e4608b795ea3c93ff73fe2d8a26ee445bdd8a5d5392565d8fb13253345fe52ba0a10b478a4460c5fa395e4df6d9e216e7907303ccc3329303010559a29befa30d681b33ed9f80d9597bf5990a634492c571cdb17f3369a43123936fccad8c26f08e9454ca254bab72703a7e63427ec48e565b87b2e80a03bbcfccb6d2f8074ca5d84ff55e5b38e01ec2ad3181564d197bb62e7b20dc5c5cdf7d5479c05b5580342d23e83b73107fb777489220f26b6d91ae756d8d6241688db884519e2bdc006a8024316768e4dcfaef3c4073a4b15e8b5e3d85a54946849e1fc2aa0279d8937ba730f36771249d50038a432ff00acf2d23dd6417c4f01ce7dd53e1c050065a655f9e56699b4743ae4cfb0e9249348f2a3d07db13d78b31e49b9e59519b4cae17b20a81acd024056959dd0f890dfc8baa674ae4f3ace15dd820eeb6b031b3cf4362dbc0c9505f14e8c3fb44d8bc8219daf448ff9de449df5fe91ea4f40c86686ac17c73795c0bbc1e2b64ef1adc552f190ab08555eaa37f3fa3720096edad77e5255b256064b6659758f1ff7eeb8e4e270e2969bd3d87e4aff90a1a8d7c28094f57f85e60503c772ffcfdf01ab11d13713eccab5d09c6690dac96879fd39d95a5d91130cdeebe7fc7ef194e594d84c1707ebab4b94f55868f631a45ac8dd4e196bb0c18336e35969a13987aa41f3426722f3cbc2cd7f16fdb326b9a8c8e11593be5f6b06d8e3a4dfb1d52fb68b130f55e78341e234c6394046b3b3ac44fe4c248ad397223222d284149563b42e0c46b72fdb3cc5af5cbaf84f11dd4630d4878bdf7b4af021d49e7d788939366912f873c0ce97fd207", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 13:58:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:26 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 13:58:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 319.239277] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.272697] FAULT_INJECTION: forcing a failure. [ 319.272697] name failslab, interval 1, probability 0, space 0, times 0 [ 319.284000] CPU: 0 PID: 23893 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 319.290940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.300298] Call Trace: [ 319.302897] dump_stack+0x1b9/0x294 [ 319.306557] ? dump_stack_print_info.cold.2+0x52/0x52 [ 319.311762] ? unwind_get_return_address+0x61/0xa0 [ 319.316706] ? __save_stack_trace+0x7e/0xd0 13:58:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 319.321052] should_fail.cold.4+0xa/0x1a [ 319.325134] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.330247] ? save_stack+0xa9/0xd0 [ 319.333884] ? save_stack+0x43/0xd0 [ 319.337517] ? kasan_kmalloc+0xc4/0xe0 [ 319.341410] ? __kmalloc_node_track_caller+0x47/0x70 [ 319.346524] ? __alloc_skb+0x14d/0x780 [ 319.350423] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 319.355621] ? ip_make_skb+0x2aa/0x340 [ 319.359516] ? udp_sendmsg+0x25aa/0x3970 [ 319.363586] ? inet_sendmsg+0x19f/0x690 [ 319.367568] ? sock_sendmsg+0xd5/0x120 [ 319.371461] ? __sys_sendto+0x3d7/0x670 [ 319.375444] ? __x64_sys_sendto+0xe1/0x1a0 [ 319.379686] ? do_syscall_64+0x1b1/0x800 [ 319.383753] ? find_held_lock+0x36/0x1c0 [ 319.387845] ? check_same_owner+0x320/0x320 [ 319.392167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.397694] ? rcu_note_context_switch+0x710/0x710 [ 319.402629] __should_failslab+0x124/0x180 [ 319.406858] should_failslab+0x9/0x14 [ 319.410655] kmem_cache_alloc_node+0x272/0x780 [ 319.415249] __alloc_skb+0x111/0x780 [ 319.418961] ? skb_scrub_packet+0x580/0x580 [ 319.423279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.428822] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 319.434179] ? ip_mc_drop_socket+0x270/0x270 [ 319.438595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.444135] ? ip_generic_getfrag+0x11c/0x2d0 [ 319.448616] ? ip_reply_glue_bits+0xc0/0xc0 [ 319.452925] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 319.457939] ? skb_put+0x17b/0x1e0 [ 319.461484] __ip_append_data.isra.47+0x21a6/0x2a60 [ 319.466502] ? ip_reply_glue_bits+0xc0/0xc0 [ 319.470839] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 319.476631] ? ip_route_input_noref+0x250/0x250 [ 319.481308] ? find_held_lock+0x36/0x1c0 [ 319.485362] ? ipv4_mtu+0x375/0x580 [ 319.488990] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 319.494460] ? lock_downgrade+0x8e0/0x8e0 [ 319.498614] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 319.504152] ? ip_setup_cork+0x4dc/0x7c0 [ 319.508207] ip_make_skb+0x2aa/0x340 [ 319.511917] ? ip_reply_glue_bits+0xc0/0xc0 [ 319.516246] ? ip_flush_pending_frames+0x30/0x30 [ 319.521008] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 319.526555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.532088] ? xfrm_lookup_route+0x64/0x1f0 [ 319.536413] udp_sendmsg+0x25aa/0x3970 [ 319.540311] ? ip_reply_glue_bits+0xc0/0xc0 [ 319.544637] ? udp_push_pending_frames+0xf0/0xf0 [ 319.549396] ? graph_lock+0x170/0x170 [ 319.553207] ? find_held_lock+0x36/0x1c0 [ 319.557276] ? lock_downgrade+0x8e0/0x8e0 [ 319.561421] ? lock_release+0xa10/0xa10 [ 319.565426] ? check_same_owner+0x320/0x320 [ 319.569734] ? __check_object_size+0x95/0x5d9 [ 319.574220] inet_sendmsg+0x19f/0x690 [ 319.578015] ? __might_sleep+0x95/0x190 [ 319.581984] ? ipip_gro_receive+0x100/0x100 [ 319.586299] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.591836] ? security_socket_sendmsg+0x94/0xc0 [ 319.596589] ? ipip_gro_receive+0x100/0x100 [ 319.600897] sock_sendmsg+0xd5/0x120 [ 319.604609] __sys_sendto+0x3d7/0x670 [ 319.608404] ? __ia32_sys_getpeername+0xb0/0xb0 [ 319.613062] ? wait_for_completion+0x870/0x870 [ 319.617656] ? __lock_is_held+0xb5/0x140 [ 319.621707] ? __sb_end_write+0xac/0xe0 [ 319.625673] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 319.631204] ? fput+0x130/0x1a0 [ 319.634493] ? ksys_write+0x1a6/0x250 [ 319.638291] ? __ia32_sys_read+0xb0/0xb0 [ 319.642345] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 319.647893] __x64_sys_sendto+0xe1/0x1a0 [ 319.651979] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 319.657001] do_syscall_64+0x1b1/0x800 [ 319.660886] ? finish_task_switch+0x1ca/0x840 [ 319.665388] ? syscall_return_slowpath+0x5c0/0x5c0 [ 319.670315] ? syscall_return_slowpath+0x30f/0x5c0 [ 319.675244] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 319.680622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.685468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.690655] RIP: 0033:0x4559f9 [ 319.693832] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.713145] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 13:58:27 executing program 7 (fault-call:4 fault-nth:82): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 319.720866] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 319.728139] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 319.735411] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 319.742709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 319.749968] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000051 13:58:27 executing program 2: r0 = socket$inet6(0xa, 0x41000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008040)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="6944bd35a6034831fd184c31443df72e37e96331e6c551ab01002120ec54aa81a10645ed0104fa87b328f151dc14c7ef0f7b2365a6f6cb5eb135c8d6066ddb5978c5741b3eb288675f9f59cf28411de9adf0f4ffca4f7beb71155f0a9851b582163275d2a5552b41142275a41f9f12b27608e1e46142e0964adce9a30ba56084f8608bef5bf04039c4ac48ebf12d7fe08e310d22f874b0c6f26650400d43a49f4cd01bdf259054e36b329ee90155d4e10c1aff1046588194081d30db70", 0xbd}, {&(0x7f0000001480)="9dd99174716cbb8d34c63fc936676eaedda69bc32daeddfb4999503da96b9d88e97d1770f9580ad26f4e0fb07fa56510811bf3e74aa2b8a4ac40d0a09173", 0x3e}], 0x2, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="c626db2deb40bf94bf9a1c54ab3aedf27dbcd0c0b3e969f71747202dbc2485670e34934acb7ba1de26030328d9d42b9fd222ecc46c7cbcec7a9b64e158c6963fe52cccbf0222c5187c54bc1524069cd37a84b09b53221407a6a910b7d4726ac38b63501fb04d42c701c5b843b74f78ec122c9f4abb5c80dcaa7778de93b86ae040007ca6bfb20061f9ba42e0855aa766299f2e23385c89d16c4cabfe96cf4c05760f5e361164e75d9263b8ee9f12ccf4f3f5a4bc9aa4d60e12e8f9b36f3c261e998ce0e2", 0xc4}], 0x1, &(0x7f0000001800)=[@iv={0x18, 0x117, 0x2, 0x3, "0d3f94"}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000029c0)="9297d0a9b539", 0x6}, {&(0x7f0000002a80)="8412aef7c7057f6ef12744b29b7583a99b8707285e8341abaedf76ae70218632dfbc6aa7cc4803f458b51a744013a2f11b3e7f921cb30f344cc56edd769c9a5ccb73f33a30c42a6a54e36deb94e6da63521b19", 0x53}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x1cfd}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff00000001}, @iv={0x108, 0x117, 0x2, 0xf1, "0041e0e17d9978e941e66f4f5f1df22fef6e4f1ea9c0dad7c8185b934ac95aae40354d1726d20513624a0c1bf9869e7eae5028f1bd81703285534238d9e3e1e39e4ca53a2cfa4909830365481dd0c06cda5a14121fc415efc348a912ca0c633193eb10523bbc33c9148454e063ebfa86b12f8f0b677005badee74d3cdd2cb9739a71d4e127146971e6816dcec696518e39f36417990187aee9a717698c559e3012e293ceb5213aeb0c9dd57a6e11542189a62684d32f92667165057adb326f6d7736840068d5f427b27d12b108b55f72a0a2be7ddc7d4ee201ae1739b7121e362f80ac80767583f75678a3dcddfaf9664b"}], 0x168, 0x20008011}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002fc0)="bb76d659155b3fbaa5a27caf9360566c5439e83071a6c520e3ac5080b467dfbee27e99a2b8ccb638e9d0e9b46029edbd5ddb8f1957bee703d09f20a3c3ab61f43fb0e4329a3d894ff90ae61c2f555c9b68edccc910ebe2263c2d93d8ec7434864975f7b9016e9911ac5baf299b4b9b1246bdf25fa8767bd67485d94bc865378a76825cd1824f5eaddc65f33ec178181496d3697efd809991a9ecab075726c3cd821325e6f2ec2fa801b5b02e2a1c164df1a8085f09fa0880ad17ef9239c12cb2279da7c6a7bc013fa85f43dd69baee82762083238e3e46408a6cecc0b9309e47e365e27fec45e4c85081de10", 0xec}, {&(0x7f0000003180)="0cd406c8f54dcd181cf1c20467440c6d9618356a56f5c45bbb4c85f465df81e0809bbb64e53e513f16f47bbe8cd3de02bd2d1c8d9331c586cbdca0822fba6126773713059bf0327823d8037121f793947e95364a70ce64d3fa242b1e70a41b826c2c297f6b593ef6c252dece8573c620395808", 0x73}, {&(0x7f0000003300)="8f11728f49a627621efe5d86d2400d4e5f07a2ce52f8a5c5b01a91c689c352ed4ced6d64dcb53f0d778628774f64751f86cf3eccc91b977cd41dbf4e4380adb3749a780e4b0bebc82ad2", 0x4a}, {&(0x7f0000003480)="800cab8fa62a6bf39f08ab644424625d1bd8ec0aa431fb11614528382c9e2c83585873cbe15688e5a46bf108504b5509a86a9ec73735443686568548a3a7129ce64f7c0cbfbe664a5cf9f1c4ecce9276bf7e770cbb8a718e9eb0c18ceebe3e26ad7584dba16e585ff1ea9c39bda284116e160a50b67a60b6b53f338aecd6716aaafb4b8567cd8a671a3433289df1b4", 0x8f}], 0x4, &(0x7f0000003640)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f00000037c0)="a19a268ddd9724", 0x7}, {&(0x7f0000003840)="28fd801685930bafb94492e8c2cf54024d80189e72a560e2b8d4ce5a5324d779e4af0d3fc19281247e7b76d915a73417056fe904ed52879c1f8c14258022962f3eb700118eb98c2a41bc17c97d213c5eb27f4315a217be1d08d3e2d0c851d74a1302c07b77b76e60128599cff79b119741b50e695b5dd0b44843025e0190964c961e2c6634ed9ac3650210dead009774b7af7c62187581cff76cacdbb897e80c6ed631413016f4db692142e4", 0xac}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000003dc0)="548462502ee9c73eab8061150ea80ab0f6e0687b05875670fb88453085f429191f242247d4d3aed605d26074da5b182e7a67e22f143b4759997f281f500d692379cf7354003ecac0f7a03c33462e88bebed92396266f15e7f190732d8cc966cb44d5713289a6d14879f50d8446794b4d068feac92776410ec075e4672d46b574319b4ca8b83a6df1db78813d3ca58eeaf24e6a5b05af75a6044fe4c307e8eddd4ea941a10f4183bce8a7e29d8accc8164f89983bba02e8e276", 0xb9}, {&(0x7f0000007f00)="b2b949a54fc732333713e486c31b1f49276758eb1a406e765bf1860c0396e3575da6143569a999a9458e70e316a5ae45de79cae9640a38a4cb48a5ef8285cb03bccb1f9c193169c2b177", 0x4a}], 0x2, &(0x7f0000008000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x6, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) [ 319.790733] binder: 23903:23906 got transaction to invalid handle [ 319.797090] binder: 23903:23906 transaction failed 29201/-22, size 0-12288 line 2852 13:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfst', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x31, 0x8, [0x0, 0x0]}) [ 319.873757] FAULT_INJECTION: forcing a failure. [ 319.873757] name failslab, interval 1, probability 0, space 0, times 0 [ 319.885270] CPU: 0 PID: 23924 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 319.892212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.901570] Call Trace: [ 319.904178] dump_stack+0x1b9/0x294 [ 319.907819] ? dump_stack_print_info.cold.2+0x52/0x52 [ 319.913023] ? is_bpf_text_address+0xd7/0x170 [ 319.917529] ? kernel_text_address+0x79/0xf0 13:58:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 319.921941] ? __unwind_start+0x166/0x330 [ 319.926116] should_fail.cold.4+0xa/0x1a [ 319.930189] ? __save_stack_trace+0x7e/0xd0 [ 319.934524] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.939655] ? save_stack+0xa9/0xd0 [ 319.943286] ? save_stack+0x43/0xd0 [ 319.946919] ? kasan_kmalloc+0xc4/0xe0 [ 319.950810] ? kasan_slab_alloc+0x12/0x20 [ 319.954973] ? find_held_lock+0x36/0x1c0 [ 319.959059] ? check_same_owner+0x320/0x320 [ 319.963388] ? rcu_note_context_switch+0x710/0x710 [ 319.968330] __should_failslab+0x124/0x180 13:58:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xffed) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 319.971797] binder_alloc: binder_alloc_mmap_handler: 23903 20002000-20006000 already mapped failed -16 [ 319.973466] should_failslab+0x9/0x14 [ 319.973485] kmem_cache_alloc_node_trace+0x26f/0x770 [ 319.973512] __kmalloc_node_track_caller+0x33/0x70 [ 319.973535] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 319.973549] __alloc_skb+0x14d/0x780 [ 319.973565] ? skb_scrub_packet+0x580/0x580 [ 320.009546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.015097] ? rt_set_nexthop.constprop.55+0x568/0x1250 13:58:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 320.020475] ? ip_mc_drop_socket+0x270/0x270 [ 320.024900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.030444] ? ip_generic_getfrag+0x11c/0x2d0 [ 320.033121] binder: BINDER_SET_CONTEXT_MGR already set [ 320.034983] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.035003] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 320.035020] ? skb_put+0x17b/0x1e0 [ 320.035040] __ip_append_data.isra.47+0x21a6/0x2a60 [ 320.035061] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.035083] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 320.059182] binder: 23903:23936 got transaction to invalid handle [ 320.062481] ? ip_route_input_noref+0x250/0x250 [ 320.062502] ? find_held_lock+0x36/0x1c0 [ 320.062517] ? ipv4_mtu+0x375/0x580 [ 320.062535] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 320.062554] ? lock_downgrade+0x8e0/0x8e0 [ 320.062575] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 320.062592] ? ip_setup_cork+0x4dc/0x7c0 [ 320.068414] binder: 23903:23936 transaction failed 29201/-22, size 0-12288 line 2852 [ 320.074593] ip_make_skb+0x2aa/0x340 [ 320.074610] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.074627] ? ip_flush_pending_frames+0x30/0x30 [ 320.074639] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 320.074664] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.088828] binder: 23903:23906 ioctl 40046207 0 returned -16 [ 320.092408] ? xfrm_lookup_route+0x64/0x1f0 [ 320.092431] udp_sendmsg+0x25aa/0x3970 [ 320.092456] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.092480] ? udp_push_pending_frames+0xf0/0xf0 [ 320.092504] ? graph_lock+0x170/0x170 [ 320.092531] ? find_held_lock+0x36/0x1c0 [ 320.092552] ? lock_downgrade+0x8e0/0x8e0 [ 320.135231] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.137905] ? lock_release+0xa10/0xa10 [ 320.137921] ? check_same_owner+0x320/0x320 [ 320.137939] ? __check_object_size+0x95/0x5d9 [ 320.137964] inet_sendmsg+0x19f/0x690 [ 320.137977] ? __might_sleep+0x95/0x190 [ 320.137994] ? ipip_gro_receive+0x100/0x100 [ 320.138012] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.138032] ? security_socket_sendmsg+0x94/0xc0 [ 320.138046] ? ipip_gro_receive+0x100/0x100 [ 320.138064] sock_sendmsg+0xd5/0x120 [ 320.144651] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.148243] __sys_sendto+0x3d7/0x670 [ 320.148261] ? __ia32_sys_getpeername+0xb0/0xb0 [ 320.148282] ? wait_for_completion+0x870/0x870 [ 320.148302] ? __lock_is_held+0xb5/0x140 [ 320.148330] ? __sb_end_write+0xac/0xe0 [ 320.148349] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 320.148361] ? fput+0x130/0x1a0 [ 320.148378] ? ksys_write+0x1a6/0x250 [ 320.148395] ? __ia32_sys_read+0xb0/0xb0 [ 320.264644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 320.270183] __x64_sys_sendto+0xe1/0x1a0 [ 320.274240] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 320.279241] do_syscall_64+0x1b1/0x800 [ 320.283113] ? finish_task_switch+0x1ca/0x840 [ 320.287591] ? syscall_return_slowpath+0x5c0/0x5c0 [ 320.292514] ? syscall_return_slowpath+0x30f/0x5c0 [ 320.297443] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 320.302791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.307632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.312800] RIP: 0033:0x4559f9 [ 320.315975] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.335261] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 320.342968] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 320.350228] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 320.357481] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 320.364732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 320.371982] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000052 13:58:27 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x3b, @rand_addr=0x5, 0x4e21, 0x3, 'rr\x00', 0x0, 0x401, 0x31}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21, 0x2000, 0x200, 0x7}}, 0x44) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc) dup2(r3, r1) 13:58:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xff0a000000000000]}, 0x10) 13:58:27 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000f00"}) 13:58:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:27 executing program 7 (fault-call:4 fault-nth:83): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 320.491253] binder: 23952:23955 got transaction to invalid handle [ 320.497649] binder: 23952:23955 transaction failed 29201/-22, size 0-12288 line 2852 [ 320.591211] binder_alloc: binder_alloc_mmap_handler: 23952 20002000-20006000 already mapped failed -16 [ 320.619219] FAULT_INJECTION: forcing a failure. [ 320.619219] name failslab, interval 1, probability 0, space 0, times 0 [ 320.624963] binder: 23952:23971 got transaction to invalid handle [ 320.630494] CPU: 1 PID: 23970 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 320.630503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.630515] Call Trace: [ 320.636805] binder: 23952:23971 transaction failed 29201/-22, size 0-12288 line 2852 [ 320.643671] dump_stack+0x1b9/0x294 [ 320.643693] ? dump_stack_print_info.cold.2+0x52/0x52 [ 320.643711] ? unwind_get_return_address+0x61/0xa0 [ 320.643730] ? __save_stack_trace+0x7e/0xd0 [ 320.653401] binder: BINDER_SET_CONTEXT_MGR already set [ 320.655655] should_fail.cold.4+0xa/0x1a [ 320.655676] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 320.655693] ? save_stack+0xa9/0xd0 [ 320.655708] ? save_stack+0x43/0xd0 [ 320.655719] ? kasan_kmalloc+0xc4/0xe0 [ 320.655736] ? __kmalloc_node_track_caller+0x47/0x70 [ 320.663799] binder: 23952:23955 ioctl 40046207 0 returned -16 [ 320.667230] ? __alloc_skb+0x14d/0x780 [ 320.667248] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 320.667262] ? ip_make_skb+0x2aa/0x340 [ 320.667277] ? udp_sendmsg+0x25aa/0x3970 [ 320.667291] ? inet_sendmsg+0x19f/0x690 [ 320.667302] ? sock_sendmsg+0xd5/0x120 [ 320.667318] ? __sys_sendto+0x3d7/0x670 [ 320.693562] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.696100] ? __x64_sys_sendto+0xe1/0x1a0 [ 320.696117] ? do_syscall_64+0x1b1/0x800 [ 320.696137] ? find_held_lock+0x36/0x1c0 [ 320.696170] ? check_same_owner+0x320/0x320 [ 320.696184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.696200] ? rcu_note_context_switch+0x710/0x710 [ 320.700298] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.703428] __should_failslab+0x124/0x180 [ 320.703447] should_failslab+0x9/0x14 [ 320.703461] kmem_cache_alloc_node+0x272/0x780 [ 320.703484] __alloc_skb+0x111/0x780 [ 320.703500] ? skb_scrub_packet+0x580/0x580 [ 320.703514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 320.703535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.815749] ? ip_generic_getfrag+0x11c/0x2d0 [ 320.820240] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.824554] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 320.829563] ? skb_put+0x17b/0x1e0 [ 320.833101] __ip_append_data.isra.47+0x21a6/0x2a60 [ 320.838122] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.842433] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 320.848209] ? ip_route_input_noref+0x250/0x250 [ 320.852862] ? find_held_lock+0x36/0x1c0 [ 320.856915] ? ipv4_mtu+0x375/0x580 [ 320.860544] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 320.865996] ? lock_downgrade+0x8e0/0x8e0 [ 320.870146] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 320.875681] ? ip_setup_cork+0x4dc/0x7c0 [ 320.879744] ip_make_skb+0x2aa/0x340 [ 320.883466] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.887792] ? ip_flush_pending_frames+0x30/0x30 [ 320.892552] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 320.898105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.903646] ? xfrm_lookup_route+0x64/0x1f0 [ 320.907970] udp_sendmsg+0x25aa/0x3970 [ 320.911852] ? ip_reply_glue_bits+0xc0/0xc0 [ 320.916159] ? udp_push_pending_frames+0xf0/0xf0 [ 320.920903] ? graph_lock+0x170/0x170 [ 320.924710] ? find_held_lock+0x36/0x1c0 [ 320.928768] ? lock_downgrade+0x8e0/0x8e0 [ 320.932920] ? lock_release+0xa10/0xa10 [ 320.936872] ? check_same_owner+0x320/0x320 [ 320.941182] ? __check_object_size+0x95/0x5d9 [ 320.945662] inet_sendmsg+0x19f/0x690 [ 320.949443] ? __might_sleep+0x95/0x190 [ 320.953400] ? ipip_gro_receive+0x100/0x100 [ 320.957715] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.963236] ? security_socket_sendmsg+0x94/0xc0 [ 320.967979] ? ipip_gro_receive+0x100/0x100 [ 320.972282] sock_sendmsg+0xd5/0x120 [ 320.975991] __sys_sendto+0x3d7/0x670 [ 320.979781] ? __ia32_sys_getpeername+0xb0/0xb0 [ 320.984433] ? wait_for_completion+0x870/0x870 [ 320.988997] ? __lock_is_held+0xb5/0x140 [ 320.993056] ? __sb_end_write+0xac/0xe0 [ 320.997022] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.002545] ? fput+0x130/0x1a0 [ 321.005806] ? ksys_write+0x1a6/0x250 [ 321.009591] ? __ia32_sys_read+0xb0/0xb0 [ 321.013640] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.019178] __x64_sys_sendto+0xe1/0x1a0 [ 321.023238] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 321.028244] do_syscall_64+0x1b1/0x800 [ 321.032121] ? finish_task_switch+0x1ca/0x840 [ 321.036603] ? syscall_return_slowpath+0x5c0/0x5c0 [ 321.041517] ? syscall_return_slowpath+0x30f/0x5c0 [ 321.046432] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 321.051816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.056659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.061832] RIP: 0033:0x4559f9 [ 321.064996] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.084199] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 321.091906] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 321.099161] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 321.106413] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 321.113671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 321.120922] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000053 13:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='\n/file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:28 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00 \x00'}) 13:58:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x9000000]}, 0x10) 13:58:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:28 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0xffffca88, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 13:58:28 executing program 6: r0 = socket(0x9, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) dup2(r3, r1) 13:58:28 executing program 7 (fault-call:4 fault-nth:84): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 321.236889] FAULT_INJECTION: forcing a failure. [ 321.236889] name failslab, interval 1, probability 0, space 0, times 0 [ 321.248185] CPU: 0 PID: 23987 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 321.255119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.264478] Call Trace: [ 321.267081] dump_stack+0x1b9/0x294 [ 321.270723] ? dump_stack_print_info.cold.2+0x52/0x52 [ 321.275922] ? is_bpf_text_address+0xd7/0x170 [ 321.280425] ? kernel_text_address+0x79/0xf0 13:58:28 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={r0, 0x2, 0x1, 0xc47, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000140)={0x400, 0x4, 0x6, 0x5, 0xfffffffffffffffd}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8000, &(0x7f0000000000)="ff03700000000000000000") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r4 = socket(0xa, 0x1, 0x0) r5 = dup2(r4, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) recvfrom(r2, &(0x7f0000000180)=""/194, 0xc2, 0x1, &(0x7f0000000440)=@hci={0x1f, r6, 0x3}, 0x80) [ 321.284837] ? __unwind_start+0x166/0x330 [ 321.289016] should_fail.cold.4+0xa/0x1a [ 321.293087] ? __save_stack_trace+0x7e/0xd0 [ 321.297420] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.302537] ? save_stack+0xa9/0xd0 [ 321.306175] ? save_stack+0x43/0xd0 [ 321.309807] ? kasan_kmalloc+0xc4/0xe0 [ 321.313700] ? kasan_slab_alloc+0x12/0x20 [ 321.317862] ? find_held_lock+0x36/0x1c0 [ 321.321945] ? check_same_owner+0x320/0x320 [ 321.326271] ? rcu_note_context_switch+0x710/0x710 [ 321.331212] __should_failslab+0x124/0x180 [ 321.335457] should_failslab+0x9/0x14 [ 321.339262] kmem_cache_alloc_node_trace+0x26f/0x770 [ 321.344385] __kmalloc_node_track_caller+0x33/0x70 [ 321.349326] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 321.354094] __alloc_skb+0x14d/0x780 [ 321.357819] ? skb_scrub_packet+0x580/0x580 [ 321.362153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.367697] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 321.373075] ? ip_mc_drop_socket+0x270/0x270 [ 321.377493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.383035] ? ip_generic_getfrag+0x11c/0x2d0 [ 321.387716] ? ip_reply_glue_bits+0xc0/0xc0 [ 321.392049] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 321.397075] ? skb_put+0x17b/0x1e0 [ 321.400627] __ip_append_data.isra.47+0x21a6/0x2a60 [ 321.405647] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 321.410386] ? ip_reply_glue_bits+0xc0/0xc0 [ 321.414695] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 321.420474] ? ipv4_mtu+0x85/0x580 [ 321.424007] ? __sanitizer_cov_trace_pc+0x2b/0x50 [ 321.428845] ? ipv4_mtu+0x375/0x580 [ 321.432453] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 321.437887] ? lock_downgrade+0x8e0/0x8e0 [ 321.442032] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 321.447562] ? ip_setup_cork+0x4dc/0x7c0 [ 321.451622] ip_make_skb+0x2aa/0x340 [ 321.455322] ? ip_reply_glue_bits+0xc0/0xc0 [ 321.459627] ? ip_flush_pending_frames+0x30/0x30 [ 321.464363] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 321.469898] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.475420] ? xfrm_lookup_route+0x64/0x1f0 [ 321.479740] udp_sendmsg+0x25aa/0x3970 [ 321.483632] ? ip_reply_glue_bits+0xc0/0xc0 [ 321.487965] ? udp_push_pending_frames+0xf0/0xf0 [ 321.492719] ? graph_lock+0x170/0x170 [ 321.496508] ? find_held_lock+0x36/0x1c0 [ 321.500557] ? lock_downgrade+0x8e0/0x8e0 [ 321.504703] ? lock_release+0xa10/0xa10 [ 321.508672] ? check_same_owner+0x320/0x320 [ 321.512987] ? __check_object_size+0x95/0x5d9 [ 321.517482] inet_sendmsg+0x19f/0x690 [ 321.521275] ? __might_sleep+0x95/0x190 [ 321.525268] ? ipip_gro_receive+0x100/0x100 [ 321.529572] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.535102] ? security_socket_sendmsg+0x94/0xc0 [ 321.539841] ? ipip_gro_receive+0x100/0x100 [ 321.544144] sock_sendmsg+0xd5/0x120 [ 321.547852] __sys_sendto+0x3d7/0x670 [ 321.551643] ? __ia32_sys_getpeername+0xb0/0xb0 [ 321.556305] ? wait_for_completion+0x870/0x870 [ 321.560876] ? __lock_is_held+0xb5/0x140 [ 321.564925] ? __sb_end_write+0xac/0xe0 [ 321.568901] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.574430] ? fput+0x130/0x1a0 [ 321.577707] ? ksys_write+0x1a6/0x250 [ 321.581505] ? __ia32_sys_read+0xb0/0xb0 [ 321.585567] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.591115] __x64_sys_sendto+0xe1/0x1a0 [ 321.595178] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 321.600194] do_syscall_64+0x1b1/0x800 [ 321.604080] ? finish_task_switch+0x1ca/0x840 [ 321.608572] ? syscall_return_slowpath+0x5c0/0x5c0 [ 321.613491] ? syscall_return_slowpath+0x30f/0x5c0 [ 321.618419] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 321.623782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.628654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.633856] RIP: 0033:0x4559f9 [ 321.637028] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.656251] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 321.663945] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 321.671198] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 321.678455] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 321.685707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 321.692965] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000054 [ 321.722793] binder: 23991:23998 got transaction to invalid handle [ 321.729150] binder: 23991:23998 transaction failed 29201/-22, size 0-12288 line 2852 [ 321.756310] binder_alloc: binder_alloc_mmap_handler: 23991 20002000-20006000 already mapped failed -16 [ 321.779071] binder: BINDER_SET_CONTEXT_MGR already set [ 321.792542] binder: 23991:24015 ioctl 40046207 0 returned -16 [ 321.801893] binder: 23991:24016 got transaction to invalid handle [ 321.808266] binder: 23991:24016 transaction failed 29201/-22, size 0-12288 line 2852 [ 321.855864] binder: undelivered TRANSACTION_ERROR: 29201 [ 321.862650] binder: undelivered TRANSACTION_ERROR: 29201 13:58:29 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc0ffffff]}, 0x10) 13:58:29 executing program 7 (fault-call:4 fault-nth:85): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='%/file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:29 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20080, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000100)={0x8, 0x9, 0x80000, 0x2, 0x7fff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r4 = socket(0xa, 0x1, 0x0) semget(0x3, 0x3, 0x220) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4ec, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x80, 0xe, 0xa, 0x6, 0xc, 0x18}, @jmp={0x5, 0x2, 0x2, 0x3, 0xb4e13467b2e8e7fe, 0x0, 0x1}, @ldst={0x1, 0x3, 0x7, 0x0, 0x3, 0xffffffff}, @map={0x18, 0x6, 0x1, 0x0, r2}], {0x95}}, &(0x7f00000001c0)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x5}, 0x48) dup2(r4, r1) 13:58:29 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000fffffffe00"}) 13:58:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:29 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 322.087359] FAULT_INJECTION: forcing a failure. [ 322.087359] name failslab, interval 1, probability 0, space 0, times 0 [ 322.097921] binder: 24035:24036 got transaction to invalid handle [ 322.098644] CPU: 1 PID: 24040 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 322.104900] binder: 24035:24036 transaction failed 29201/-22, size 0-12288 line 2852 [ 322.111761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.111768] Call Trace: [ 322.111791] dump_stack+0x1b9/0x294 [ 322.111810] ? dump_stack_print_info.cold.2+0x52/0x52 [ 322.111832] ? unwind_get_return_address+0x61/0xa0 [ 322.145318] ? __save_stack_trace+0x7e/0xd0 [ 322.149652] should_fail.cold.4+0xa/0x1a [ 322.153723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 322.158832] ? save_stack+0xa9/0xd0 [ 322.162471] ? save_stack+0x43/0xd0 [ 322.164984] binder_alloc: binder_alloc_mmap_handler: 24035 20002000-20006000 already mapped failed -16 [ 322.166098] ? kasan_kmalloc+0xc4/0xe0 [ 322.166114] ? __kmalloc_node_track_caller+0x47/0x70 [ 322.166129] ? __alloc_skb+0x14d/0x780 [ 322.166146] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 322.166160] ? ip_make_skb+0x2aa/0x340 [ 322.166177] ? udp_sendmsg+0x25aa/0x3970 [ 322.166190] ? inet_sendmsg+0x19f/0x690 [ 322.166205] ? sock_sendmsg+0xd5/0x120 [ 322.195869] binder: BINDER_SET_CONTEXT_MGR already set [ 322.197516] ? __sys_sendto+0x3d7/0x670 [ 322.197531] ? __x64_sys_sendto+0xe1/0x1a0 [ 322.197547] ? do_syscall_64+0x1b1/0x800 [ 322.197567] ? find_held_lock+0x36/0x1c0 [ 322.197600] ? check_same_owner+0x320/0x320 13:58:29 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:29 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:29 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) [ 322.197619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.204496] binder: 24035:24046 ioctl 40046207 0 returned -16 [ 322.205636] ? rcu_note_context_switch+0x710/0x710 [ 322.205659] __should_failslab+0x124/0x180 [ 322.205677] should_failslab+0x9/0x14 [ 322.205691] kmem_cache_alloc_node+0x272/0x780 [ 322.205714] __alloc_skb+0x111/0x780 [ 322.205730] ? skb_scrub_packet+0x580/0x580 [ 322.205745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.205764] ? rt_set_nexthop.constprop.55+0x568/0x1250 13:58:29 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) [ 322.226479] binder: 24035:24049 got transaction to invalid handle [ 322.227120] ? ip_mc_drop_socket+0x270/0x270 [ 322.227138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.227157] ? ip_generic_getfrag+0x11c/0x2d0 [ 322.231330] binder: 24035:24049 transaction failed 29201/-22, size 0-12288 line 2852 [ 322.235506] ? ip_reply_glue_bits+0xc0/0xc0 [ 322.235525] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.235546] ? skb_put+0x17b/0x1e0 [ 322.324698] __ip_append_data.isra.47+0x21a6/0x2a60 [ 322.329735] ? ip_reply_glue_bits+0xc0/0xc0 13:58:29 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) [ 322.334074] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 322.339874] ? ip_route_input_noref+0x250/0x250 [ 322.344551] ? find_held_lock+0x36/0x1c0 [ 322.348623] ? ipv4_mtu+0x375/0x580 [ 322.352253] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 322.357716] ? lock_downgrade+0x8e0/0x8e0 [ 322.361875] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 322.367414] ? ip_setup_cork+0x4dc/0x7c0 [ 322.371480] ip_make_skb+0x2aa/0x340 [ 322.375201] ? ip_reply_glue_bits+0xc0/0xc0 [ 322.379529] ? ip_flush_pending_frames+0x30/0x30 [ 322.384289] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 322.389836] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.395377] ? xfrm_lookup_route+0x64/0x1f0 [ 322.399726] udp_sendmsg+0x25aa/0x3970 [ 322.403623] ? ip_reply_glue_bits+0xc0/0xc0 [ 322.407958] ? udp_push_pending_frames+0xf0/0xf0 [ 322.412728] ? graph_lock+0x170/0x170 [ 322.416548] ? find_held_lock+0x36/0x1c0 [ 322.420621] ? lock_downgrade+0x8e0/0x8e0 [ 322.424773] ? lock_release+0xa10/0xa10 [ 322.428750] ? check_same_owner+0x320/0x320 [ 322.433071] ? __check_object_size+0x95/0x5d9 [ 322.437553] inet_sendmsg+0x19f/0x690 [ 322.441347] ? __might_sleep+0x95/0x190 [ 322.445315] ? ipip_gro_receive+0x100/0x100 [ 322.449621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.455144] ? security_socket_sendmsg+0x94/0xc0 [ 322.459884] ? ipip_gro_receive+0x100/0x100 [ 322.464190] sock_sendmsg+0xd5/0x120 [ 322.467899] __sys_sendto+0x3d7/0x670 [ 322.471698] ? __ia32_sys_getpeername+0xb0/0xb0 [ 322.476353] ? wait_for_completion+0x870/0x870 [ 322.480921] ? __lock_is_held+0xb5/0x140 [ 322.484970] ? __sb_end_write+0xac/0xe0 [ 322.488950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 322.494564] ? fput+0x130/0x1a0 [ 322.497840] ? ksys_write+0x1a6/0x250 [ 322.501627] ? __ia32_sys_read+0xb0/0xb0 [ 322.505682] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 322.511228] __x64_sys_sendto+0xe1/0x1a0 [ 322.515300] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 322.520322] do_syscall_64+0x1b1/0x800 [ 322.524206] ? finish_task_switch+0x1ca/0x840 [ 322.528698] ? syscall_return_slowpath+0x5c0/0x5c0 [ 322.533628] ? syscall_return_slowpath+0x30f/0x5c0 [ 322.538552] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 322.543899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.548771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.553950] RIP: 0033:0x4559f9 [ 322.557122] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.576412] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 322.584123] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 322.591380] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 322.598636] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 322.605893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 322.613150] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000055 [ 322.693871] binder: undelivered TRANSACTION_ERROR: 29201 [ 322.703849] binder: undelivered TRANSACTION_ERROR: 29201 13:58:30 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) dup2(r3, r1) 13:58:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='//file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:30 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:30 executing program 7 (fault-call:4 fault-nth:86): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:30 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:30 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000ffffffc300"}) 13:58:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xf73]}, 0x10) [ 322.869930] binder: 24088:24089 got transaction with invalid offsets ptr [ 322.874411] FAULT_INJECTION: forcing a failure. [ 322.874411] name failslab, interval 1, probability 0, space 0, times 0 [ 322.888229] CPU: 1 PID: 24091 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 322.895166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.904533] Call Trace: [ 322.907142] dump_stack+0x1b9/0x294 [ 322.907655] binder: 24088:24089 transaction failed 29201/-14, size 0-12288 line 2995 13:58:30 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 322.910780] ? dump_stack_print_info.cold.2+0x52/0x52 [ 322.910799] ? is_bpf_text_address+0xd7/0x170 [ 322.910820] ? kernel_text_address+0x79/0xf0 [ 322.910833] ? __unwind_start+0x166/0x330 [ 322.910852] should_fail.cold.4+0xa/0x1a [ 322.940404] XFS (loop3): mtpt option not allowed on this system [ 322.940980] ? __save_stack_trace+0x7e/0xd0 [ 322.951333] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 322.954681] binder_alloc: binder_alloc_mmap_handler: 24088 20002000-20006000 already mapped failed -16 [ 322.956448] ? save_stack+0xa9/0xd0 [ 322.956464] ? save_stack+0x43/0xd0 [ 322.956478] ? kasan_kmalloc+0xc4/0xe0 [ 322.956492] ? kasan_slab_alloc+0x12/0x20 [ 322.956509] ? find_held_lock+0x36/0x1c0 [ 322.956536] ? check_same_owner+0x320/0x320 [ 322.989547] ? lock_downgrade+0x8e0/0x8e0 [ 322.993701] ? rcu_note_context_switch+0x710/0x710 [ 322.998651] __should_failslab+0x124/0x180 [ 323.002891] should_failslab+0x9/0x14 [ 323.006693] kmem_cache_alloc_node_trace+0x26f/0x770 [ 323.009927] binder: BINDER_SET_CONTEXT_MGR already set 13:58:30 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(0xffffffffffffffff) [ 323.011805] __kmalloc_node_track_caller+0x33/0x70 [ 323.011827] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 323.011843] __alloc_skb+0x14d/0x780 [ 323.011860] ? skb_scrub_packet+0x580/0x580 [ 323.011878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.011893] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 323.011912] ? ip_mc_drop_socket+0x270/0x270 [ 323.044231] binder_alloc: 24088: binder_alloc_buf, no vma [ 323.045706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.045725] ? ip_generic_getfrag+0x11c/0x2d0 [ 323.045743] ? ip_reply_glue_bits+0xc0/0xc0 13:58:30 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 323.045761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 323.045778] ? skb_put+0x17b/0x1e0 [ 323.045799] __ip_append_data.isra.47+0x21a6/0x2a60 [ 323.045821] ? ip_reply_glue_bits+0xc0/0xc0 [ 323.045846] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 323.050302] binder: 24088:24097 transaction failed 29189/-3, size 0-12288 line 2967 [ 323.055766] ? ip_route_input_noref+0x250/0x250 [ 323.055786] ? find_held_lock+0x36/0x1c0 [ 323.055798] ? ipv4_mtu+0x375/0x580 [ 323.055815] ? __build_flow_key.constprop.54+0x5f0/0x5f0 13:58:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4001002000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 323.068594] binder: 24088:24089 ioctl 40046207 0 returned -16 [ 323.070123] ? lock_downgrade+0x8e0/0x8e0 [ 323.070148] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 323.070165] ? ip_setup_cork+0x4dc/0x7c0 [ 323.070184] ip_make_skb+0x2aa/0x340 [ 323.070208] ? ip_reply_glue_bits+0xc0/0xc0 [ 323.070227] ? ip_flush_pending_frames+0x30/0x30 [ 323.070242] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 323.070261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.134539] binder: undelivered TRANSACTION_ERROR: 29189 [ 323.135877] ? xfrm_lookup_route+0x64/0x1f0 [ 323.135900] udp_sendmsg+0x25aa/0x3970 [ 323.135926] ? ip_reply_glue_bits+0xc0/0xc0 [ 323.135951] ? udp_push_pending_frames+0xf0/0xf0 [ 323.135976] ? graph_lock+0x170/0x170 [ 323.136004] ? find_held_lock+0x36/0x1c0 [ 323.136029] ? lock_downgrade+0x8e0/0x8e0 [ 323.136044] ? lock_release+0xa10/0xa10 [ 323.136060] ? check_same_owner+0x320/0x320 [ 323.140648] binder: undelivered TRANSACTION_ERROR: 29201 [ 323.143812] ? __check_object_size+0x95/0x5d9 [ 323.143834] inet_sendmsg+0x19f/0x690 [ 323.143848] ? __might_sleep+0x95/0x190 [ 323.143865] ? ipip_gro_receive+0x100/0x100 [ 323.143884] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.143903] ? security_socket_sendmsg+0x94/0xc0 [ 323.143917] ? ipip_gro_receive+0x100/0x100 [ 323.143933] sock_sendmsg+0xd5/0x120 [ 323.143948] __sys_sendto+0x3d7/0x670 [ 323.143963] ? __ia32_sys_getpeername+0xb0/0xb0 [ 323.255727] ? wait_for_completion+0x870/0x870 [ 323.260297] ? __lock_is_held+0xb5/0x140 [ 323.264352] ? __sb_end_write+0xac/0xe0 [ 323.268313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 323.273832] ? fput+0x130/0x1a0 [ 323.277095] ? ksys_write+0x1a6/0x250 [ 323.280882] ? __ia32_sys_read+0xb0/0xb0 [ 323.284926] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 323.290451] __x64_sys_sendto+0xe1/0x1a0 [ 323.294499] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 323.299499] do_syscall_64+0x1b1/0x800 [ 323.303370] ? finish_task_switch+0x1ca/0x840 [ 323.307852] ? syscall_return_slowpath+0x5c0/0x5c0 [ 323.312768] ? syscall_return_slowpath+0x30f/0x5c0 [ 323.317685] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 323.323055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.327885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.333058] RIP: 0033:0x4559f9 [ 323.336226] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.355450] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 323.363142] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 323.370395] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 [ 323.377647] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 323.384899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 323.392150] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000056 13:58:30 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:30 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r4 = socket(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x210e80) dup2(r4, r1) [ 323.417828] binder: 24109:24110 got transaction with invalid offsets ptr [ 323.428108] XFS (loop3): mtpt option not allowed on this system [ 323.443837] binder: 24109:24110 transaction failed 29201/-14, size 0-12288 line 2995 [ 323.461540] binder_alloc: binder_alloc_mmap_handler: 24109 20002000-20006000 already mapped failed -16 13:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='C/file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:30 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 323.532113] binder: BINDER_SET_CONTEXT_MGR already set [ 323.556397] binder: 24109:24115 ioctl 40046207 0 returned -16 [ 323.581334] binder_alloc: 24109: binder_alloc_buf, no vma [ 323.587058] binder: 24109:24123 transaction failed 29189/-3, size 0-12288 line 2967 [ 323.650928] binder: undelivered TRANSACTION_ERROR: 29189 [ 323.661282] binder: undelivered TRANSACTION_ERROR: 29201 13:58:31 executing program 1 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='.Cfile0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:31 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) dup2(r3, r1) 13:58:31 executing program 7 (fault-call:4 fault-nth:87): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:31 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x9f7e]}, 0x10) 13:58:31 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000fffffff500"}) [ 323.975213] binder: 24149:24150 got transaction to invalid handle [ 323.981687] binder: 24149:24150 transaction failed 29201/-22, size 0-12288 line 2852 [ 324.000362] FAULT_INJECTION: forcing a failure. [ 324.000362] name failslab, interval 1, probability 0, space 0, times 0 [ 324.011672] CPU: 0 PID: 24161 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 324.014341] FAULT_INJECTION: forcing a failure. [ 324.014341] name failslab, interval 1, probability 0, space 0, times 0 [ 324.018603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.018610] Call Trace: [ 324.018639] dump_stack+0x1b9/0x294 [ 324.018660] ? dump_stack_print_info.cold.2+0x52/0x52 [ 324.018678] ? unwind_get_return_address+0x61/0xa0 [ 324.018694] ? __save_stack_trace+0x7e/0xd0 [ 324.018712] should_fail.cold.4+0xa/0x1a [ 324.018738] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 324.018751] ? save_stack+0xa9/0xd0 [ 324.072804] ? save_stack+0x43/0xd0 [ 324.076427] ? kasan_kmalloc+0xc4/0xe0 [ 324.080307] ? __kmalloc_node_track_caller+0x47/0x70 [ 324.085400] ? __alloc_skb+0x14d/0x780 [ 324.089281] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 324.094463] ? ip_make_skb+0x2aa/0x340 [ 324.098340] ? udp_sendmsg+0x25aa/0x3970 [ 324.102391] ? inet_sendmsg+0x19f/0x690 [ 324.106354] ? sock_sendmsg+0xd5/0x120 [ 324.110229] ? __sys_sendto+0x3d7/0x670 [ 324.114190] ? __x64_sys_sendto+0xe1/0x1a0 [ 324.118419] ? do_syscall_64+0x1b1/0x800 [ 324.122478] ? find_held_lock+0x36/0x1c0 [ 324.126545] ? check_same_owner+0x320/0x320 [ 324.130862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.136392] ? rcu_note_context_switch+0x710/0x710 [ 324.141316] __should_failslab+0x124/0x180 [ 324.145542] should_failslab+0x9/0x14 [ 324.149332] kmem_cache_alloc_node+0x272/0x780 [ 324.153911] __alloc_skb+0x111/0x780 [ 324.157622] ? skb_scrub_packet+0x580/0x580 [ 324.161936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.167467] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 324.172835] ? ip_mc_drop_socket+0x270/0x270 [ 324.177238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.182769] ? ip_generic_getfrag+0x11c/0x2d0 [ 324.187257] ? ip_reply_glue_bits+0xc0/0xc0 [ 324.191571] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 324.196580] ? skb_put+0x17b/0x1e0 [ 324.200123] __ip_append_data.isra.47+0x21a6/0x2a60 [ 324.205137] ? ip_reply_glue_bits+0xc0/0xc0 [ 324.209458] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 324.215246] ? ip_route_input_noref+0x250/0x250 [ 324.219910] ? find_held_lock+0x36/0x1c0 [ 324.223963] ? ipv4_mtu+0x375/0x580 [ 324.227582] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 324.233031] ? lock_downgrade+0x8e0/0x8e0 [ 324.237177] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 324.242705] ? ip_setup_cork+0x4dc/0x7c0 [ 324.246766] ip_make_skb+0x2aa/0x340 [ 324.250473] ? ip_reply_glue_bits+0xc0/0xc0 [ 324.254788] ? ip_flush_pending_frames+0x30/0x30 [ 324.259533] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 324.265067] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.270598] ? xfrm_lookup_route+0x64/0x1f0 [ 324.274915] udp_sendmsg+0x25aa/0x3970 [ 324.278800] ? ip_reply_glue_bits+0xc0/0xc0 [ 324.283121] ? udp_push_pending_frames+0xf0/0xf0 [ 324.287875] ? graph_lock+0x170/0x170 [ 324.291678] ? find_held_lock+0x36/0x1c0 [ 324.295738] ? lock_downgrade+0x8e0/0x8e0 [ 324.299879] ? lock_release+0xa10/0xa10 [ 324.303842] ? check_same_owner+0x320/0x320 [ 324.308158] ? __check_object_size+0x95/0x5d9 [ 324.312650] inet_sendmsg+0x19f/0x690 [ 324.316440] ? __might_sleep+0x95/0x190 [ 324.320409] ? ipip_gro_receive+0x100/0x100 [ 324.324723] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.330252] ? security_socket_sendmsg+0x94/0xc0 [ 324.335000] ? ipip_gro_receive+0x100/0x100 [ 324.339313] sock_sendmsg+0xd5/0x120 [ 324.343023] __sys_sendto+0x3d7/0x670 [ 324.346820] ? __ia32_sys_getpeername+0xb0/0xb0 [ 324.351481] ? wait_for_completion+0x870/0x870 [ 324.356080] ? __lock_is_held+0xb5/0x140 [ 324.360145] ? __sb_end_write+0xac/0xe0 [ 324.364115] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 324.369639] ? fput+0x130/0x1a0 [ 324.372911] ? ksys_write+0x1a6/0x250 [ 324.376707] ? __ia32_sys_read+0xb0/0xb0 [ 324.380757] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 324.386289] __x64_sys_sendto+0xe1/0x1a0 [ 324.390345] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.395356] do_syscall_64+0x1b1/0x800 [ 324.399234] ? finish_task_switch+0x1ca/0x840 [ 324.403722] ? syscall_return_slowpath+0x5c0/0x5c0 [ 324.408646] ? syscall_return_slowpath+0x30f/0x5c0 [ 324.413570] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 324.418956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.423796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 324.428978] RIP: 0033:0x4559f9 [ 324.432151] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.451461] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 324.459205] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 324.466475] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 13:58:31 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 324.473736] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 324.480997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 324.488269] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000057 [ 324.495546] CPU: 1 PID: 24166 Comm: syz-executor1 Not tainted 4.17.0+ #90 [ 324.502476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.505012] XFS (loop3): mtpt option not allowed on this system [ 324.511826] Call Trace: [ 324.511849] dump_stack+0x1b9/0x294 [ 324.511868] ? dump_stack_print_info.cold.2+0x52/0x52 [ 324.511890] should_fail.cold.4+0xa/0x1a [ 324.511910] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 324.538574] ? lock_downgrade+0x8e0/0x8e0 [ 324.542737] ? mark_held_locks+0xc9/0x160 [ 324.546892] ? __local_bh_enable_ip+0x161/0x230 [ 324.551570] ? graph_lock+0x170/0x170 [ 324.555374] ? __dev_queue_xmit+0x1572/0x3900 [ 324.559050] binder_alloc: binder_alloc_mmap_handler: 24149 20002000-20006000 already mapped failed -16 [ 324.559872] ? trace_hardirqs_on+0xd/0x10 [ 324.559889] ? __local_bh_enable_ip+0x161/0x230 [ 324.559908] ? __dev_queue_xmit+0x15d5/0x3900 [ 324.559924] ? print_usage_bug+0xc0/0xc0 [ 324.559943] ? find_held_lock+0x36/0x1c0 [ 324.590734] ? print_usage_bug+0xc0/0xc0 [ 324.594809] __should_failslab+0x124/0x180 [ 324.599050] should_failslab+0x9/0x14 [ 324.602161] binder: BINDER_SET_CONTEXT_MGR already set [ 324.602856] kmem_cache_alloc+0x47/0x760 [ 324.612283] ? __lock_acquire+0x7f5/0x5140 [ 324.616526] ? lock_acquire+0x1dc/0x520 [ 324.620510] skb_clone+0x1ed/0x4f0 [ 324.624055] ? skb_split+0x11d0/0x11d0 [ 324.627954] ? kasan_check_read+0x11/0x20 [ 324.632107] ? rcu_is_watching+0x85/0x140 [ 324.636259] ? rcu_report_qs_rnp+0x790/0x790 [ 324.638172] binder: 24149:24176 got transaction to invalid handle [ 324.640687] ? debug_check_no_locks_freed+0x310/0x310 [ 324.640710] dev_queue_xmit_nit+0x44a/0xc50 [ 324.640734] ? napi_busy_loop+0xd40/0xd40 [ 324.640749] ? __lock_acquire+0x7f5/0x5140 [ 324.640764] ? check_noncircular+0x20/0x20 [ 324.640789] dev_hard_start_xmit+0x16b/0xc10 [ 324.640806] ? graph_lock+0x170/0x170 13:58:32 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:32 executing program 7 (fault-call:4 fault-nth:88): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 324.647046] binder: 24149:24176 transaction failed 29201/-22, size 0-12288 line 2852 [ 324.652217] ? dev_direct_xmit+0x6a0/0x6a0 [ 324.652235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.652253] ? netif_skb_features+0x696/0xb40 [ 324.673748] binder: 24149:24175 ioctl 40046207 0 returned -16 [ 324.677288] ? validate_xmit_xfrm+0x1ef/0xdc0 [ 324.677308] ? lock_acquire+0x1dc/0x520 [ 324.677327] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.677347] ? validate_xmit_skb+0x804/0xf20 [ 324.677367] ? netif_skb_features+0xb40/0xb40 13:58:32 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 324.677389] __dev_queue_xmit+0x29da/0x3900 [ 324.677407] ? find_held_lock+0x36/0x1c0 [ 324.736528] ? lock_chain_get_class+0x71/0xa0 [ 324.741036] ? netdev_pick_tx+0x2d0/0x2d0 [ 324.745206] ? debug_check_no_locks_freed+0x310/0x310 [ 324.750394] ? mark_held_locks+0xc9/0x160 [ 324.754541] ? kasan_check_read+0x11/0x20 [ 324.758684] ? __local_bh_enable_ip+0x161/0x230 [ 324.763356] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.768373] ? tcp_packet.cold.15+0x147/0x182 [ 324.772873] ? trace_hardirqs_on+0xd/0x10 13:58:32 executing program 2: socket$inet6(0xa, 0x801, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(0xffffffffffffffff) [ 324.777026] ? _raw_spin_unlock_bh+0x30/0x40 [ 324.781441] ? tcp_packet+0x1568/0x53ae [ 324.785425] ? print_usage_bug+0xc0/0xc0 [ 324.789496] ? graph_lock+0x170/0x170 [ 324.793303] ? graph_lock+0x170/0x170 [ 324.797110] ? __lock_acquire+0x7f5/0x5140 [ 324.801345] ? __lock_is_held+0xb5/0x140 [ 324.805408] ? print_usage_bug+0xc0/0xc0 [ 324.809478] ? lock_downgrade+0x8e0/0x8e0 [ 324.813630] ? lock_release+0xa10/0xa10 [ 324.817604] ? kasan_check_read+0x11/0x20 [ 324.821756] ? mark_held_locks+0xc9/0x160 13:58:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 324.825917] dev_queue_xmit+0x17/0x20 [ 324.829719] ? dev_queue_xmit+0x17/0x20 [ 324.833698] ip_finish_output2+0x1046/0x1840 [ 324.838104] ? ipt_do_table+0xf85/0x1b20 [ 324.842172] ? ip_copy_metadata+0xa90/0xa90 [ 324.846501] ? graph_lock+0x170/0x170 [ 324.850308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.855846] ? ipv4_mtu+0x375/0x580 [ 324.859478] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 324.864932] ? __lock_is_held+0xb5/0x140 [ 324.869002] ip_finish_output+0x828/0xf80 [ 324.873152] ? ip_finish_output+0x828/0xf80 13:58:32 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 324.877477] ? ip_fragment.constprop.49+0x240/0x240 [ 324.882501] ? kasan_check_read+0x11/0x20 [ 324.886658] ? rcu_is_watching+0x85/0x140 [ 324.890808] ? rcu_report_qs_rnp+0x790/0x790 [ 324.895216] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 324.900227] ? nf_hook_slow+0x11e/0x1c0 [ 324.904214] ip_output+0x21b/0x850 [ 324.907756] ? __ip_local_out+0x5cf/0xb20 [ 324.911906] ? ip_mc_output+0x15a0/0x15a0 [ 324.916071] ? ip_fragment.constprop.49+0x240/0x240 [ 324.921098] ip_local_out+0xc5/0x1b0 [ 324.924821] ip_queue_xmit+0x9d7/0x1f70 13:58:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 324.928800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.934342] ? ip_build_and_send_pkt+0xc70/0xc70 [ 324.939099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.944642] ? tcp_established_options+0x36b/0x5a0 [ 324.949582] ? tcp_select_initial_window+0x3a0/0x3a0 [ 324.954693] ? __tcp_v4_send_check+0x1d/0x1d0 [ 324.959192] ? tcp_options_write+0x29f/0xa70 [ 324.963608] tcp_transmit_skb+0x1bea/0x3ec0 [ 324.967941] ? __tcp_select_window+0x9e0/0x9e0 [ 324.972526] ? print_usage_bug+0xc0/0xc0 [ 324.976595] ? lock_downgrade+0x8e0/0x8e0 [ 324.980744] ? unlock_page+0x1d0/0x2b0 [ 324.984624] ? debug_check_no_locks_freed+0x310/0x310 [ 324.989804] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 324.994803] ? tcp_small_queue_check.isra.26+0x352/0x470 [ 325.000234] ? tcp_rtx_synack+0x6f0/0x6f0 [ 325.004378] ? kvm_clock_read+0x25/0x30 [ 325.008351] ? kvm_sched_clock_read+0x9/0x20 [ 325.012755] tcp_write_xmit+0x1626/0x5c00 [ 325.016888] ? debug_check_no_locks_freed+0x310/0x310 [ 325.022068] ? tcp_transmit_skb+0x3ec0/0x3ec0 [ 325.026553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.032083] ? ipv4_mtu+0x375/0x580 [ 325.035702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.041221] ? tcp_established_options+0x36b/0x5a0 [ 325.046133] ? tcp_select_initial_window+0x3a0/0x3a0 [ 325.051244] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 325.056249] ? tcp_current_mss+0x2ac/0x400 [ 325.060466] ? tcp_mtu_to_mss+0x4c0/0x4c0 [ 325.064596] ? inet_bind+0x160/0x160 [ 325.068324] ? find_held_lock+0x36/0x1c0 [ 325.072371] __tcp_push_pending_frames+0xb2/0x290 [ 325.077212] tcp_send_fin+0x1b0/0xda0 [ 325.081013] ? sk_forced_mem_schedule+0x170/0x170 [ 325.085852] ? tcp_md5_hash_skb_data+0xbc0/0xbc0 [ 325.090592] ? __local_bh_enable_ip+0x161/0x230 [ 325.095258] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 325.100254] ? lock_sock_nested+0x9f/0x120 [ 325.104468] ? trace_hardirqs_on+0xd/0x10 [ 325.108594] ? __local_bh_enable_ip+0x161/0x230 [ 325.113245] ? lock_sock_nested+0xe7/0x120 [ 325.117459] tcp_close+0xfb7/0x12b0 [ 325.121067] ? locks_remove_file+0x3f7/0x5a0 [ 325.125456] ? tcp_check_oom+0x520/0x520 [ 325.129500] ? ip_mc_drop_socket+0x20f/0x270 [ 325.133890] inet_release+0x104/0x1f0 [ 325.137672] sock_release+0x96/0x1b0 [ 325.141371] ? sock_alloc_file+0x4e0/0x4e0 [ 325.145587] sock_close+0x16/0x20 [ 325.149033] __fput+0x353/0x890 [ 325.152302] ? fput+0x1a0/0x1a0 [ 325.155569] ? _raw_spin_unlock_irq+0x27/0x70 [ 325.160049] ____fput+0x15/0x20 [ 325.163320] task_work_run+0x1e4/0x290 [ 325.167188] ? task_work_cancel+0x240/0x240 [ 325.171491] ? exit_to_usermode_loop+0x87/0x310 [ 325.176144] exit_to_usermode_loop+0x2bd/0x310 [ 325.180718] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 325.185554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.191074] do_syscall_64+0x6ac/0x800 [ 325.194945] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 325.199778] ? syscall_return_slowpath+0x5c0/0x5c0 [ 325.204687] ? syscall_return_slowpath+0x30f/0x5c0 [ 325.209610] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 325.214954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.219779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.224945] RIP: 0033:0x4559f9 [ 325.228111] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.247284] RSP: 002b:00007f6c25b7cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 325.254970] RAX: 0000000000000000 RBX: 00007f6c25b7d6d4 RCX: 00000000004559f9 [ 325.262219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 325.269468] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 325.276715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 325.283970] R13: 00000000004e9b92 R14: 00000000004c7fc0 R15: 0000000000000000 [ 325.360564] FAULT_INJECTION: forcing a failure. [ 325.360564] name failslab, interval 1, probability 0, space 0, times 0 [ 325.371846] CPU: 0 PID: 24192 Comm: syz-executor7 Not tainted 4.17.0+ #90 [ 325.378775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.384064] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.388123] Call Trace: [ 325.388147] dump_stack+0x1b9/0x294 [ 325.388169] ? dump_stack_print_info.cold.2+0x52/0x52 [ 325.388188] ? is_bpf_text_address+0xd7/0x170 [ 325.393659] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.396200] ? kernel_text_address+0x79/0xf0 [ 325.396214] ? __unwind_start+0x166/0x330 [ 325.396238] should_fail.cold.4+0xa/0x1a [ 325.427514] ? __save_stack_trace+0x7e/0xd0 [ 325.431857] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 325.437064] ? save_stack+0xa9/0xd0 [ 325.440720] ? save_stack+0x43/0xd0 [ 325.444355] ? kasan_kmalloc+0xc4/0xe0 [ 325.448251] ? kasan_slab_alloc+0x12/0x20 [ 325.452415] ? find_held_lock+0x36/0x1c0 [ 325.456502] ? check_same_owner+0x320/0x320 [ 325.460823] ? rcu_note_context_switch+0x710/0x710 [ 325.465750] __should_failslab+0x124/0x180 [ 325.469968] should_failslab+0x9/0x14 [ 325.473750] kmem_cache_alloc_node_trace+0x26f/0x770 [ 325.478840] __kmalloc_node_track_caller+0x33/0x70 [ 325.483770] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 325.488522] __alloc_skb+0x14d/0x780 [ 325.492220] ? skb_scrub_packet+0x580/0x580 [ 325.496539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.502068] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 325.507414] ? ip_mc_drop_socket+0x270/0x270 [ 325.511803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.517337] ? ip_generic_getfrag+0x11c/0x2d0 [ 325.521816] ? ip_reply_glue_bits+0xc0/0xc0 [ 325.526131] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 325.531138] ? skb_put+0x17b/0x1e0 [ 325.534661] __ip_append_data.isra.47+0x21a6/0x2a60 [ 325.539662] ? ip_reply_glue_bits+0xc0/0xc0 [ 325.543970] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 325.549746] ? ip_route_input_noref+0x250/0x250 [ 325.554399] ? find_held_lock+0x36/0x1c0 [ 325.558440] ? ipv4_mtu+0x375/0x580 [ 325.562057] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 325.567515] ? lock_downgrade+0x8e0/0x8e0 [ 325.571652] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 325.577172] ? ip_setup_cork+0x4dc/0x7c0 [ 325.581218] ip_make_skb+0x2aa/0x340 [ 325.584915] ? ip_reply_glue_bits+0xc0/0xc0 [ 325.589227] ? ip_flush_pending_frames+0x30/0x30 [ 325.593980] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 325.599523] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.605050] ? xfrm_lookup_route+0x64/0x1f0 [ 325.609361] udp_sendmsg+0x25aa/0x3970 [ 325.613233] ? ip_reply_glue_bits+0xc0/0xc0 [ 325.617538] ? udp_push_pending_frames+0xf0/0xf0 [ 325.622281] ? graph_lock+0x170/0x170 [ 325.626083] ? find_held_lock+0x36/0x1c0 [ 325.630129] ? lock_downgrade+0x8e0/0x8e0 [ 325.634261] ? lock_release+0xa10/0xa10 [ 325.638218] ? check_same_owner+0x320/0x320 [ 325.642533] ? __check_object_size+0x95/0x5d9 [ 325.647015] inet_sendmsg+0x19f/0x690 [ 325.650805] ? __might_sleep+0x95/0x190 [ 325.654761] ? ipip_gro_receive+0x100/0x100 [ 325.659066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.664586] ? security_socket_sendmsg+0x94/0xc0 [ 325.669321] ? ipip_gro_receive+0x100/0x100 [ 325.673623] sock_sendmsg+0xd5/0x120 [ 325.677317] __sys_sendto+0x3d7/0x670 [ 325.681100] ? __ia32_sys_getpeername+0xb0/0xb0 [ 325.685751] ? wait_for_completion+0x870/0x870 [ 325.690314] ? __lock_is_held+0xb5/0x140 [ 325.694360] ? __sb_end_write+0xac/0xe0 [ 325.698316] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 325.703830] ? fput+0x130/0x1a0 [ 325.707089] ? ksys_write+0x1a6/0x250 [ 325.710872] ? __ia32_sys_read+0xb0/0xb0 [ 325.714913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 325.720436] __x64_sys_sendto+0xe1/0x1a0 [ 325.724482] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 325.729488] do_syscall_64+0x1b1/0x800 [ 325.733358] ? finish_task_switch+0x1ca/0x840 [ 325.737835] ? syscall_return_slowpath+0x5c0/0x5c0 [ 325.742748] ? syscall_return_slowpath+0x30f/0x5c0 [ 325.747662] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 325.753013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.757856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.763034] RIP: 0033:0x4559f9 [ 325.766203] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.785397] RSP: 002b:00007fa69ee3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 325.793097] RAX: ffffffffffffffda RBX: 00007fa69ee3c6d4 RCX: 00000000004559f9 [ 325.800348] RDX: 000000000000fdc7 RSI: 0000000020762fff RDI: 0000000000000013 13:58:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x730f]}, 0x10) 13:58:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:33 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./.ile0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:33 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000400"}) 13:58:33 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x282280) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x10}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) socket(0xa, 0x1, 0x0) 13:58:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 325.807601] RBP: 000000000072bea0 R08: 000000002057bff0 R09: 0000000000000010 [ 325.814852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 325.822107] R13: 00000000004c0c6b R14: 00000000004d0510 R15: 0000000000000058 13:58:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:33 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1, 0x0) [ 325.904906] binder: 24224:24228 got transaction with invalid offsets ptr [ 325.915509] XFS (loop3): mtpt option not allowed on this system [ 325.941259] binder: 24224:24228 transaction failed 29201/-14, size 0-12288 line 2995 13:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='.//ile0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x9080, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 325.992504] binder_alloc: binder_alloc_mmap_handler: 24224 20002000-20006000 already mapped failed -16 13:58:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xa7b20000]}, 0x10) 13:58:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 326.052955] binder: BINDER_SET_CONTEXT_MGR already set [ 326.074339] binder: 24224:24228 ioctl 40046207 0 returned -16 13:58:33 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00 \x00'}) 13:58:33 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) dup2(r3, r1) recvfrom$llc(r3, &(0x7f0000000300)=""/4096, 0x1000, 0x2, &(0x7f0000000000)={0x1a, 0x6, 0x2, 0x8, 0x1, 0x7, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) [ 326.126770] binder_alloc: 24224: binder_alloc_buf, no vma [ 326.132493] binder: 24224:24241 transaction failed 29189/-3, size 0-12288 line 2967 [ 326.144334] XFS (loop3): mtpt option not allowed on this system 13:58:33 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005804000000000000000000001801000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000007f00000100000000ffffffff0000000000000000000000000000000000000000000000000000000000ffff00000000000000000000000000f333cbb53345000000000000000000000000000000000000ffff00ff0000000000000000000000000001000303ff0001e73e000373797a6b616c6c6572300000000000007665746831000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020000008001000000e0000002ac1414bbffffffffff000000aaaaaaaaaa1400000000000000000000000000000000000000ffffff00000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff00000000000000000000000100080080003d07ce00006970646470300000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002e000000201000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a8) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = dup3(r0, r0, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0xb, 0x4) close(r1) 13:58:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x7960, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 326.205236] XFS (loop3): mtpt option not allowed on this system 13:58:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./f\nle0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 326.273667] binder: undelivered TRANSACTION_ERROR: 29189 [ 326.279586] binder: undelivered TRANSACTION_ERROR: 29201 13:58:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xafe60000]}, 0x10) 13:58:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 326.408852] binder: 24286:24287 got transaction to invalid handle [ 326.415298] binder: 24286:24287 transaction failed 29201/-22, size 0-12288 line 2852 [ 326.430788] XFS (loop3): mtpt option not allowed on this system [ 326.460512] binder_alloc: binder_alloc_mmap_handler: 24286 20002000-20006000 already mapped failed -16 [ 326.479667] XFS (loop3): mtpt option not allowed on this system [ 326.488123] binder: BINDER_SET_CONTEXT_MGR already set [ 326.502996] binder: 24286:24302 got transaction to invalid handle 13:58:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x9c10, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:33 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xc4, "52ac96a72a2d4962b05047e81787d5dd399bae45f5b40b471793e043834f9c94bb82fac810f620ea4e5f86fd7d68027edcc5d97efd58dd6b9a7147df05dc094b232d4ac9d1f2a5ecc3ff0cc737611a9d16ccdb79cdb8620e3ed48c185df2a962604ed5a79bf1950377f8aa24d06f647abd20e43f049fe2ecaad7ad303bd8583cf6dddbff94fdc573ba1f266cc310eadfe367de9c01566ddadc04cc7b19f12b4db156ce022a0f507c0e42f88b46afc82d62feca9309883decba7af3b5275cdaab1b3f1e7d"}, &(0x7f0000000040)=0xcc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x5e, 0x1}, 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:33 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\b\x00'}) [ 326.509338] binder: 24286:24302 transaction failed 29201/-22, size 0-12288 line 2852 13:58:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./f%le0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x1fdb]}, 0x10) [ 326.639340] binder: 24286:24287 ioctl 40046207 0 returned -16 [ 326.675420] XFS (loop3): mtpt option not allowed on this system [ 326.714916] XFS (loop3): mtpt option not allowed on this system [ 326.767224] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.773928] binder: undelivered TRANSACTION_ERROR: 29201 13:58:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x7a9, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in6={0xa, 0x4e24, 0x5ab5, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x7}], 0x54) 13:58:34 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x1ce0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi#e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x30000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x476d]}, 0x10) 13:58:34 executing program 6: r0 = socket(0x11, 0x100000803, 0x10) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x3, 0xfdfffffffffffff6) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) socket(0xa, 0x1, 0x0) dup2(r0, r1) 13:58:34 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000000001100"}) [ 326.918254] XFS (loop3): mtpt option not allowed on this system [ 326.921337] binder: 24352:24364 got transaction with invalid offsets ptr [ 326.942180] XFS (loop3): mtpt option not allowed on this system [ 326.956212] binder: 24352:24364 transaction failed 29201/-14, size 0-12288 line 2995 [ 327.019852] binder_alloc: binder_alloc_mmap_handler: 24352 20002000-20006000 already mapped failed -16 [ 327.064783] binder: BINDER_SET_CONTEXT_MGR already set [ 327.083777] binder: 24352:24379 ioctl 40046207 0 returned -16 [ 327.091450] binder_alloc: 24352: binder_alloc_buf, no vma [ 327.097223] binder: 24352:24380 transaction failed 29189/-3, size 0-12288 line 2967 13:58:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/24, 0x18}], 0xa, 0x0, 0x0, 0xffff}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001900)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x18040022}, 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fcdbdf2503000000080002a1e70000000000000003000000f5"], 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x84) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x1, 0x3f, &(0x7f0000000040)=[0x0], 0x1}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000180)=""/184) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:34 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xe170, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi/e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x221f]}, 0x10) 13:58:34 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000f00"}) 13:58:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x8b0d000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:34 executing program 6: socket(0x11, 0x100000803, 0x0) r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000100)={0x400000000000000, 0x1, 0x3, 0x4, 0x1e}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0x1004}) socket(0xa, 0x1, 0x0) dup2(r2, r0) [ 327.174167] binder: undelivered TRANSACTION_ERROR: 29189 [ 327.181563] binder: undelivered TRANSACTION_ERROR: 29201 13:58:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi0e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 327.254568] binder: 24406:24407 got transaction with invalid offsets ptr [ 327.285562] binder: 24406:24407 transaction failed 29201/-14, size 0-12288 line 2995 13:58:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x2, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:34 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xad68, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:34 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000c0ffffff00"}) [ 327.331155] binder_alloc: binder_alloc_mmap_handler: 24406 20002000-20006000 already mapped failed -16 13:58:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x73f000000000000]}, 0x10) 13:58:34 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000240), 0x4) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @remote}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r5 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000014c0)=0xc) sendmsg$netlink(r0, &(0x7f00000029c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x3081042}, 0xc, &(0x7f0000002980)=[{&(0x7f0000000300)={0x11b0, 0x2c, 0x10b, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x2c, @ipv4=@multicast2=0xe0000002}, @generic="8b321525b08b505ee9e2999bef10cb46d781a8d9248a890697c5e4c560ff5e11f1376c234052d79c7280ddd8c20a97c8b8bb89fa50ac8417c83186613ac2bc759c9e66f60541414c78834bdd2e0ca9939415d222eb81e87ad1a7f3c9c74009f4883547251696f25ea115", @generic="7bb2b0cf58c2c5d6339393cd1bd8b2a76283828897", @typed={0x14, 0xa, @ipv6}, @nested={0x1020, 0x8c, [@generic="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", @typed={0xc, 0x55, @u64=0x640}, @typed={0x8, 0x8c, @uid=r4}, @typed={0x8, 0x1b, @pid=r5}]}, @typed={0x14, 0x6, @str="6966623000faffffffffffffff00"}, @typed={0x14, 0x25, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @generic="1d91e3469a125d6a63f8f51325ca0cd6e76204ed9a283d7713492ef8ca6089074e1bebaa0721dd6df11154778100d554e97e09b90348b12aba8d2bb072e7a876ad64663cc7760d15f0fab661b58b5fa66f779c2e6d7bf1144a232eccc638b86724e92f01a47ba2e332c624f5728b9c6b5a47639e4638528b4c42b8aa21499a22d63b7e1ba7ef64e918f7f07af64df758746e06ef8f584c34cdb45b5b7de85b99d2957ab53eccf6395f8c86cfcf7a3d1404fb395be37ddf721278ae"]}, 0x11b0}, {&(0x7f0000001500)={0x1478, 0x30, 0x24, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x158, 0x8c, [@generic="8c69327257ed66d612885045c50dd97ec12cbcc0e3ab2653a78247814823b830f08d772f7c6b4269b630b6228f9d8ea9e2dc76413b1b88d3185e80fc0244da50639b359da5d5fc2de2596cf8fae68399ecba3690ca38c2e1648abb536c616f96486dcdedf78840dcd5e30adea1df2463808995acc66c0860645e30f38a8ddb9aca20269eb61b4c954e014be667531914c7633fb79c23de6d7bbaf615d39d2b86ab4431531964c00dc7bd56338d8f73b2e5f0935dfe83ae00be32ffef6cf2de16bc2991b22dba657f87a48bd865d12cafe14688c4a72c490df29c712c9ebda291dd", @typed={0x4, 0x74}, @typed={0x8, 0x60, @str='\x00'}, @generic="02626fab6c2faaf9e634c0fe5beadb7fb89f82f34c5a7ca101d6b02f75baecb664ac49083887b5bcc3df6c4623f8f488c58f56cbe89e42b37484e1f2fc3166858a9bfefd339f94c9214353afdbacfaa73f2f0d00b30e81da847f167239d4cd61e11d177a56"]}, @nested={0x220, 0x8c, [@typed={0x8, 0x74, @u32=0xff}, @typed={0x8, 0x6a, @uid=r6}, @typed={0x8, 0x96, @u32=0x100000000}, @typed={0x4, 0x7f}, @generic="87a98f65477a04441e4e38782f3ddc033dd71821b80a6a1373a8b61fe88b4f126255b2eb960da3", @typed={0xfc, 0x12, @binary="15dee2ea03678a5f1032e70ffdc80a18e9f47b2bcae10b42df26bc34ed61b6351e2ef3dbc107a54668e68e3231d3d1d971695e3bc57cdfc69b901b7c444574524d1937321951b6008d5c7ffeeff700bb60e5a5ebb66627cf3b8e7318387789f14808ff169f05605c5ea26324e99361a4553d049913ae726900dc5774d136cc89cc9940730bfbe7b1970767b8ffe1a6e0a249d33b398f4555418fd8630af911329ab491746c6512c16a3791baac22b106e091bd085ec39205e960d674853fdab1d8d8d4556124d95b11ef303fc792f2088fef3601359957ec797a7d46a8585abecf175d523f024520f4314256d11d0067bd61adce7f77"}, @typed={0x4, 0x41}, @generic="538af93ad217aae2bd791e9a872745f7dacb28fde29bf490c32e25cf452ea219099d7df0c17dd4691a0fc250d945b6a5059be57e9e24b2e7969afb116880e15e4d401cf4e21572243393a1fcd9469bc3f32aceab9dad9992984677356cab0395e14e313aac975939c97cdaa3d2cd7656709986409d4f96c31400aa34430c95a729fe37424f51ef6b0bbfe59befacfcbd61c67d22a4b546532aab825af0f65224c188b3d15793bfa189659d30b620da97a25c33c22132ac4d05ddc55c9c28e5d658983b826e2d7e0abed98ce2d63ba959728329040c2873"]}, @typed={0x8, 0x11, @fd=r2}, @nested={0x1014, 0x1, [@typed={0x4, 0x74}, @generic="56d9b04774ca4f89e114d38e674be53128657a57869b9a56a5a941b9dee22ee47f30923c35b9cd061fe80a229e2028769fd3894cf05282ccbaccc5baac813cc7ccbaedb95f5c258370cdb086079a813108b4a9856a0ca1abdf85af0b8802167ea56363a5abf5db39cc74a7c583871472411777ede3bc9e821f9b63cc7868bc579cab7813de3cfecbb8146e28082d723b6fb122d23037447a7b87c3a33c8443f2ffeca6ad8a1ae1c56d19a571a639d09738c117c58eb235a0eb48e08408a9887c3d35167c383905811d5682d6028b0976d90b0f91e5b2b00c0db93ab64ba3ff4c97debdec4061d93b28e6b309165af3457fa9668c75f456bf474cb2dd9c37698874bc34581f838d47fbeb2c34fb476b8be3196bb630d5a0c30f20ef846640203b924c3fd56976cbda1d389c4949ce182f1919877eb5b03714ae7742c8f2b57d7bb5a218aa412294d99dd8cc2c770d2f0b46432e6291664339f589f75db37d730b7e31a581d9f406dc7df62f92c90120b106cca95b7f761ed81c68693789b2ace3b76fba91f7803a8e439c70cce7872b0c31e2611e1979227c69dcc656bfa32883a4ef9281207053385c91f9e8d7cf263fcb458769a1b5e98d631ab33709ecb00503e3c4ada7dce46f4d83a21a4d84842b4f0aab6dedd2bf461e6cec46eb02353ebae5a0b6bae4eaf25b5fa8a6c20a899a3c44db7b4e07defbe0de2c0733c1dc4e3575fb8b4efea72817db0c546602d5993f9497cbfa7cb64f682d97793ad80cc8280cff420fc91122323d9ff94240cc0211cdf59847ec9fd0e745acad6953133350514decfd11ed89b55979c5a006bdd49d4c5764a6cd715d53ccf381dafb9285e4f78aa32de1f0254dc8175ea999ae9b71f8892b1c734aac86beb00e74f7e5a0e19808df154d7d3dc0268b0757b1284cb741bcaae3794cf55a09561d4d244ef7c71f9cc17b3efc934a1a62cdf040d431384e74fd8ec11c33bd0c9d81eaee4ecba32fea335f7cefb6020ae037bf1e5ff21c7bd1a86a455f040bb0501b830adc21d6c71e8aaaeb9d775a8d95f5745d3ea4efddb8d1eeff5e667a1f03e42b05fd8886e2f265952fcc4b15864fd341035914104d3b893e839e9371f86014feef7e12ce5611d00400fed4a5eb049a04444fe5d4379de5f4c0d51fdc6df3ea9d428d64e0cfba36f92128c8b69b4fc2075d9893dcb6ddc2e053d134d6673616fc098f3291d1a577e833146d487f01efc94686769f50aebb78cda4ff463c4c7e9fc9d440e8b0cef2a1e84e67e52208fadc8d27ffb96917be904c622cb503ef7dbdd52dddeed0ebfdcd7853eacd2735ce2a7d2f953af6812e27be78f21d4178164a644c5263ddcf4df2959d992aed9e66830ba054974d8b6aaa7d540b1e6b4269e96b021662d70cc928a4d4a2a17c7d38a2ae170e0438e63704cc68075320e354989de1e293825fd8424238bbf77307dbb45145c8ce0e4c931b7fbc3066c8be59c0f2095cf8d5fbe36622f3ec161413ad99821acd1d7ac3fea2c4461c409232ef9c398209cb75ed58c9deb3317e8413b5f527dcc9a9bc4b093dd71d09a6e3a38284e3acce09d8412cc1877ce90fe3bb9c18d1a2cec7299da0f49f827d9ae0f93bc7d60faf829f92bd8589f0d73ce5368fbe6ccce60ede4815df41b836ad91d0724df0c07851065514cf7dd617852fc88f847baaca2a463591cb3fd5a6b7c1a90fc9bd02138dc599ae0f17e4c5ba35a021aff800bd4aec09ecc13d422458dbfb135d69ac82eda02da0b727bb1532a9729a1b11b8b9581f82f04375992eabf899cb5cf1a5de2da0f961760160b222b6edd4956cce1a300780ed995e75f6c794f5f2ca021de8f8b841ac0f0a35be3a47007d781fe426d7ca7d6529c527ff9c662f97b876a4f1953b046dea403ba1aad687a64ddbde72e78346db5828442d5082683ebbf2af62ac9c21e0380a23328ff6b7e486def8bc1b44617faf601aede26ff7b98b97e47124d8f9a1a0f27328689e7afe7f16bce3e62084867d5aa9cc4530d0d3d14cd0acb5c914413708096fd2fd54d7cfe6839d2f2ec93568a1b1ad7ebb46c59813ad3c9cd0be1dc5dfac1e26b8b072555033a2633b80117cb4172a0107b33fea8339e96d18dfabd410a4274661d5d8a1856865eb055ebded195371192127306f48efa789441c4f6996606756e1c6c4488c86e0d5afcf2020eef37df49acc3838e1be32f8ff55728237f8a0e366fa79fd6a57b5368322eb296416542a7cb0e9e87a3647fde493a60afd68c87b199ed145cf84a8297c73083953488fc18d2a1f432fbd71f5465b891e91e33ba1585e1c9000bb7e71f92f3d60f53a8afb4d5077d6903af1911627c8a2a34c3001f51d913ca66501ebe7d79c66e70fb4bb9b8e173802208758d4784d64308c275158e6c5faad167a6900d251185411b052757fd9bb7bb48c75705a8bbde48bc1903a585f963be274653970b3bc475c46fe20f3784864ffb641f6f8059b6d8b540f389672abb66948c7b52ebfec8c4652b816d322c861fdb96c41192e3ac431d8a0e1b0abab19131aedbed5e78f3f3d1729fff090814b9f14a56e5ede3805b4aeb294bc7b31399f091f01eb16afc45b507bdf7958e2aaed45556324da12e57a49fe9d17ccfba1338e667fd5d71ba42c14c014e5fbc3ebaeb24923deea0a9a066b46af61c08c1249ee797533f5e79387abd0974a281faee9b336b2a53f4895b474d1fbcac897bbb612bc0e7c518dcaa2e997308dd507e198fa3cf055c1dca289b98a4341dbf21674070b9fb0d176a95ddcaab997a1b7aa10c2168be10b5b3c86a1a6095906b7b438d0d1d7f00aebd7d16d3188f4e4f67aac064d5edb11a62f70c5e5781e738f0448e6d6c57c7660443ad084df0b68be7c631f11dbf766c7f6fb184f0deea3094cff2ce8367782d0ec71af94e7a649be5855b0eaacdc9bc73c5d63cfd97246e0b5ed034f267fdb924f2fb6b566d4a7ff6a220c22feacc02754eca2b150b71bdd4b0fd94ab42111f46656936a25cd8615eb48bdd283cf3e6d7c0b82f587d82d874acc83621844fed8fd18fa0612e79aa24b4442eecee8b62de0346b11cb10489377631f36599ecfa35fe9dff182e5b343ce02b3f64fb5874ef6921d033602d2a48c8ac276b0f88f1525324a47b563850ab0876a4d6728ce6259e5ff3508d628a2722881bc46c8410196c681eef7813096f2a5c9e7f99f93ad3708d3634f19308b5b7c98ee24fa42f8b6e42c60738f5775af8ca0bb4e13e1a6ec6c8b296ba50615d4f6cc20e42d10bad9a64e8ecfe6a91fbed8749d43c134675bae01eaed463d85a1cdbbe95a5f98e324835b83c351baabdf6b2ffa482c1b481ea33fee4bd97f5d69b3eac251bd994c6da7a5b985737f7ddb057c1a64e35bd5253ff7751bd079a02905367ca86a5e7daa933482e6175a78275e71f1c0f77c048cabca8fc28e18d441546343d9e5987b8930af4b8b24f2f280bcb9835a33b1b41ea8e87c084fe054765c6833cb26d02b7a0a5332e831c5be523fd4e5549a03291b9078f9a975ef98549e01e0815c1062ea04b5968031f6d68b265f34618510d7b60a987db9bf19eb4d0461d8644a2d5d5020a003f02521112356b98844e6d7e4826f6e6fa24f826deab697406b1f898a04c91744c10c5db026970d5702f0894c407a4d58e8d69e5d578faa4b8e4eac0c38c8e08aded13cb832a71a19c56b06c853ea68d4a236e0bff4c641f476be8d5f82ef281ff9b498fcc189c5c6b9b7848f4886f7b2a8287dcb7c07edb391e6b34846d5d3de1b658fd1f6d9f0e35843329ada0e630ef42df70f662bae98719b8acc3342613163698e83f74e7762f09a0cec672ce20003a6013e0259066ea46c27170bb1130d4a8f64cb9d342feb0209944d37fdffda0a15b80f8bd6a1ec2a5373004115968ae144183add968cd0c8388af096561581a7c8c46d3aab5cb8d231296fc195fc1a626c02e7ee01fab18deb9823f06d23d606c3c9ae9ce6cc6981d3fbfc16ccb723d2285932f55404fe693a82e37004ff1f1beaaed0d9a854532044f11f13c26844d9186d90032176a3ea21fce4150b2b2fa40f5c9834ca963f140764bcad7f4bdc64f9ac904b9481900858657acc0d1993c400ca6df38eaaa9f3c9715e369614c79952473ba4f0a53175c64d0ef648bfc12459eb309fb1c24a43f126571e36912660afd8d77b9525f6c48ce4a8707231ac0be3c7f837e110c8208ae77a940de667748223dd437f746a5100414d5602262fdec32f8dd1d3b0d85661873ee06c7fe6f2648edf6efcc762e4a65700ac0ca45819fa18598f41da66b560b3142146a1a1a59abb452af42fb7eb83e54718a911056943c179445634c6d85e17132d449f0b08cb811ced70cb210384fc178c8ec66099c1c1aed0f634855b799d6ce7269a7f5111c03af638ddb6d8301ba72aab402204f304bb9465f9dbed177f4c05b60f1b54c52180eeed52da26ebebe62c1befed2be6679647e3d5ecb092e26a43e351daa021b0f00400e6ac9a7d15b2d884effd9d37af9fca4f3b338021d386d7d6d29e9260111dd8bacb88b649ba7a41860a345d416ecc9dbc8a9bb552ec669899912b60a3df8881fca7c97fa51a2f018bbf8e90f14e9fe531320651044888222ae042946e952666c1b6091b89fc624c437a7313e974f40a1c9538fe6e738b430d3e08c2a77d0fa706a3cb00c24d1b400346a447a7d8bd9f3162d323139bf1f92bb75b95ce0f5fad734237d06dab4e102d1eaa21c0db0cf28f5df57577853e2d2319a8a4b2fc9e455cc7fcbde66a33c2fda74247167ffbe553f0afe702a0dd3d27c6a38f07daf2bc8f1787c6863b70ba298c15df1e74bd66bb56d4ae22e802b3e33fc11685185ceb4be23e273275536f43036dc54ff18a99585306f08b9c297541c8c8150bc8b3c041f225557c06e992030676adeff845e86ff9df8f1b0567fa8c636e2d09d1ba611e4d92f31bccb873b22c562b2b10d2162ba69b92f10351c6165258e0d72df38f8a63a7cc9e133fd0e2ec059b809e34d7290cf9fa42e01a99de6adb22ecc1ef892f135ac5e217e3fd74ba49eb899fb4f1b8cfc355e73de128266bbb276b841b3d139bb3d36561f2f31f5a951ec55ce1325e4c999858ac8cba8f13100fafa04909baf2419ccd77324bd27c32a2bd0b8be01fc37d5d71fa8b7a649e4cdc035caaef140adc33cd49b8874e2d30e750801f49f156f0e6dd9968b45a3595e1613a622d32dc5a58ab3975907a43d983d733e8531fd13eb8c49f5c790ac2547f8589e8c2760e2c360c33c7d4b663cdbb1ac65d19ba1ce03dd4c90b9fa11f5a3cce70e7333a4a1fcb7b023183e97a8e5594a0199e370bfd24d686109cc58dcd77dc1b14d2fcd84018a8a4dbd5b513f0909077f842cbbde3c9a024ea16a3807e65ad9d77eea2b2c343b4bd22a1a412c81c91b95fac13cbc8acb149af7c8f9f1becca1221b199814f6970173f6de8b5fbad760b694d6f19ecb81ced831dd461ef03b4ebc3a2e967672294baf9d0350326fa83a3aa669ef2f0af0f58ba3f89da3ed920cdb39284eac33faa8d3b8fc109e6f3b4c1fbdb51e82ef0cfbe42e43eaac2fef6af2e938c28275d922caa96d3045655bc6d2df18a2851d1dde96698a922e78b7f7678451a1c8f2422f86159204c0a6bfe816f3bb326f62ed7e970ee9b59f2d4960c82ec3141e367784583342cb6fe78b08cd7a2890ff842b47db614c2ab90136df18b65807532309929f5539f33521c6966b56d2603c8ccb5d1191c9e7e29fb5844373935f1", @typed={0x4, 0x8d}, @typed={0x8, 0x7, @fd=r0}]}, @generic="ee4b1b7df9a6bfe4786abc61a9e5ca46fc9c294d573414406cc1de55c04195d3da6a9bf3b017e68bcb5cbe6509d9fd6fa2e8c2edafe361aa03af53d73a102513bc722dda79f9b8d3c6f3562efad2c5c879d4be6b614840ab7d8cb562fa7c305178d0fe0f7605bc9352c1b1623fd3c9875bd7e28cdf25c17f091ee639aae31405f50677e8e4cbc51f480f343914dcc5a4970b569809977a011fae73c6f86d280dc7a9708446905ac3789070bf1bcb404355b65674432128c101e1f9dd69c1985fb313b9097ee467a37b290e30589c2e684756"]}, 0x1478}], 0x2, 0x0, 0x0, 0x10}, 0x8880) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0x8001}) r7 = socket(0xa, 0x1, 0x0) dup2(r7, r2) [ 327.411984] XFS (loop3): mtpt option not allowed on this system [ 327.413555] binder: BINDER_SET_CONTEXT_MGR already set 13:58:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 327.455539] binder_alloc: 24406: binder_alloc_buf, no vma [ 327.461195] binder: 24406:24423 transaction failed 29189/-3, size 0-12288 line 2967 [ 327.494477] XFS (loop3): mtpt option not allowed on this system [ 327.565229] binder: 24406:24407 ioctl 40046207 0 returned -16 [ 327.633085] binder: undelivered TRANSACTION_ERROR: 29189 [ 327.639278] binder: undelivered TRANSACTION_ERROR: 29201 13:58:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x444842) getsockname$ax25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:35 executing program 6: r0 = socket(0x11, 0x100000803, 0x7) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d70400800000000") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000060000005007000090050000b0030000a0040000b0030000a0040000800600008006000080060000800600008006000006000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80020010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d5000004d409000000050000002800544f530000000000000000000000000000000000000000000000000000002000000000000000fe80000000000000000000000000001c00000000000000000000000000000001ffffffff000000ffffffffff000000ffffffffffffffff00ffffffffffffff006970365f7674693000000000000000006272696467655f736c6176655f310000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000002f007f04080000000000000000000000000000006802900200000000000000000000000000000000000000000000000068007261746565737400000000000000000000000000000000000000000000006c6f00000000000000000000000000007465716c3000000000000000000000002000030002000000b80000001f0000000300000000000000e19a0000000000000000000000000000380172740000000000000000000000000000000000000000000000000000000072000000000000000000000000000080000100000000000000000000000000000000000000000000000000000000000000000001ff010000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001fe800000000000000000000000000018fe8000000000000000000000000000bbff020000000000000000000000000001fe800000000000000000000000000013ff020000000000000000000000000001fe80000000000000000000000000001600000000000000000000fffffffffffffe80000000000000000000000000000eff010000000000000000000000000001ff0200000000000000000000000000010a0000002800434845434b53554d00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000001fe80000000000000000000000000001200000000ffffffffffffff00ffffff00ffffffffffffff00ffffffffff00000074756e6c30000000000000000000000067726530000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003f00060200000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000002800484c00000000000000000000000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fbffffff000000000000000000000000000000000000000100000000000000000000000000000000ff00000000000000ffffffffffffffffff0000ffffffff00ffffffff00000000726f736530000000000000000000000062637368300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000ff0740000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000002800484c0000000000000000000000000000000000000000000000000000000002060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x7b0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto(r2, &(0x7f0000000100)="de4526c031084dbde17a9fa1299268d57208e95289f7cb956a880682ee765da662116f2625974dbce447969469b0d1254ad2ad66b193e187b0b67362e6873faa0d1ad6649f732616672550f7ea032db7cc1b1f41a542a5691c766fe5cd16bf90da9a8657edb0b1b0c2bdfa9e17f629a75de11d6e2963bdd881d5de86c42ed77d721e7accf34748563902ef1b3dd1de97a9a06c16dbd47bd477024fbe1353b5e5714a9eda83ccd7258e5a3d34cfde61dccec284c26c75812981bb74af6addca37f38349e29d6a7fbaedab78cce2c01754cde1054432d0b5458de2c1b8533f27aedfc09c5fc7c6e350f03150c34c205fb059158edc52728211bf706a41", 0xfc, 0x0, &(0x7f0000000340)=@can={0x1d, r3}, 0x80) r4 = socket(0xa, 0x1, 0x0) dup2(r4, r1) 13:58:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfffffdef, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi\ne0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:35 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000400"}) 13:58:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x44cf]}, 0x10) [ 327.780602] binder: 24481:24483 got transaction with invalid offsets ptr [ 327.794604] XFS (loop3): mtpt option not allowed on this system [ 327.805511] binder: 24481:24483 transaction failed 29201/-14, size 0-12288 line 2995 13:58:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xdba8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x65dbbc42, 0xfffffffffffffe4f) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) ioctl$VT_DISALLOCATE(r2, 0x5608) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 327.835909] XFS (loop3): mtpt option not allowed on this system [ 327.854811] binder_alloc: binder_alloc_mmap_handler: 24481 20002000-20006000 already mapped failed -16 [ 327.887773] binder: BINDER_SET_CONTEXT_MGR already set 13:58:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fiLe0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xbf95]}, 0x10) 13:58:35 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000f00"}) [ 328.001401] binder: 24481:24498 ioctl 40046207 0 returned -16 [ 328.044605] binder_alloc: 24481: binder_alloc_buf, no vma [ 328.050335] binder: 24481:24516 transaction failed 29189/-3, size 0-12288 line 2967 [ 328.081137] XFS (loop3): mtpt option not allowed on this system [ 328.133776] XFS (loop3): mtpt option not allowed on this system [ 328.178676] binder: undelivered TRANSACTION_ERROR: 29189 [ 328.184628] binder: undelivered TRANSACTION_ERROR: 29201 13:58:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet6(0xa, 0x801, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x119d00, 0x0) close(r3) 13:58:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xbec0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:35 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000ffffffc000"}) 13:58:35 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) r2 = socket$inet6(0xa, 0x80001, 0x3) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000100)) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r4 = socket(0xa, 0x1, 0x0) dup2(r4, r1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 13:58:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xcf8f]}, 0x10) 13:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi*e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 328.314240] binder: 24554:24556 got transaction to invalid handle [ 328.320577] binder: 24554:24556 transaction failed 29201/-22, size 0-12288 line 2852 13:58:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x6dd0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 328.356707] XFS (loop3): mtpt option not allowed on this system 13:58:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={r2, 0x0, 0x1, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x20) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x6, 0x1, 0xb93, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x7, r0}) 13:58:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 328.413400] XFS (loop3): mtpt option not allowed on this system [ 328.422751] binder_alloc: binder_alloc_mmap_handler: 24554 20002000-20006000 already mapped failed -16 [ 328.474576] binder: BINDER_SET_CONTEXT_MGR already set [ 328.500380] binder: 24554:24556 ioctl 40046207 0 returned -16 [ 328.512151] binder: 24554:24576 got transaction to invalid handle 13:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi%e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x400000000000000]}, 0x10) [ 328.518566] binder: 24554:24576 transaction failed 29201/-22, size 0-12288 line 2852 [ 328.603502] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.609496] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.676656] XFS (loop3): mtpt option not allowed on this system [ 328.717780] XFS (loop3): mtpt option not allowed on this system 13:58:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:36 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000fffffdfd00"}) 13:58:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x890d000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xa7a0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x37be000000000000]}, 0x10) 13:58:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) accept4$ipx(r2, &(0x7f00000001c0), &(0x7f0000000180)=0x10, 0x800) close(r1) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x100, 0x7, 0x1000, 0x4}) 13:58:36 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1, 0x0) 13:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi+e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 328.843209] XFS (loop3): mtpt option not allowed on this system [ 328.868945] binder: 24619:24620 got transaction with invalid offsets ptr [ 328.905256] binder: 24619:24620 transaction failed 29201/-14, size 0-12288 line 2995 [ 328.914640] XFS (loop3): mtpt option not allowed on this system 13:58:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xd018, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000040)='children\x00') setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x3b, @empty, 0x4e24, 0x1, 'ovf\x00', 0x4, 0x7, 0x39}, {@multicast1=0xe0000001, 0x4e20, 0x3, 0x4, 0x0, 0x3}}, 0x44) close(r1) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000001c0)=0x9, 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 13:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fiue0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 328.959462] binder_alloc: binder_alloc_mmap_handler: 24619 20002000-20006000 already mapped failed -16 [ 329.011257] binder: BINDER_SET_CONTEXT_MGR already set 13:58:36 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1, 0x0) 13:58:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:36 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00Y\x00'}) [ 329.033411] binder_alloc: 24619: binder_alloc_buf, no vma [ 329.039196] binder: 24619:24650 transaction failed 29189/-3, size 0-12288 line 2967 [ 329.050594] binder: 24619:24620 ioctl 40046207 0 returned -16 [ 329.070569] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 329.089759] XFS (loop3): mtpt option not allowed on this system [ 329.106829] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 13:58:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc7c9000000000000]}, 0x10) [ 329.154763] XFS (loop3): mtpt option not allowed on this system [ 329.197420] binder: undelivered TRANSACTION_ERROR: 29189 [ 329.209677] binder: undelivered TRANSACTION_ERROR: 29201 13:58:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000001c0)) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000200)=0x7fff, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x9, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000400)={r3, 0x174}) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x4) 13:58:36 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1, 0x0) 13:58:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x2e38, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi.e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x6fb8]}, 0x10) 13:58:36 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00@\x00'}) 13:58:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x8ab8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 329.376389] binder: 24693:24694 got transaction to invalid handle [ 329.382734] binder: 24693:24694 transaction failed 29201/-22, size 0-12288 line 2852 [ 329.409686] XFS (loop3): mtpt option not allowed on this system 13:58:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:36 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x5, 0x2, @dev={0xfe, 0x80, [], 0x15}, 0xbb0}}}, 0x84) close(r1) [ 329.479347] binder_alloc: binder_alloc_mmap_handler: 24693 20002000-20006000 already mapped failed -16 [ 329.501415] XFS (loop3): mtpt option not allowed on this system 13:58:36 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000001100"}) 13:58:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fi-e0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 329.582645] binder: BINDER_SET_CONTEXT_MGR already set [ 329.582665] binder: 24693:24712 got transaction to invalid handle [ 329.594302] binder: 24693:24712 transaction failed 29201/-22, size 0-12288 line 2852 13:58:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc710]}, 0x10) 13:58:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xb8f8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:37 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) 13:58:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1, 0x800000020000811, &(0x7f0000000140)={0x2, 0xfffffffffffffffd}, 0xfffffdbf) close(r1) [ 329.692895] XFS (loop3): mtpt option not allowed on this system [ 329.743764] binder: 24693:24694 ioctl 40046207 0 returned -16 [ 329.811402] XFS (loop3): mtpt option not allowed on this system [ 329.857096] binder: undelivered TRANSACTION_ERROR: 29201 [ 329.867686] binder: undelivered TRANSACTION_ERROR: 29201 13:58:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:37 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00?\x00'}) 13:58:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:37 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) 13:58:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x2870, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r2 = dup3(r1, r1, 0x80000) openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x101) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fil\n0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xdb1f]}, 0x10) [ 329.984967] binder: 24778:24779 got transaction to invalid handle [ 329.991316] binder: 24778:24779 transaction failed 29201/-22, size 0-12288 line 2852 13:58:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x1150, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x5, 0x200000009) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socketpair(0x10, 0x0, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x15, "b5f006b596e65beb4a49900e1f08fb49aa8fcb6f6e"}, &(0x7f0000000340)=0x1d) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x3f, "5b3f7b0d9fb4a7a08f7dcf829f7174c113cf4f0ea6c5bdf8d98acfa248862cb4253f37220511c7e79c6b05b9550ebab873539818722403b182d92c954c3143"}, &(0x7f0000000440)=0x47) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r4, 0x500000}, &(0x7f0000000480)=0xfffffe96) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0xc66, 0x5ff9}, &(0x7f00000002c0)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x28, &(0x7f0000000140)}, 0x10) close(r2) 13:58:37 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) [ 330.043045] XFS (loop3): mtpt option not allowed on this system [ 330.067251] XFS (loop3): mtpt option not allowed on this system 13:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fil%0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 330.115477] binder: BINDER_SET_CONTEXT_MGR already set [ 330.147741] binder_alloc: binder_alloc_mmap_handler: 24778 20002000-20006000 already mapped failed -16 [ 330.149052] binder: 24778:24800 got transaction to invalid handle [ 330.163651] binder: 24778:24800 transaction failed 29201/-22, size 0-12288 line 2852 13:58:37 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000fffffdfd00"}) 13:58:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xff0a0000]}, 0x10) [ 330.241511] XFS (loop3): mtpt option not allowed on this system 13:58:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xb88, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:37 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) [ 330.307686] binder: 24778:24779 ioctl 40046207 0 returned -16 [ 330.309645] XFS (loop3): mtpt option not allowed on this system [ 330.439767] binder: undelivered TRANSACTION_ERROR: 29201 [ 330.445358] binder: undelivered TRANSACTION_ERROR: 29201 13:58:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x8000) ioctl$KDDELIO(r2, 0x4b35, 0xb0) fcntl$setsig(r3, 0xa, 0x37) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r1) 13:58:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x39c8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./fileC\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x900]}, 0x10) 13:58:37 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:37 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000fffffffe00"}) 13:58:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 330.571419] XFS (loop3): mtpt option not allowed on this system 13:58:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xca50, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r2 = accept4$ipx(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e000400000025f6099420bb39c0aacf50c7c4f3e40214fdc6fbd2376a47fec372013959c144cc11b3e99ac4c0ac9ecbd800f23eb93d42f6b6457c5eba8e4900ecdb9d2becac3976328a149f09793649aa0dc29b79eeccc0185a1c2ab9e6c25f914ca31bc16213a20c1880cba940ba8cf0bf5eb8a1e2dc631a8a47c4d4f3472ace14d910d636d07f036e71d464f918ea1fc5"], &(0x7f0000000040)=0x96) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x81}, &(0x7f0000000240)=0x8) close(r1) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000380)={0x1, 0x5, 0x5946}, 0x10) connect$l2tp(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21}, 0x4, 0x1, 0x0, 0x2}}, 0x26) 13:58:38 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) [ 330.640485] XFS (loop3): mtpt option not allowed on this system 13:58:38 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000000000200"}) 13:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file#\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 330.737616] binder: 24860:24885 got transaction to invalid handle [ 330.743953] binder: 24860:24885 transaction failed 29201/-22, size 0-12288 line 2852 [ 330.811575] binder_alloc: binder_alloc_mmap_handler: 24860 20002000-20006000 already mapped failed -16 [ 330.862471] XFS (loop3): mtpt option not allowed on this system [ 330.881421] binder: BINDER_SET_CONTEXT_MGR already set [ 330.901224] XFS (loop3): mtpt option not allowed on this system [ 330.907833] binder: 24860:24899 got transaction to invalid handle [ 330.914214] binder: 24860:24899 transaction failed 29201/-22, size 0-12288 line 2852 [ 330.916398] binder: 24860:24885 ioctl 40046207 0 returned -16 13:58:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:38 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r6, 0x8, 0x1, r7}) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x5f50]}, 0x10) 13:58:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x1, 0x4f7fffffc) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x80}, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000180)="b1b8a22a8c37839ffcdb12d2bede95a43237d42e0c929eecb1f180d96d515c19833af8ac39935b5a3b620e51c316d410f825a7c3a663130c683c3ea2fb11bd0d9c", 0x41) 13:58:38 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000100"}) 13:58:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xa1d8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file%\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 330.978544] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.010228] binder: undelivered TRANSACTION_ERROR: 29201 13:58:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, {0x0, 0x3, 0x470b, 0x3, 0x400}}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x2fb) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) [ 331.050415] binder: 24931:24933 got transaction to invalid handle [ 331.056787] binder: 24931:24933 transaction failed 29201/-22, size 0-12288 line 2852 [ 331.066741] XFS (loop3): mtpt option not allowed on this system 13:58:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:38 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x22a8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file+\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 331.119127] XFS (loop3): mtpt option not allowed on this system [ 331.151013] binder_alloc: binder_alloc_mmap_handler: 24931 20002000-20006000 already mapped failed -16 13:58:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x3ff2]}, 0x10) 13:58:38 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230001100"}) [ 331.218510] binder: BINDER_SET_CONTEXT_MGR already set [ 331.218517] binder: 24931:24947 got transaction to invalid handle [ 331.218538] binder: 24931:24947 transaction failed 29201/-22, size 0-12288 line 2852 13:58:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 331.261701] XFS (loop3): mtpt option not allowed on this system [ 331.285128] binder: 24931:24933 ioctl 40046207 0 returned -16 13:58:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 331.331221] XFS (loop3): mtpt option not allowed on this system 13:58:38 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x408000, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)='}\x00', 0xfffffffffffffffd) keyctl$invalidate(0x15, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x101, 0x40, 0x2, 'queue1\x00'}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/111, &(0x7f0000000040)=0x6f) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001300)=@filter={'filter\x00', 0xe, 0x3, 0xe48, [0x0, 0x20000480, 0x20000f60, 0x20000f90], 0x0, &(0x7f0000000440), &(0x7f00000013c0)=ANY=[@ANYBLOB="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"]}, 0xfb6) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000380)=""/73, &(0x7f0000000400)=0x49) r4 = getpgid(0x0) r5 = memfd_create(&(0x7f00000005c0)="73656c696e7578401c00", 0x2) perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0xc2, 0x4, 0x100000000, 0x56, 0x0, 0xfa4c, 0x2, 0xd, 0x0, 0x7, 0x4, 0xff, 0x0, 0x7, 0x55, 0x6, 0x3, 0x2, 0x1, 0x1, 0x7, 0x4, 0x9, 0x2, 0x6, 0x5, 0xff, 0x20, 0x100, 0xe4, 0x7, 0x5, 0x2, 0x80000000, 0x7, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x2, @perf_bp={&(0x7f0000000500), 0xf}, 0x10, 0x3, 0xfffffffffffffff8, 0x7, 0xfffffffffffffffb, 0xd8, 0x9}, r4, 0x2, r5, 0x1) 13:58:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x9648, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file-\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:38 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000300"}) 13:58:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x700000000000000]}, 0x10) 13:58:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 331.471904] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.486999] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.556208] XFS (loop3): mtpt option not allowed on this system [ 331.566129] IPVS: length: 111 != 24 [ 331.581105] kernel msg: ebtables bug: please report to author: Wrong len argument [ 331.593971] binder: 25006:25007 got transaction to invalid handle [ 331.600331] binder: 25006:25007 transaction failed 29201/-22, size 0-12288 line 2852 13:58:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x50e8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 331.629285] XFS (loop3): mtpt option not allowed on this system [ 331.649396] binder_alloc: binder_alloc_mmap_handler: 25006 20002000-20006000 already mapped failed -16 [ 331.667583] IPVS: length: 111 != 24 13:58:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:39 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x200, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) [ 331.672847] kernel msg: ebtables bug: please report to author: Wrong len argument 13:58:39 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000200"}) 13:58:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x4000000]}, 0x10) [ 331.732059] binder: 25006:25018 got transaction to invalid handle [ 331.732960] binder: BINDER_SET_CONTEXT_MGR already set [ 331.738373] binder: 25006:25018 transaction failed 29201/-22, size 0-12288 line 2852 13:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 331.896008] XFS (loop3): mtpt option not allowed on this system [ 331.898131] binder: 25006:25007 ioctl 40046207 0 returned -16 [ 331.929842] XFS (loop3): mtpt option not allowed on this system [ 331.955614] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.961566] binder: undelivered TRANSACTION_ERROR: 29201 13:58:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:39 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:39 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00Y\x00'}) 13:58:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000040)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0xfffffffffffffffc, @local={0xac, 0x14, 0x14, 0xaa}}, 0x3aa) close(r1) 13:58:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x3f90, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x8f16]}, 0x10) 13:58:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530f6", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 332.072349] binder: 25067:25068 got transaction to invalid handle [ 332.075672] XFS (loop3): mtpt option not allowed on this system [ 332.078692] binder: 25067:25068 transaction failed 29201/-22, size 0-12288 line 2852 13:58:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x4b20, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:39 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) [ 332.127104] binder_alloc: binder_alloc_mmap_handler: 25067 20002000-20006000 already mapped failed -16 13:58:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:39 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00Y\x00'}) [ 332.167800] binder: BINDER_SET_CONTEXT_MGR already set [ 332.181286] binder: 25067:25068 ioctl 40046207 0 returned -16 [ 332.210548] XFS (loop3): mtpt option not allowed on this system [ 332.223219] binder: 25067:25083 got transaction to invalid handle [ 332.229588] binder: 25067:25083 transaction failed 29201/-22, size 0-12288 line 2852 13:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530fd", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xf23f]}, 0x10) [ 332.367130] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.373156] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.413751] XFS (loop3): mtpt option not allowed on this system 13:58:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0xfffffffeffffffff, 0x8000, 0x0, 0x0, 0x0, [], [], [], 0x5, 0x6}) sendto$inet(r2, &(0x7f0000000340)="781bc99ef60e11119ef52ba2740a9ea3bb6362204b8fe4e9f0e333e544f53f00eb650939955197fa91aebfd958387c7a8bc6138f5e00ef17c8cb13f0bf440821edbe2d9a38293a28fedb93768b712bd839ff9d3358b74210d89657bf6e82670abc88795c91c477ed44c8ad0bc331c8", 0x6f, 0x10, &(0x7f00000003c0)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f00000002c0)=0x40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0)=0x41, 0xffffffffffffff4a) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000400)={0x9, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) 13:58:39 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:39 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000000000f00"}) 13:58:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x5c0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 332.474151] XFS (loop3): mtpt option not allowed on this system 13:58:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc805000000000000]}, 0x10) 13:58:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(0xffffffffffffffff) [ 332.577248] binder: 25141:25142 got transaction with invalid offsets ptr [ 332.612154] XFS (loop3): mtpt option not allowed on this system [ 332.613530] binder: 25141:25142 transaction failed 29201/-14, size 0-12288 line 2995 13:58:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x56b0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:40 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000300)="84c4bb332acafeab24f1317400382b5ad5d08c9743a83d884441eaedac670c653df80d1ac169cff80301528db57701f92562bf9639e1bdf1f4475a1babd09ce3fb15906bc487eaa3c186caf81baefb52a6a6da4e5eb464791cc17974e2da116a30578d02f843cc93ea95321ce7076dccb0a46a1c7b6e5c6e74ceeba551751b65ce", 0x81, 0x8000, &(0x7f00000003c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x1, 0x0, 0x9, 0x8001, 0x48}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={r3, 0xffff}, &(0x7f0000000240)=0x8) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x400, 0x4) 13:58:40 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000ffffffc300"}) [ 332.682292] binder_alloc: binder_alloc_mmap_handler: 25141 20002000-20006000 already mapped failed -16 [ 332.688719] XFS (loop3): mtpt option not allowed on this system 13:58:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x7733]}, 0x10) [ 332.771411] binder: BINDER_SET_CONTEXT_MGR already set [ 332.776874] binder_alloc: 25141: binder_alloc_buf, no vma [ 332.782564] binder: 25141:25154 transaction failed 29189/-3, size 0-12288 line 2967 13:58:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x7f28, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/147) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 332.817058] binder: 25141:25142 ioctl 40046207 0 returned -16 13:58:40 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xbe37]}, 0x10) 13:58:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:40 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000ffffffc000"}) [ 332.973325] binder: undelivered TRANSACTION_ERROR: 29189 [ 332.979502] binder: undelivered TRANSACTION_ERROR: 29201 13:58:40 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000040), 0xb4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x6) close(r1) 13:58:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x5c78, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 333.048643] binder: 25193:25194 got transaction with invalid offsets ptr [ 333.057655] XFS (loop3): mtpt option not allowed on this system [ 333.109221] binder: 25193:25194 transaction failed 29201/-14, size 0-12288 line 2995 [ 333.134463] XFS (loop3): mtpt option not allowed on this system 13:58:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530c0", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:40 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x2}) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x80, 0x4) [ 333.159969] binder_alloc: binder_alloc_mmap_handler: 25193 20002000-20006000 already mapped failed -16 [ 333.194036] binder: BINDER_SET_CONTEXT_MGR already set 13:58:40 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000fdfdffff00"}) 13:58:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xe738, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x9b87]}, 0x10) [ 333.231368] binder: 25193:25194 ioctl 40046207 0 returned -16 [ 333.277259] binder_alloc: 25193: binder_alloc_buf, no vma [ 333.282995] binder: 25193:25219 transaction failed 29189/-3, size 0-12288 line 2967 [ 333.293731] XFS (loop3): mtpt option not allowed on this system 13:58:40 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(0xffffffffffffffff) 13:58:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4c662f87337b6c32, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) setsockopt$sock_int(r1, 0x1, 0x30, &(0x7f0000000200)=0x8, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000180)=0x66a3, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 333.345442] XFS (loop3): mtpt option not allowed on this system 13:58:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:40 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) [ 333.420793] binder: undelivered TRANSACTION_ERROR: 29189 [ 333.426733] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.490255] XFS (loop3): mtpt option not allowed on this system [ 333.492486] binder: 25258:25261 got transaction with invalid offsets ptr [ 333.577456] XFS (loop3): mtpt option not allowed on this system [ 333.580140] binder: 25258:25261 transaction failed 29201/-14, size 0-12288 line 2995 [ 333.611086] binder_alloc: binder_alloc_mmap_handler: 25258 20002000-20006000 already mapped failed -16 13:58:41 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x7398, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:41 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 13:58:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x4fa10000]}, 0x10) 13:58:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x10000}, 0xfffffffffffffd7c) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:41 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 333.632347] binder: BINDER_SET_CONTEXT_MGR already set [ 333.643522] binder: 25258:25261 ioctl 40046207 0 returned -16 [ 333.646765] binder_alloc: 25258: binder_alloc_buf, no vma [ 333.655114] binder: 25258:25272 transaction failed 29189/-3, size 0-12288 line 2967 [ 333.676902] binder: undelivered TRANSACTION_ERROR: 29189 [ 333.705124] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.716505] XFS (loop3): mtpt option not allowed on this system [ 333.745057] binder: 25293:25294 got transaction to invalid handle 13:58:41 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 333.751404] binder: 25293:25294 transaction failed 29201/-22, size 0-12288 line 2852 13:58:41 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r1, r2, r3}, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r4) 13:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\t', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 333.795091] binder_alloc: binder_alloc_mmap_handler: 25293 20002000-20006000 already mapped failed -16 [ 333.825259] binder: BINDER_SET_CONTEXT_MGR already set 13:58:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xdfac]}, 0x10) 13:58:41 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000f00"}) 13:58:41 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x6808, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 333.862599] binder: 25293:25294 ioctl 40046207 0 returned -16 13:58:41 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x200400) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0xc0442) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000180)={0x0, r2}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000002c0)={0x401, 0xffffffff00000001, 0x81, 0xfff, [], [], [], 0x200, 0xff, 0x4, 0x8, "10e8bc2e35b7cabf26268d294e7fb540"}) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:41 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fstat(r0, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 333.937169] XFS (loop3): mtpt option not allowed on this system [ 333.947441] binder: 25293:25321 got transaction to invalid handle [ 333.954227] binder: 25293:25321 transaction failed 29201/-22, size 0-12288 line 2852 13:58:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x168f]}, 0x10) [ 334.011119] XFS (loop3): mtpt option not allowed on this system 13:58:41 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x3400, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 334.086372] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.098675] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.155321] binder: 25344:25345 got transaction to invalid handle [ 334.161664] binder: 25344:25345 transaction failed 29201/-22, size 0-12288 line 2852 [ 334.199082] binder_alloc: binder_alloc_mmap_handler: 25344 20002000-20006000 already mapped failed -16 [ 334.215895] binder: BINDER_SET_CONTEXT_MGR already set [ 334.225387] binder: 25344:25351 got transaction to invalid handle [ 334.227139] binder: 25344:25345 ioctl 40046207 0 returned -16 [ 334.231694] binder: 25344:25351 transaction failed 29201/-22, size 0-12288 line 2852 13:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\n', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000400)={0xba, 0x6}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x440000, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000002c0)={0x99, {{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x0, 0x1, [{{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x110) close(0xffffffffffffffff) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req={0x10000, 0xc9, 0xfffffffffffffffd, 0x3}, 0x10) 13:58:41 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00@\x00'}) 13:58:41 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:41 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xc488, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xef5b000000000000]}, 0x10) 13:58:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 334.261207] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.266763] binder: undelivered TRANSACTION_ERROR: 29201 13:58:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 334.325182] binder: 25363:25365 got transaction to invalid handle [ 334.325828] XFS (loop3): mtpt option not allowed on this system [ 334.331531] binder: 25363:25365 transaction failed 29201/-22, size 0-12288 line 2852 13:58:41 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:41 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xf890, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:41 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000300"}) [ 334.416182] binder_alloc: binder_alloc_mmap_handler: 25363 20002000-20006000 already mapped failed -16 [ 334.447236] binder: BINDER_SET_CONTEXT_MGR already set [ 334.458594] XFS (loop3): mtpt option not allowed on this system [ 334.485212] binder: 25363:25365 ioctl 40046207 0 returned -16 [ 334.525803] binder: 25363:25380 got transaction to invalid handle [ 334.532175] binder: 25363:25380 transaction failed 29201/-22, size 0-12288 line 2852 13:58:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000002040)={0x21, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x3, 'nq\x00', 0x8, 0x9585, 0x56}, 0x2c) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000580)=""/247, 0xf7}], 0x5, &(0x7f0000000040)=""/63, 0x3f, 0x4}, 0x8001}, {{&(0x7f0000000700)=@xdp={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0xffffffff}, 0xe953}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000940)=""/250, 0xfa}], 0x3, 0x0, 0x0, 0x81}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/179, 0xb3}, {&(0x7f0000001b40)=""/232, 0xe8}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/99, 0x63}, {&(0x7f0000001d00)=""/39, 0x27}, {&(0x7f0000001d40)=""/112, 0x70}], 0x7, &(0x7f0000001e40)=""/151, 0x97, 0x1}, 0x3}], 0x4, 0x10120, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000002000)=0x20002, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c65308c", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x17a70000]}, 0x10) 13:58:42 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xf2c8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:42 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00Y\x00'}) 13:58:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 334.626207] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.633499] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.691185] binder: 25406:25409 got transaction with invalid offsets ptr [ 334.701158] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 334.716480] XFS (loop3): mtpt option not allowed on this system 13:58:42 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r0) 13:58:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x20772dc6, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 334.736306] binder: 25406:25409 transaction failed 29201/-14, size 0-12288 line 2995 [ 334.746632] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 334.761203] binder_alloc: binder_alloc_mmap_handler: 25406 20002000-20006000 already mapped failed -16 [ 334.782861] XFS (loop3): mtpt option not allowed on this system 13:58:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x80ffffff]}, 0x10) 13:58:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x890e, &(0x7f0000000280)="025cc83d6d345f8e760070") getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xa1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="020004000400ad00730001f3007ea7585e0313805584f3e37c3dc358251adb75e48cd7f8fc8be4f0a99dd8b9a2f2e9ce0377e6802a630909171d241dd49e745452c7741883502763666a22c3cd09389b13dfec58f39bddf0b2b95d920c62fb4e9e18a85e624e8e282c9c3310769f72a060834b8edb5d2ded830636e043174b46f33b785536a377d93969e7b83dd72722fd28583b641f9574d92d56f0"], 0x10) fcntl$setstatus(r0, 0x4, 0x42000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xffffffffffffffe2) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) [ 334.801985] binder_alloc: 25406: binder_alloc_buf, no vma [ 334.807655] binder: 25406:25426 transaction failed 29189/-3, size 0-12288 line 2967 [ 334.807685] binder: BINDER_SET_CONTEXT_MGR already set 13:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:42 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 13:58:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x1718, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:42 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r0) [ 334.955868] XFS (loop3): mtpt option not allowed on this system 13:58:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x6, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) ppoll(&(0x7f0000000180)=[{r0, 0x2}, {r1, 0x200}, {r1, 0x80}], 0x3, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={0x101}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x4, 0x4, 0x2, 0x6, '\x00', 0x80000000}) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 334.997674] XFS (loop3): mtpt option not allowed on this system 13:58:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xaf2d]}, 0x10) 13:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0m', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x84f0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 335.038952] binder: 25406:25409 ioctl 40046207 0 returned -16 [ 335.167330] binder: undelivered TRANSACTION_ERROR: 29189 [ 335.173435] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.180723] XFS (loop3): mtpt option not allowed on this system 13:58:42 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000ffffffc000"}) 13:58:42 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r0) 13:58:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 335.234910] XFS (loop3): mtpt option not allowed on this system 13:58:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xed00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fdatasync(r1) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0xfffffffffffffec6, "1885ee0c2bd59eb30e236db7d4536d0bdcace41466a0dd01cdd26fd8f6ddde5f98262673bf46edf66df49d90a423150f63de62b87185f3fb8c91660cb64a91e3d29fabe84088906a4dab6421ff4fcc0ce108c5d9e7daa0ef83588102639e88ed6208bc2c1a4f85e6509a9472d031cdc4fe42280d81e238fd22661357f2d8edee30d9d948d6b16ace547486c06079ed78d04d67858bba25000000000000000000"}, &(0x7f0000000240)=0x1bd) close(r1) 13:58:42 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xf73000000000000]}, 0x10) 13:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c653097", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 335.338302] FAULT_INJECTION: forcing a failure. [ 335.338302] name failslab, interval 1, probability 0, space 0, times 0 [ 335.339558] binder: 25496:25497 got transaction with invalid offsets ptr [ 335.349960] CPU: 1 PID: 25495 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 335.363732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.373090] Call Trace: [ 335.375690] dump_stack+0x1b9/0x294 [ 335.379326] ? dump_stack_print_info.cold.2+0x52/0x52 13:58:42 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 335.384384] binder: 25496:25497 transaction failed 29201/-14, size 0-12288 line 2995 [ 335.384522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.397915] ? fib_table_lookup+0xa4b/0x2480 [ 335.402338] should_fail.cold.4+0xa/0x1a [ 335.406408] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.406698] binder_alloc: binder_alloc_mmap_handler: 25496 20002000-20006000 already mapped failed -16 [ 335.411510] ? fib_insert_alias+0x11d0/0x11d0 [ 335.411534] ? graph_lock+0x170/0x170 [ 335.411549] ? graph_lock+0x170/0x170 [ 335.411564] ? find_held_lock+0x36/0x1c0 [ 335.411586] ? __lock_is_held+0xb5/0x140 [ 335.411608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 335.443129] binder: BINDER_SET_CONTEXT_MGR already set [ 335.446696] ? find_exception+0x515/0xc30 [ 335.446722] __should_failslab+0x124/0x180 [ 335.446739] should_failslab+0x9/0x14 [ 335.446753] kmem_cache_alloc+0x47/0x760 [ 335.446771] ? find_held_lock+0x36/0x1c0 [ 335.446791] dst_alloc+0xbb/0x1d0 [ 335.464850] binder_alloc: 25496: binder_alloc_buf, no vma [ 335.466279] rt_dst_alloc+0xfa/0x500 [ 335.466296] ? fnhe_flush_routes+0x460/0x460 [ 335.466315] ? __lock_is_held+0xb5/0x140 [ 335.466342] ip_route_output_key_hash_rcu+0xa45/0x3380 [ 335.466364] ? ip_route_input_noref+0x250/0x250 [ 335.466381] ? __lock_acquire+0x7f5/0x5140 [ 335.466395] ? lock_downgrade+0x8e0/0x8e0 [ 335.466412] ? lock_acquire+0x1dc/0x520 [ 335.470516] binder: 25496:25510 transaction failed 29189/-3, size 0-12288 line 2967 [ 335.474499] ? ip_route_output_key_hash+0x1a3/0x390 [ 335.474522] ? kasan_check_read+0x11/0x20 [ 335.474537] ? rcu_is_watching+0x85/0x140 [ 335.474555] ? rcu_report_qs_rnp+0x790/0x790 [ 335.478966] binder: 25496:25508 ioctl 40046207 0 returned -16 [ 335.483516] ip_route_output_key_hash+0x23a/0x390 [ 335.483535] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 335.483555] ? rcu_is_watching+0x85/0x140 [ 335.483573] ? rcu_report_qs_rnp+0x790/0x790 [ 335.483592] ip_route_output_flow+0x28/0xc0 [ 335.483611] ip_send_unicast_reply+0x97f/0x1800 [ 335.483634] ? ip_make_skb+0x340/0x340 [ 335.483652] ? graph_lock+0x170/0x170 [ 335.584733] ? lock_acquire+0x1dc/0x520 [ 335.588699] ? __lock_is_held+0xb5/0x140 [ 335.592749] tcp_v4_send_reset+0x1253/0x28f0 [ 335.597157] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 335.602346] ? tcp_v4_syn_recv_sock+0x1240/0x1240 [ 335.607187] ? tcp_finish_connect+0x400/0x400 [ 335.611669] ? find_held_lock+0x36/0x1c0 [ 335.615727] ? mark_held_locks+0xc9/0x160 [ 335.619862] ? kasan_check_read+0x11/0x20 [ 335.624003] ? __local_bh_enable_ip+0x161/0x230 [ 335.628666] tcp_v4_do_rcv+0x71e/0x850 [ 335.632538] ? tcp_v4_do_rcv+0x71e/0x850 [ 335.636595] __release_sock+0x12f/0x3a0 [ 335.640567] release_sock+0xa4/0x2b0 [ 335.644263] ? __local_bh_enable_ip+0x161/0x230 [ 335.648917] ? __release_sock+0x3a0/0x3a0 [ 335.653057] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 335.658063] ? tcp_close+0x707/0x12b0 [ 335.661847] ? trace_hardirqs_on+0xd/0x10 [ 335.665978] ? __local_bh_enable_ip+0x161/0x230 [ 335.670642] tcp_close+0x70f/0x12b0 [ 335.674272] ? locks_remove_file+0x3f7/0x5a0 [ 335.678674] ? tcp_check_oom+0x520/0x520 [ 335.682733] ? ip_mc_drop_socket+0x20f/0x270 [ 335.687139] inet_release+0x104/0x1f0 [ 335.690947] sock_release+0x96/0x1b0 [ 335.694661] ? sock_alloc_file+0x4e0/0x4e0 [ 335.698875] sock_close+0x16/0x20 [ 335.702308] __fput+0x353/0x890 [ 335.705575] ? fput+0x1a0/0x1a0 [ 335.708839] ? _raw_spin_unlock_irq+0x27/0x70 [ 335.713322] ____fput+0x15/0x20 [ 335.716590] task_work_run+0x1e4/0x290 [ 335.720474] ? task_work_cancel+0x240/0x240 [ 335.724799] ? exit_to_usermode_loop+0x87/0x310 [ 335.729477] exit_to_usermode_loop+0x2bd/0x310 [ 335.734068] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 335.738922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.744461] do_syscall_64+0x6ac/0x800 [ 335.748344] ? finish_task_switch+0x1ca/0x840 [ 335.752842] ? syscall_return_slowpath+0x5c0/0x5c0 [ 335.757757] ? syscall_return_slowpath+0x30f/0x5c0 [ 335.762683] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 335.768054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.772888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.778070] RIP: 0033:0x4559f9 [ 335.781240] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.800470] RSP: 002b:00007f2990790c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 335.808626] RAX: 0000000000000000 RBX: 00007f29907916d4 RCX: 00000000004559f9 [ 335.815893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 335.823156] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 335.830426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 335.837694] R13: 00000000004e9b92 R14: 00000000004c7fc0 R15: 0000000000000000 13:58:43 executing program 2 (fault-call:5 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 335.864996] XFS (loop3): mtpt option not allowed on this system 13:58:43 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x4558, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 335.911236] XFS (loop3): mtpt option not allowed on this system [ 335.932827] binder: undelivered TRANSACTION_ERROR: 29189 [ 335.938815] binder: undelivered TRANSACTION_ERROR: 29201 13:58:43 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000400"}) [ 336.009640] FAULT_INJECTION: forcing a failure. [ 336.009640] name failslab, interval 1, probability 0, space 0, times 0 [ 336.020915] CPU: 0 PID: 25532 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 336.026501] binder: 25534:25537 got transaction to invalid handle [ 336.027857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.027864] Call Trace: [ 336.027887] dump_stack+0x1b9/0x294 [ 336.027909] ? dump_stack_print_info.cold.2+0x52/0x52 [ 336.027930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.034176] binder: 25534:25537 transaction failed 29201/-22, size 0-12288 line 2852 [ 336.043496] ? fib_table_lookup+0xa4b/0x2480 [ 336.043521] should_fail.cold.4+0xa/0x1a [ 336.043540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.081811] ? fib_insert_alias+0x11d0/0x11d0 [ 336.086329] ? graph_lock+0x170/0x170 [ 336.090143] ? graph_lock+0x170/0x170 [ 336.093950] ? find_held_lock+0x36/0x1c0 [ 336.098026] ? __lock_is_held+0xb5/0x140 [ 336.102107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.107656] ? find_exception+0x515/0xc30 [ 336.111811] __should_failslab+0x124/0x180 [ 336.116051] should_failslab+0x9/0x14 [ 336.119858] kmem_cache_alloc+0x47/0x760 [ 336.123279] binder_alloc: binder_alloc_mmap_handler: 25534 20002000-20006000 already mapped failed -16 [ 336.123919] ? find_held_lock+0x36/0x1c0 [ 336.123939] dst_alloc+0xbb/0x1d0 [ 336.123958] rt_dst_alloc+0xfa/0x500 [ 336.144626] ? fnhe_flush_routes+0x460/0x460 [ 336.148176] binder: BINDER_SET_CONTEXT_MGR already set [ 336.149038] ? __lock_is_held+0xb5/0x140 13:58:43 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) poll(&(0x7f0000000140)=[{r0, 0x8e}, {r1, 0x8000}, {r0, 0x2048}], 0x3, 0x5) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) 13:58:43 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0x6240, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 336.149066] ip_route_output_key_hash_rcu+0xa45/0x3380 [ 336.149089] ? ip_route_input_noref+0x250/0x250 [ 336.149104] ? __lock_acquire+0x7f5/0x5140 [ 336.149122] ? lock_downgrade+0x8e0/0x8e0 [ 336.155969] binder: 25534:25547 got transaction to invalid handle [ 336.158432] ? lock_acquire+0x1dc/0x520 [ 336.158450] ? ip_route_output_key_hash+0x1a3/0x390 [ 336.158473] ? kasan_check_read+0x11/0x20 [ 336.158491] ? rcu_is_watching+0x85/0x140 [ 336.158508] ? rcu_report_qs_rnp+0x790/0x790 [ 336.158529] ip_route_output_key_hash+0x23a/0x390 [ 336.163810] binder: 25534:25547 transaction failed 29201/-22, size 0-12288 line 2852 [ 336.168438] ? ip_route_output_key_hash_rcu+0x3380/0x3380 [ 336.168459] ? rcu_is_watching+0x85/0x140 [ 336.181777] binder: 25534:25546 ioctl 40046207 0 returned -16 [ 336.183015] ? rcu_report_qs_rnp+0x790/0x790 [ 336.183037] ip_route_output_flow+0x28/0xc0 [ 336.183057] ip_send_unicast_reply+0x97f/0x1800 [ 336.183083] ? ip_make_skb+0x340/0x340 [ 336.183103] ? graph_lock+0x170/0x170 [ 336.183121] ? lock_acquire+0x1dc/0x520 [ 336.257932] ? __lock_is_held+0xb5/0x140 [ 336.262013] tcp_v4_send_reset+0x1253/0x28f0 [ 336.266434] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 336.271641] ? tcp_v4_syn_recv_sock+0x1240/0x1240 [ 336.276496] ? tcp_finish_connect+0x400/0x400 [ 336.281003] ? find_held_lock+0x36/0x1c0 [ 336.285086] ? mark_held_locks+0xc9/0x160 [ 336.289240] ? kasan_check_read+0x11/0x20 [ 336.293392] ? __local_bh_enable_ip+0x161/0x230 [ 336.298066] tcp_v4_do_rcv+0x71e/0x850 [ 336.301954] ? tcp_v4_do_rcv+0x71e/0x850 [ 336.306022] __release_sock+0x12f/0x3a0 13:58:43 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 336.310012] release_sock+0xa4/0x2b0 [ 336.313732] ? __local_bh_enable_ip+0x161/0x230 [ 336.318404] ? __release_sock+0x3a0/0x3a0 [ 336.322566] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 336.327588] ? tcp_close+0x707/0x12b0 [ 336.331395] ? trace_hardirqs_on+0xd/0x10 [ 336.335550] ? __local_bh_enable_ip+0x161/0x230 [ 336.340227] tcp_close+0x70f/0x12b0 [ 336.343863] ? locks_remove_file+0x3f7/0x5a0 [ 336.348282] ? tcp_check_oom+0x520/0x520 [ 336.352348] ? ip_mc_drop_socket+0x20f/0x270 [ 336.356762] inet_release+0x104/0x1f0 [ 336.360574] sock_release+0x96/0x1b0 [ 336.364295] ? sock_alloc_file+0x4e0/0x4e0 [ 336.368538] sock_close+0x16/0x20 [ 336.371998] __fput+0x353/0x890 [ 336.375284] ? fput+0x1a0/0x1a0 [ 336.378570] ? _raw_spin_unlock_irq+0x27/0x70 [ 336.383074] ____fput+0x15/0x20 [ 336.386364] task_work_run+0x1e4/0x290 [ 336.390258] ? task_work_cancel+0x240/0x240 [ 336.394588] ? exit_to_usermode_loop+0x87/0x310 [ 336.399267] exit_to_usermode_loop+0x2bd/0x310 [ 336.403858] ? syscall_slow_exit_work+0x4f0/0x4f0 13:58:43 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 336.408709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.414256] do_syscall_64+0x6ac/0x800 [ 336.418152] ? finish_task_switch+0x1ca/0x840 [ 336.422654] ? syscall_return_slowpath+0x5c0/0x5c0 [ 336.427588] ? syscall_return_slowpath+0x30f/0x5c0 [ 336.432527] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 336.437903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.442753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.447945] RIP: 0033:0x4559f9 13:58:43 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 336.451126] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.470483] RSP: 002b:00007f2990790c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 336.478206] RAX: 0000000000000000 RBX: 00007f29907916d4 RCX: 00000000004559f9 [ 336.485482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 336.492761] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 336.500038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 336.507313] R13: 00000000004e9b92 R14: 00000000004c7fc0 R15: 0000000000000001 [ 336.533608] XFS (loop3): mtpt option not allowed on this system [ 336.602621] XFS (loop3): mtpt option not allowed on this system [ 336.622097] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.629588] binder: undelivered TRANSACTION_ERROR: 29201 13:58:44 executing program 2 (fault-call:5 fault-nth:2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xcf440000]}, 0x10) 13:58:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000140)="02b17accb0cb4c6bdf1ca0952c315839b7428d616fa8e8b5ce6eb14231dc9c82e27485b4e5c4a3fb967db663ff1500cd7465400bd8f2e1baa744074c647ea061e1127de43111a6267de2dc7f841c6d0a8667f12bf711f8c9b82886701d6f0ffd0ac3ce4d2d9b9e268351a59ce926ca9cb045d98602996aa77d3964fbb369a0d5d7260dabad6adedbc05b01094b0a982c63f9d49f35b3fff1c2be2c5d2664ae8c1374842d9839efc7f2ad69f3f1e13865f656131f290d45dd46910f13b0d433cb48d10651e62ef817eaa95c0e47b79c9d51ae9e8fe827c0d9bdcc1b8334dd1a1a8be66c0f6378", 0xe6, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = dup3(r1, r1, 0x7fffd) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r2}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) connect$packet(r2, &(0x7f0000000540)={0x11, 0xd142bcb559de6e03, r4, 0x1, 0x5, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) connect$netlink(r3, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x20004100}, 0xc) close(r1) 13:58:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xd5e0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:44 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000f00"}) 13:58:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x8a0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530ff", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 336.708915] binder: 25585:25586 got transaction to invalid handle [ 336.715247] binder: 25585:25586 transaction failed 29201/-22, size 0-12288 line 2852 [ 336.739624] FAULT_INJECTION: forcing a failure. [ 336.739624] name failslab, interval 1, probability 0, space 0, times 0 [ 336.751239] CPU: 0 PID: 25599 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 336.758179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.767536] Call Trace: [ 336.770139] dump_stack+0x1b9/0x294 [ 336.773778] ? dump_stack_print_info.cold.2+0x52/0x52 [ 336.778973] ? unwind_get_return_address+0x61/0xa0 [ 336.783909] ? __save_stack_trace+0x7e/0xd0 [ 336.788240] should_fail.cold.4+0xa/0x1a [ 336.792314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.792766] binder_alloc: binder_alloc_mmap_handler: 25585 20002000-20006000 already mapped failed -16 13:58:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 336.797416] ? save_stack+0xa9/0xd0 [ 336.797475] ? print_usage_bug+0xc0/0xc0 [ 336.814584] ? find_held_lock+0x36/0x1c0 [ 336.818665] ? lock_downgrade+0x8e0/0x8e0 [ 336.822818] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.828192] ? mark_held_locks+0xc9/0x160 [ 336.832343] ? kasan_check_read+0x11/0x20 [ 336.836494] ? __local_bh_enable_ip+0x161/0x230 [ 336.841261] ? rt_add_uncached_list+0x1dc/0x270 [ 336.841591] binder: BINDER_SET_CONTEXT_MGR already set [ 336.845934] ? trace_hardirqs_on+0xd/0x10 13:58:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 336.845950] ? __local_bh_enable_ip+0x161/0x230 [ 336.845970] ? _raw_spin_unlock_bh+0x30/0x40 [ 336.845985] ? rt_add_uncached_list+0x1dc/0x270 [ 336.846006] __should_failslab+0x124/0x180 [ 336.871049] binder: 25585:25603 got transaction to invalid handle [ 336.873322] should_failslab+0x9/0x14 [ 336.873339] kmem_cache_alloc_node+0x56/0x780 [ 336.873357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.873374] ? rt_set_nexthop.constprop.55+0x568/0x1250 [ 336.873392] __alloc_skb+0x111/0x780 13:58:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xb330, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 336.879631] binder: 25585:25603 transaction failed 29201/-22, size 0-12288 line 2852 [ 336.883392] ? rt_add_uncached_list+0x270/0x270 [ 336.883414] ? skb_scrub_packet+0x580/0x580 [ 336.919293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.921457] binder: 25585:25586 ioctl 40046207 0 returned -16 [ 336.924828] ? rt_dst_alloc+0x3f0/0x500 [ 336.924845] ? fnhe_flush_routes+0x460/0x460 [ 336.924864] ? __lock_is_held+0xb5/0x140 [ 336.924884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.924899] ? xfrm_lookup+0x827/0x2860 [ 336.924916] ? graph_lock+0x170/0x170 13:58:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 336.956447] __ip_append_data.isra.47+0x21a6/0x2a60 [ 336.961477] ? ip_setup_cork+0x7c0/0x7c0 [ 336.965559] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 336.971362] ? ipv4_mtu+0x375/0x580 [ 336.974992] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 336.980449] ? ip_route_output_key_hash+0x293/0x390 [ 336.985476] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 336.991019] ? ip_setup_cork+0x4dc/0x7c0 [ 336.995085] ip_append_data.part.48+0xf3/0x180 [ 336.999672] ? ip_setup_cork+0x7c0/0x7c0 [ 337.000950] binder: undelivered TRANSACTION_ERROR: 29201 13:58:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 337.003738] ip_send_unicast_reply+0xd32/0x1800 [ 337.003766] ? ip_make_skb+0x340/0x340 [ 337.003787] ? graph_lock+0x170/0x170 [ 337.003805] ? lock_acquire+0x1dc/0x520 [ 337.017996] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.021561] ? __lock_is_held+0xb5/0x140 [ 337.021588] tcp_v4_send_reset+0x1253/0x28f0 [ 337.021604] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 337.021622] ? tcp_v4_syn_recv_sock+0x1240/0x1240 [ 337.049468] ? tcp_finish_connect+0x400/0x400 [ 337.053982] ? find_held_lock+0x36/0x1c0 [ 337.058069] ? mark_held_locks+0xc9/0x160 [ 337.062227] ? kasan_check_read+0x11/0x20 [ 337.066388] ? __local_bh_enable_ip+0x161/0x230 [ 337.068693] binder: 25617:25618 got transaction to invalid handle [ 337.071063] tcp_v4_do_rcv+0x71e/0x850 [ 337.071078] ? tcp_v4_do_rcv+0x71e/0x850 [ 337.071098] __release_sock+0x12f/0x3a0 [ 337.071117] release_sock+0xa4/0x2b0 [ 337.071136] ? __local_bh_enable_ip+0x161/0x230 [ 337.077375] binder: 25617:25618 transaction failed 29201/-22, size 0-12288 line 2852 [ 337.081223] ? __release_sock+0x3a0/0x3a0 13:58:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x800, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xe0e7, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 337.081238] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 337.081257] ? tcp_close+0x707/0x12b0 [ 337.118425] ? trace_hardirqs_on+0xd/0x10 [ 337.122575] ? __local_bh_enable_ip+0x161/0x230 [ 337.127248] tcp_close+0x70f/0x12b0 [ 337.130884] ? locks_remove_file+0x3f7/0x5a0 [ 337.135297] ? tcp_check_oom+0x520/0x520 [ 337.139366] ? ip_mc_drop_socket+0x20f/0x270 [ 337.143782] inet_release+0x104/0x1f0 [ 337.147594] sock_release+0x96/0x1b0 [ 337.151312] ? sock_alloc_file+0x4e0/0x4e0 [ 337.155553] sock_close+0x16/0x20 [ 337.156930] binder_alloc: binder_alloc_mmap_handler: 25617 20002000-20006000 already mapped failed -16 [ 337.159012] __fput+0x353/0x890 [ 337.159031] ? fput+0x1a0/0x1a0 [ 337.159048] ? _raw_spin_unlock_irq+0x27/0x70 [ 337.159065] ____fput+0x15/0x20 [ 337.159085] task_work_run+0x1e4/0x290 [ 337.186679] ? task_work_cancel+0x240/0x240 [ 337.191008] ? exit_to_usermode_loop+0x87/0x310 [ 337.195684] exit_to_usermode_loop+0x2bd/0x310 [ 337.200271] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 337.205121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 337.210663] do_syscall_64+0x6ac/0x800 [ 337.214551] ? finish_task_switch+0x1ca/0x840 [ 337.219051] ? syscall_return_slowpath+0x5c0/0x5c0 [ 337.223984] ? syscall_return_slowpath+0x30f/0x5c0 [ 337.225191] binder: BINDER_SET_CONTEXT_MGR already set [ 337.228912] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 337.228933] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.228954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 337.228966] RIP: 0033:0x4559f9 [ 337.228970] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 337.271566] binder: 25617:25622 got transaction to invalid handle [ 337.272053] RSP: 002b:00007f2990790c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 337.272068] RAX: 0000000000000000 RBX: 00007f29907916d4 RCX: 00000000004559f9 [ 337.272082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 337.278396] binder: 25617:25622 transaction failed 29201/-22, size 0-12288 line 2852 [ 337.285988] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 337.285996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 337.286004] R13: 00000000004e9b92 R14: 00000000004c7fc0 R15: 0000000000000002 [ 337.319081] binder: 25617:25618 ioctl 40046207 0 returned -16 [ 337.335088] XFS (loop3): mtpt option not allowed on this system [ 337.363157] XFS (loop3): mtpt option not allowed on this system 13:58:44 executing program 2 (fault-call:5 fault-nth:3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x4b05000000000000]}, 0x10) 13:58:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x37050000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 337.519767] FAULT_INJECTION: forcing a failure. [ 337.519767] name failslab, interval 1, probability 0, space 0, times 0 [ 337.531085] CPU: 1 PID: 25656 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 337.538014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.538336] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.547360] Call Trace: [ 337.547386] dump_stack+0x1b9/0x294 [ 337.547406] ? dump_stack_print_info.cold.2+0x52/0x52 [ 337.563444] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.564203] ? is_bpf_text_address+0xd7/0x170 [ 337.564228] ? kernel_text_address+0x79/0xf0 [ 337.578547] ? __unwind_start+0x166/0x330 [ 337.582706] should_fail.cold.4+0xa/0x1a [ 337.586766] ? __save_stack_trace+0x7e/0xd0 [ 337.591093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 337.596205] ? save_stack+0xa9/0xd0 [ 337.599827] ? save_stack+0x43/0xd0 [ 337.603444] ? kasan_kmalloc+0xc4/0xe0 [ 337.607330] ? kasan_slab_alloc+0x12/0x20 [ 337.611478] ? kmem_cache_alloc_node+0x144/0x780 [ 337.616233] ? __alloc_skb+0x111/0x780 [ 337.620125] ? __ip_append_data.isra.47+0x21a6/0x2a60 [ 337.625313] ? ip_append_data.part.48+0xf3/0x180 [ 337.630067] ? ip_send_unicast_reply+0xd32/0x1800 [ 337.634913] ? tcp_v4_send_reset+0x1253/0x28f0 [ 337.639501] ? tcp_v4_do_rcv+0x71e/0x850 [ 337.643564] ? __release_sock+0x12f/0x3a0 [ 337.647715] ? release_sock+0xa4/0x2b0 [ 337.651636] ? tcp_close+0x70f/0x12b0 [ 337.655446] ? inet_release+0x104/0x1f0 [ 337.659432] ? sock_release+0x96/0x1b0 [ 337.663347] ? sock_close+0x16/0x20 [ 337.667009] ? __fput+0x353/0x890 [ 337.670468] ? ____fput+0x15/0x20 [ 337.673938] ? task_work_run+0x1e4/0x290 [ 337.678000] ? exit_to_usermode_loop+0x2bd/0x310 [ 337.682747] ? do_syscall_64+0x6ac/0x800 [ 337.686789] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 337.692136] ? print_usage_bug+0xc0/0xc0 [ 337.696191] ? graph_lock+0x170/0x170 [ 337.699982] ? mark_held_locks+0xc9/0x160 [ 337.704113] ? kasan_check_read+0x11/0x20 [ 337.708257] ? __local_bh_enable_ip+0x161/0x230 [ 337.712923] __should_failslab+0x124/0x180 [ 337.717159] should_failslab+0x9/0x14 [ 337.720942] kmem_cache_alloc_node_trace+0x5a/0x770 [ 337.725946] __kmalloc_node_track_caller+0x33/0x70 [ 337.730859] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 337.735603] __alloc_skb+0x14d/0x780 [ 337.739308] ? rt_add_uncached_list+0x270/0x270 [ 337.743970] ? skb_scrub_packet+0x580/0x580 [ 337.748274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 337.753801] ? rt_dst_alloc+0x3f0/0x500 [ 337.757757] ? fnhe_flush_routes+0x460/0x460 [ 337.762153] ? __lock_is_held+0xb5/0x140 [ 337.766219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 337.771738] ? xfrm_lookup+0x827/0x2860 [ 337.775692] ? graph_lock+0x170/0x170 [ 337.779477] __ip_append_data.isra.47+0x21a6/0x2a60 [ 337.784476] ? ip_setup_cork+0x7c0/0x7c0 [ 337.788525] ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0 [ 337.794319] ? ipv4_mtu+0x375/0x580 [ 337.797942] ? __build_flow_key.constprop.54+0x5f0/0x5f0 [ 337.803818] ? ip_route_output_key_hash+0x293/0x390 [ 337.808827] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 337.814342] ? ip_setup_cork+0x4dc/0x7c0 [ 337.818388] ip_append_data.part.48+0xf3/0x180 [ 337.822960] ? ip_setup_cork+0x7c0/0x7c0 [ 337.827020] ip_send_unicast_reply+0xd32/0x1800 [ 337.831686] ? ip_make_skb+0x340/0x340 [ 337.835556] ? graph_lock+0x170/0x170 [ 337.839338] ? lock_acquire+0x1dc/0x520 [ 337.843299] ? __lock_is_held+0xb5/0x140 [ 337.847348] tcp_v4_send_reset+0x1253/0x28f0 [ 337.851740] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 337.856919] ? tcp_v4_syn_recv_sock+0x1240/0x1240 [ 337.861747] ? tcp_finish_connect+0x400/0x400 [ 337.866224] ? find_held_lock+0x36/0x1c0 [ 337.870272] ? mark_held_locks+0xc9/0x160 [ 337.874401] ? kasan_check_read+0x11/0x20 [ 337.878530] ? __local_bh_enable_ip+0x161/0x230 [ 337.883181] tcp_v4_do_rcv+0x71e/0x850 [ 337.887055] ? tcp_v4_do_rcv+0x71e/0x850 [ 337.891111] __release_sock+0x12f/0x3a0 [ 337.895071] release_sock+0xa4/0x2b0 [ 337.898767] ? __local_bh_enable_ip+0x161/0x230 [ 337.903417] ? __release_sock+0x3a0/0x3a0 [ 337.907548] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 337.912543] ? tcp_close+0x707/0x12b0 [ 337.916324] ? trace_hardirqs_on+0xd/0x10 [ 337.920451] ? __local_bh_enable_ip+0x161/0x230 [ 337.925103] tcp_close+0x70f/0x12b0 [ 337.928715] ? locks_remove_file+0x3f7/0x5a0 [ 337.933105] ? tcp_check_oom+0x520/0x520 [ 337.937150] ? ip_mc_drop_socket+0x20f/0x270 [ 337.941541] inet_release+0x104/0x1f0 [ 337.945325] sock_release+0x96/0x1b0 [ 337.949033] ? sock_alloc_file+0x4e0/0x4e0 [ 337.953257] sock_close+0x16/0x20 [ 337.956698] __fput+0x353/0x890 [ 337.959974] ? fput+0x1a0/0x1a0 [ 337.963245] ? _raw_spin_unlock_irq+0x27/0x70 [ 337.967733] ____fput+0x15/0x20 [ 337.970995] task_work_run+0x1e4/0x290 [ 337.974868] ? task_work_cancel+0x240/0x240 [ 337.979179] ? exit_to_usermode_loop+0x87/0x310 [ 337.983843] exit_to_usermode_loop+0x2bd/0x310 [ 337.988415] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 337.993239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 337.998761] do_syscall_64+0x6ac/0x800 [ 338.002722] ? finish_task_switch+0x1ca/0x840 [ 338.007198] ? syscall_return_slowpath+0x5c0/0x5c0 [ 338.012108] ? syscall_return_slowpath+0x30f/0x5c0 [ 338.017031] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 338.022391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.027216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.032387] RIP: 0033:0x4559f9 [ 338.035564] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 338.054740] RSP: 002b:00007f2990790c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 338.062444] RAX: 0000000000000000 RBX: 00007f29907916d4 RCX: 00000000004559f9 13:58:45 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\b\x00'}) 13:58:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:45 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x65ef, 0x28202) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x2c, @broadcast=0xffffffff, 0x4e23, 0x3, 'dh\x00', 0x10, 0x7, 0x65}, 0x2c) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x83, 0x800e, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0xf) close(r2) 13:58:45 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:45 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x5627, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x6784]}, 0x10) 13:58:45 executing program 2 (fault-call:5 fault-nth:4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 338.069698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 338.076955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 338.084215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 338.091468] R13: 00000000004e9b92 R14: 00000000004c7fc0 R15: 0000000000000003 13:58:45 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 338.152223] binder: 25668:25669 got transaction to invalid handle [ 338.158566] binder: 25668:25669 transaction failed 29201/-22, size 0-12288 line 2852 [ 338.175554] XFS (loop3): mtpt option not allowed on this system 13:58:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:45 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x4fa10000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:45 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 338.238650] XFS (loop3): mtpt option not allowed on this system [ 338.255314] binder_alloc: binder_alloc_mmap_handler: 25668 20002000-20006000 already mapped failed -16 [ 338.283541] binder: BINDER_SET_CONTEXT_MGR already set [ 338.316617] binder: 25668:25669 ioctl 40046207 0 returned -16 [ 338.405850] binder: 25668:25708 got transaction to invalid handle [ 338.412248] binder: 25668:25708 transaction failed 29201/-22, size 0-12288 line 2852 13:58:45 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000000000100"}) 13:58:45 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x18080) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:45 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000002c0)=0x8, 0xfffffe42) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000040)=0x78) close(r1) sendto$inet(r1, &(0x7f0000000140)="bfd04a54ec54b20027a574c77e5cb1cf3c294e25d09d9fe514b7c89e6ec3ebe367555e547a32b1c1872a92b5dc9b07663cbec4e3a54f96e19e31231fe4feb3d2a0b4c3144b6d246ca707da739047875ec41cd119f219e1a5249a98eff35ffc5c608b3a7b67a2702710c2031d501e067ff60fcac031158b", 0x77, 0x40080, 0x0, 0x0) 13:58:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x5bef]}, 0x10) 13:58:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:45 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x6fb8, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 338.494889] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.500802] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.547127] XFS (loop3): mtpt option not allowed on this system [ 338.576567] binder: 25732:25738 got transaction with invalid offsets ptr [ 338.586421] XFS (loop3): mtpt option not allowed on this system 13:58:46 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xbf95, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:46 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 338.609919] binder: 25732:25738 transaction failed 29201/-14, size 0-12288 line 2995 [ 338.692517] binder_alloc: binder_alloc_mmap_handler: 25732 20002000-20006000 already mapped failed -16 [ 338.757386] binder: BINDER_SET_CONTEXT_MGR already set [ 338.772096] binder: 25732:25738 ioctl 40046207 0 returned -16 [ 338.783789] binder_alloc: 25732: binder_alloc_buf, no vma [ 338.789466] binder: 25732:25750 transaction failed 29189/-3, size 0-12288 line 2967 13:58:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x890d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x5f50000000000000]}, 0x10) 13:58:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x1f4, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:46 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/mixer\x00', 0x40, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000006c0)=0x44, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000140)=0x4) 13:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0l', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0xfffffffffffffef1) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$getflags(r2, 0xb) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x4, 0x4) close(r1) 13:58:46 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000fffffff500"}) [ 338.832918] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.838766] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.883735] XFS (loop3): mtpt option not allowed on this system 13:58:46 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x37be, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 338.930691] binder: 25784:25786 got transaction to invalid handle [ 338.937068] binder: 25784:25786 transaction failed 29201/-22, size 0-12288 line 2852 [ 338.949446] XFS (loop3): mtpt option not allowed on this system 13:58:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x26f) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000040)="8c", 0x1, 0x800b, &(0x7f0000000140)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) io_setup(0xffffffffffffff00, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x2, 0x3ff, 0x124}, 0xc) close(r0) 13:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c653002", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:46 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00 \x00'}) 13:58:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x67840000]}, 0x10) [ 339.048342] binder_alloc: binder_alloc_mmap_handler: 25784 20002000-20006000 already mapped failed -16 [ 339.075483] binder: 25784:25802 got transaction to invalid handle [ 339.081865] binder: 25784:25802 transaction failed 29201/-22, size 0-12288 line 2852 [ 339.085774] binder: BINDER_SET_CONTEXT_MGR already set [ 339.135500] binder: 25784:25786 ioctl 40046207 0 returned -16 [ 339.165072] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.171125] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.219396] XFS (loop3): mtpt option not allowed on this system [ 339.270684] XFS (loop3): mtpt option not allowed on this system 13:58:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x3f00000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:46 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffbe) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000140)) close(r1) 13:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:46 executing program 2: socketpair(0xc6ae7c2f7dd24566, 0x5, 0x2, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000540)=0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002740)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000029c0)=0x0) r5 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000002b40)) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000580)={0x21b8, 0x3d, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x21a8, 0x1a, [@generic="a09f607ea0323b3da335af4a0e12c5a88a3ed5489b095c15f3acadfd47ddcc2315d47ff82a8e4909bdad06922a3c1f1bf6eec7a0edcf69e5be457f8022a1329df030d89b4e7620830f4d34cac506e261dc071d713b2ab0c1f77181c24ca53148baac8ff1adeb85ff1dcd40d8df2e5a0e84a67df1ce7ad6a0936b73127608f57a0200ac66f9cfc84dbd0d01a27515f246097d2fe7df0087087576eb5629a4b830f7e092a9e77f46617bdccd3c57febab850e0e05029288d574f735fa94a8117e78b434aded64e2e0c4760d0c69d8d123b83f29d70aaeea587cb0ce0b2997c8199866e8cfe7cc9df6f6b0d27cc3ac782f0a610dcf6df3352f6", @typed={0x4, 0x8f}, @generic="3e05364d37186fea303112e968c1fa9f421f91c3b1caeab57a2bef49e8e393ef223df9f26b9a6443f25d55e7f7263e8f17cd44077c7bace31415e1fd3de41f21c41dc5ffbf28ce991ca1b7b9ee55fbb41c", @typed={0x8, 0x63, @u32=0x7}, @typed={0x8, 0x14, @uid=r1}, @generic="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", @generic="e412ea60b6c878a326097006351008b15fa73119233899656a70256797d8a64b13e3ef47042bd5f1fe3a5d64586f8ca3d35f62709f5865c288447f1c2c6c31f693a787b6fcb0ee548bdde74b5fe1401137083c900d4fc41ff005282472aad9310a70d43dd0fe29533f8bcbd93c17cb46729cb7a61f2b8567c78aba28f3525d64b627e316f8082fc0338db9bf697e84c517658a45daf1f71943c0eace13bbd123db5dd949bba0a4f2d7df20bbb916a2011d1a168002d5857957f87bb5e57339244ba64ef58de0c28b9a0835e2eb41a1df2c80cb62924b42c399fbb65672387a121db7d63b85e46c3459ee1b978a9a2b81d43e5cfdb041e86f4753b3970b0bb4491717b9e44c2526fae3edbd8f673a25aaf6e277e3d610a2d3a4f66f32685d33afbb07ccf60173fb8dc853e53b21cb9b4fa079f776832b4f323efb855edd245a52008ba64f632f294cd91e31c4326113cdfbcbf58d86b6d68452d52e2b8031f0d391e9eb4c85b89ef3eadec849f0152639a6890f646e4ae4064bdded5f07b896bc57dc0b3843b784ce2e92029525ffa36044a2942244fd38124ca678b8c1723affe7c1f5c331c6208a49e5175f76e704081ba09aee811d0e005a36f3ea6233a3acf9c858fd10dcc7cb2556798ccb72ad593ba4454d1626af8a164eeda286fcfd4b32b685b81ef92786a1e868aab378a7444855e3c84307bc24fb9cd4d513d73e4200f4476084767e2e7c291ab8cbe1e0fb553996b56298f244eae6bd8f3ff953e00eec88a816cc7f9074110b84dfc126a20899cba04cd8a1ea8c41f1f6e3c6e3d504ab82839278bcd3a0d286b574ff49a04e98bb9d44b8c086db6eeb72776f3af8e0e52bac56ff5afd8ec3db633c88e34f7ac3020e851f1d0863104560219660391d95d01390443be341a84146ce935c6a1bba4dab91a8790d13adae2f0257f63707cc5990d33351c4ef34f1d79a0284710724510213f6e5118f710a8a0a50190e79f0de6becaa714d8b260f2f022d7a1649b06f772895438f56e07e6ddf29d663801fbb3d5546e6e217cf0e56210ac215b1bcfb60aa16126a468bb67c65849b82a1219f9f68e8f994031c588decb6d85b5d16744a3509f0d627f7df002c05062ba1a42e239625238d4c20c9a9d1e0d88061d94f1bf35990188b2a687ebc5ad34459ded45185b90cfad9a8d87c910e47b71361a832c57be80426536a91c1294960b7077c07c26bb3a37399fd53ac9c1a30db57c901bdf8d2fef3fef544c170379e5747ba038180ace65c494b662cbce601b3140c533fe0767adec6071e6a29e55cf5c109b0dabaf5532b4472e0911624f102fc59e047a9b8a4991d6072088bd5165bf270d6bab1e9d0ef58bafb9f3089bf9788554cb5d1b0bc2a798516e799e9d1f354e9b22ead6471215976a46d82891b061542003a8d5833898f88d0c95b09aad6a6802d27caa05c505deb2d636a8db7233c1020bc76e954caf706bac18f63d223b5148526fdd5162ca083aa72d95f42d0e6f1454945af39dc39c24fa5cf2b0b36e6926d141bdf3101f4d51cf6649e1c9a3da6185841dd0897ad7dec53cf5148ab5bc12ca943a9642e410c3673a1249f994dbddf9fb5af9d8930293c4c007d291c63ffe0ce3c894610ff82d505e812403723e806dc236a39274e402e2d0f92ebac35989eccfbb3174c657c7b1eb4c934f5b05f4e699a41d1c116b6e950cb0e04d72da9afdfa1a6466775819cfaecda50da5d00f6f5d8ba4ce035b8dc92006aa655689ce591f1b4f2646cbf54aa4403058b40ff7a5aa8ba771fcf8878fb63b990e75fa515338c5147677b6622d24dcd11ce28a993230cdc30ce5be8f57d7c7806a701a7fdca2dc4747ad92609e83ba6ac83922d3c1a6a8c2bf6ab0e62d4493de0618b24468b2f28c609ea90e35a68e4ddc832473d84278525bcb8703ba092e7403e39dc0f0052d5e124ef3b69a22c2aae5e20a5f736991ad05c0d41383b79cdc543c8715304c242fcbe53dafa1d2581de026b7ef3395e541471787d3f2fd92d6c1e0c746dbfe81e43e100cad13d75c6a54c55675d19b5ffda6ab6f73da46815813c72b722b91d3db46abf6963866bfce95ca12f66a7b2a09a445dba430d318b329794618276a2be16962b9ce49978011ebb61bcdcc5076b92b86b8b297e90a0f8c795f1da3550fce5bb92b0198e1f55bb8d413fecbfeb30eb65c7ed6fada86428033ffe64440cddcb8989568726073c108ffc4d5dce7beaeeed00f00ea2d20c99016c445ce97edcad846c4f7be55d6443f5a38b5ed4e362b25691bb593f6312bb83485f6e082584d683a8e5d4a52e490a7d4f5a9986e9a6a0d82baafdf905ff4e6472a5ccf40caf4671dfb7b4129bbb9eac340dba99b3fc1e3681a380c94830b8c595d9930e18905609479473a4cef5c7a9c524ccaf9df1b5f15eed1da18ebd72000e8210a1c31a2e1c77ec6adfc807aecffa5157d769bbc7e594fcb6640494194d5c81fda230f8b099c732bf2c1f71c3567f9b3da6e1dbe664d65ac9f42b63ae5353ff89d7791eb8f735e7a9dd48c596a827e35b747621bdfb727c01e49d242de936f01f8e66329861e664e85c88f83e860435f43cff59bd004265e88891ae92782ce2df4f836d4e5aac549b52a5d798da00e69f04a3f5fc7d0ce54adf9eee4ca39bb9bfeb262bca2dbdb48ea70c74e0e32cdb837be45552316c9e63511e34f00b254c24c64a5e2179fe3492389fb282e191afc0378037a6f27f428cfd4f7b1d29d17b98eac2790509c664fde8ae25f8ea0cd25eba943e4d0e798235068b0f340186d5251e857e16a52dc8904acc3d1c93a605b8aabb93763b5db028e3ac8e4a76404e551a1a65791bbf8e19dbe5e29785cc4fbb5cf7456a2816066299598c90d0caed5a26c425bce62ea8983ebbd1b004bbb0193ed753896fee728b12f2c9010860499d79b22a8c7d65d5026ce18681ce189d98d12e0076f61c2a711ae7bb90d2e787ac97fb16efe99d27ff608ab069f33408a7e6bb1526bae5d6d32bf39d9f2eccdb1cef0189b18e2e26736a345a7c8de38778aa1b1290911b2c61360b347820e291208f58afdedb88f3c56a8d2ec4ed59831ba0b1394c216a0dd7644539b3ef26ee993e132ebc1241fa27e9619371c1b530507b4d74d097c420a361fb6aa9404a7ada833f6ac2f5f34e28634f958c835b1f5c0ec52556424f2ac296491ba18e3972fac55a020556f311c2c39f4a3b7f84fae80816389bfabe3f58620c9da72c5f5f5ed4ec4e4fb1bd8aab308e213656f4979cf7187a171bd44c4a27fc2ed1be86cc51dc59056f005c58515419a199fc59b82106347a0f20791b3a0600fad4dd4f1640c9cade993e29db56908baa11106d252d8d72e27ac543661b2ac43803bcf3bee02105730d5ba28fb41bf08946c612284f9211be84230a2f0a118f6143b37d0315dedcb47477f50389ea2f4aba7d55d7cd1fe815b02041707c56191fa6f0cf38d29e0e0093f976065f7c3cde14b4d6c5f33d3410acc9f78bd9c6d8ae370c7a741b76a717a28d4b52c8b0d6dc4ed51ccdf5bed8919c2e93579f469840a1b2cf80e6a76ce69f5577e2636248ccfc333efaa97bfd00f484997f0e113fbd740cfa1ce5aa821c41615fbb2707880588b3ffbd1af2123a5cc934f290363fc222bc2c1ab621762f1f45e46497166418c178c43f770c70cf41cdb0843cfee36318d94bafd23b6bad95ceae93f71fe9977fa02c0a72380e3407b0458b75b01d1c7bdbfec84cf2b32fc9a96edba5d6fc743cbf6d0cfcb8748ee2fbcd2ea1a6e4f292a70fafa102bc9d3ceaf90d9bec97102f5b5016d443de53aa90a1661d70a5c01da204016ec935d7ff4e4741d106068213dbf9771f8db434bb79cf4931531adb0ce08ff2b5f4c6e59edaef6bf60e20543b1a93f21f368937a9bdbaad89d3e44efc30673c5c4d6eb76d242258c22c745c2dfa35eb2097e0b80809624e47a89bfbbc2221d738bdaab913357fc16970a4b07e2a3c4b98321f53b30682031d22713146d22ed940595dd52f50175c56e0cbcc467edb88287b47cc716f70a6fae03106a6fbeabf04d10f752634df7348dc491fe39cd433b8e87407a8530e07f503bd90c4deff8bde5f865ee6c43bf0bc03d1537370739ac0646dcb4b9df6b803a204ce33c38cbee955bee48f3e541f83ba487eefeb5f31b5d57cccbdb60533149ce66ced7f7190df9f227891d36cf8f7a91bb6d18bc8328fe0acb09d42b5636b953e0a3f0699da982400c18f5d09836422dd61a11e08de84c7b24b08a909fa7c856f6307b91da9d1fcebfdaf9fc14397b91e9fcc5107345c45631fd8af959fafdb4c1b4dfd3307892e9774b17e0fc2ca8386afaf92e814146dcd56830bc15887411fdbbcf99e58c13f4ac1e0ff594ab3f3ffbf0762a0239819ebfa04c3a7b6a3ee206d7e16fec1309562e621e851d30942ad2e3ae5f5943a02d203f9c0b3ee848799bd2cdeb9b9de3a05b568070f360e7d084544c39c1a7ef19ae2271ab7cc26fcc6f4109f8a29bc36938c102f018dce67bac646f70304cb5925ffb140c3911e671e61573a9b316c2183119b6c49fc53fd33660c1a8ae4c8edd32929d65fe1a915c69692cf5314254210755a0b1e5a39680a7bcaad1396920db3e3bc5d8baa2a49156f09b1cea9e14164ef3502b7a5e714959fbf58cff2edb050958d5105dfb43d7a3b42d15275fe911d626e20f066a5b65e5ff7477453953e6352ee81c84115e55e93903f859e09da526c307377b866a8965af650ecbe8e4b77f37f9bace21e9842fbf06e9ffd7107d1581e261c69e2174b4e67b4011f59114e6aef8436987ca43e6a505cbc2e52e4bbe63978811c5e293718e8692951ecfd8eb9bceb0b2c5980af4e18739ddc73dbc7c9323e770dacf2c80d72eb28b2a5030305fc81d6fc6e006e61c131b607d6dbce4c3491b30b6d678602fd2b6d531ae0282c65a9733f00108ef8450ca568444e4cbaee65c71be57a693906056a1478920e5b1250c421fc3d363d3f576bfcec51f14321117d0e6573c7045b68e2837f5d0e21a53b35cb41cd80831e31e8af910f28e169fa49fd89d0f44bc60a04e256aa42baa523835cfce4c19e6591210c7795fff2aff7052c64f34600b2981d0a65bc265b163a6ef43dd60b9e1414f9bdba7948269240df449c3c380e4cf8a3fb42d427aa07b4c5cc452f33984b9bbb8b4ef08600e9ff46011c0354eefc3971d09b1f3a3ff1fbd1095d7d04f41186c1ea9136be6eb81535be1f5840b6b1b99736f65ed6cb8ddaf41afccd5f472371ad594807e924ed4d54df3e1b2ea846b7c5f109a8dec80ce77f38930625b2e0b6e54c8e1f96913374df81bd0956d3bbe126235ade3173d5a531ed17ac6f79d9912f264a0c1f1e8b14dd9389b7037c35425b37551151a384e5a29b7584d41f3ef69a4fa5036fa98eee3888c975338d9da815b19d653952b8c8dbf2124f67861a1a1e292566209cc6c47dbcc407608c4b7927b4192b79bc4f3ba22f7679624fb18042ff4bcaab5b5dcddf5508d376caf6e407e76d0a0fd6779820938116777adf9f6ea28d603795caf71a6b82a38e2ae0c0ee50c9b1437481b1415ce67a96e52d82d77aabee8c6bb369b338b1f4d8fb44fd45503508293d0a65f853576153302550b6083dc7b7f5f2aa44d732471bc7fb2490076a9672d9a924e6d1847d857f0502e517d6c58f18408e03de61cb1e0d1b0908d1491cd8537c3fa138026c586f4658bd9aff21a864b14cb3dedfe0b9e1650244d42a4d111b9f61104c93f818c5ad", @generic="12245e853438f10f03fc86d14bac49b530ce2fd552012e3899576d789942115a00e92027b780e4c06d7b896e8c842e97bc33", @typed={0x14, 0x17, @ipv6=@loopback={0x0, 0x1}}]}]}, 0x21b8}, {&(0x7f0000002780)={0x1f4, 0x2b, 0x20, 0x70bd27, 0x25dfdbfb, "", [@nested={0x1e4, 0x8f, [@generic="c195a96476613d84e381c44ccf1adcb84e53174f4342f4bc01cc66e6c8a3f36c86dea54f2c7a487e4b8c3c36d24aa2a5225df10fbc92ed0f3ebb00ca7e2fbb7ee9aa948f8f709f29c84cf9dd6571bfa9b8768a0665e06762b7b0def8f0965bd9ef2502d4d96b82b876d38137100581131297615b65bf3094ddf49907088b9168b2fdc09042230928dd8eb3f9d6ec363ea666b0ab3f27dc53135b8cdc1372ff69f4414f67c2a05e7c73de54daf1ec6a6cb370841629af668830f8d8d4c760634a3283eb42ef2a2959bf666c38315cf5cd", @typed={0x8, 0x24, @u32=0x7}, @generic="1d7031fe767ae13fefcb2556aef4807068c08c775dbcb552e3a9c5cc037a3fcf1b62965717f33d119031fe31e9a541acb4a8f9cbfc7c58a30da62b6c6ce1a1360b181eafd08d6de3b6e6925f85f32e0eb6551eb27c2bc8c04ad806e12da870847766c4858788d21625290bd954a7549f7d2cab0709503f976ad95915fb3cb7c323f82e9490c027510879903b65180d1a4c0c7d6bbe98058ff07f70c47cb9eac74a48563460032eda2d2aa1314595f660055422e473495adfe5cc7bb0cbdfe0837d98f7c7062300e31ac5", @generic, @typed={0x8, 0x5a, @fd=r2}, @generic="f87091d14f3536cb70910242f4ad1adda2eb6b85589a5f7082175a668de1950e4181c74ddc26be5a654390d5c7", @typed={0x8, 0x77, @pid=r3}]}]}, 0x1f4}], 0x2, &(0x7f0000002a80)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x10, 0x1, 0x1}], 0x30, 0x4000000}, 0x80) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000002b00)=0x1) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r7, &(0x7f0000000480)="c2e3beeb20d42c69175b8f27793b7a70325c364c42b12b363322bade20c15996d3b32b1d8f9b3bef97b239a465d12c253a4a0093", 0x234, 0x20000800, &(0x7f0000000500)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) r8 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x440b00) write$cgroup_subtree(r0, &(0x7f0000002bc0)={[{0x2d, 'rdma', 0x20}, {0x2f, 'rdma', 0x20}, {0x2d, 'memory', 0x20}]}, 0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x200}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000380)=0x10) sendto$inet(r7, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) close(r7) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x5, 0x8000, 0x101}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000180)={r10, @in={{0x2, 0x4e22, @rand_addr=0x8}}}, 0x84) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f00000003c0)=0x4, &(0x7f0000000400)=0x1) 13:58:46 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000300"}) 13:58:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x37050000]}, 0x10) [ 339.371903] binder: 25833:25834 got transaction to invalid handle [ 339.378274] binder: 25833:25834 transaction failed 29201/-22, size 0-12288 line 2852 [ 339.410130] XFS (loop3): mtpt option not allowed on this system 13:58:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x476d000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:46 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 339.478758] XFS (loop3): mtpt option not allowed on this system 13:58:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530ff", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 339.538214] binder_alloc: binder_alloc_mmap_handler: 25833 20002000-20006000 already mapped failed -16 [ 339.566177] binder: BINDER_SET_CONTEXT_MGR already set 13:58:47 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000300"}) 13:58:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xd778]}, 0x10) 13:58:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0xfffffffffffffce7, 0x800e, &(0x7f0000000000)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffeb8) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfff, 0x44200) close(r0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 339.613883] binder: 25833:25834 ioctl 40046207 0 returned -16 [ 339.630640] binder: 25833:25876 got transaction to invalid handle [ 339.636985] binder: 25833:25876 transaction failed 29201/-22, size 0-12288 line 2852 13:58:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x101000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x0, 0xac55}) close(r1) 13:58:47 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x7, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 339.727839] XFS (loop3): mtpt option not allowed on this system [ 339.784355] XFS (loop3): mtpt option not allowed on this system [ 339.869976] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.879121] binder: undelivered TRANSACTION_ERROR: 29201 13:58:47 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:47 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000fdfdffff00"}) 13:58:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/157) socketpair$inet(0x2, 0x6, 0x8, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000300)={r2, 0x21}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'bond_slave_0\x00'}) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xf78f0000]}, 0x10) 13:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530ff", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:47 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x54b, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x80000000000, 0x0, 0x0, 0x2, 0xfe000000, 0x5, 0x6}, 0x20) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000080)="d33b9b777d4d9aa01424", 0xa, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) [ 339.970750] binder: 25919:25920 got transaction to invalid handle [ 339.977074] binder: 25919:25920 transaction failed 29201/-22, size 0-12288 line 2852 [ 339.990216] XFS (loop3): mtpt option not allowed on this system 13:58:47 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000000001100"}) 13:58:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x4, 0x3bf, &(0x7f0000000140)="6a666a2ff3f4a569c9fcfc559948ef47260bb28794bb88070a097ee929fea4c73bf66fdad01398954af22e341b8ec3d9d0a56d95ccba8353d2656bd34e51e42dd416860f51", &(0x7f00000002c0)="0053a21458c3d5e0b33508370407f9d02322c5211f3041ee8009396d363bed22323cdbcc0d9fc451561c2f9735cf27d796b838bb12d0677e54addc281d5f579a6f038a205b9443d4c1245d264d0aeed95b14b11ff88b2a7fee7ad94a3175bb8aaf8794eeef1326ccd146442cc37e926232d49e9af2d50b4dd0cccc06ad3d914c567d0d5aa405f4ad39aa805f50acfb65e05f0fb0ca18440dc05fc5785028e4a47d669978d341c940f86c5885175961be5b9f7d444cf416a8a014bbd3ee6e0e48e31307705f76e791ac7e07d1d9e57a731728231c248b699eaeb301366da741f6", 0x45, 0xe0}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000003c0)={0x5, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e22, @multicast2=0xe0000002}, 0x68, 0x7, 0x1000, 0x3f, 0x5ae, &(0x7f0000000200)='bond_slave_1\x00', 0xff, 0x9, 0x81}) close(r1) [ 340.055910] XFS (loop3): mtpt option not allowed on this system 13:58:47 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:47 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xd7780000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 340.110699] binder_alloc: binder_alloc_mmap_handler: 25919 20002000-20006000 already mapped failed -16 [ 340.139971] binder: BINDER_SET_CONTEXT_MGR already set 13:58:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x6d47]}, 0x10) 13:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530ff", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x6, &(0x7f0000000200)="02d7a713a35b4b841ed622760070b267624e97b71ebe80667ff9158f815e00000000000022c11d0531") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 340.227137] binder: 25919:25920 ioctl 40046207 0 returned -16 [ 340.250999] binder: 25919:25966 got transaction to invalid handle [ 340.257466] binder: 25919:25966 transaction failed 29201/-22, size 0-12288 line 2852 13:58:47 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:47 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xf78f, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 340.315150] XFS (loop3): mtpt option not allowed on this system [ 340.394664] XFS (loop3): mtpt option not allowed on this system [ 340.438124] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.444464] binder: undelivered TRANSACTION_ERROR: 29201 13:58:47 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000001100"}) 13:58:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000100001, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = dup2(r0, r0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x5, 0x4) 13:58:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x4, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x38, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000240)={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x4, r3}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xa, 0x4) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x5dc]}, 0x10) 13:58:47 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xdc05, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:47 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:48 executing program 2: r0 = socket$inet(0x2, 0x4000002000000001, 0x7ffd) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000140)="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", 0xfc, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffffffffffc5a) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x7, 0x1, 0x3, {}, {r2, r3/1000+10000}, {0x0, 0x9, 0x1, 0x133e9611}, 0x1, @can={{0x2, 0x2, 0x5, 0x7}, 0x3, 0x2, 0x0, 0x0, "21034655adddafcb"}}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000040)=0x215) [ 340.609337] binder: 26019:26023 got transaction to invalid handle [ 340.615680] binder: 26019:26023 transaction failed 29201/-22, size 0-12288 line 2852 [ 340.629235] XFS (loop3): mtpt option not allowed on this system 13:58:48 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:48 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x4, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000040)=0x54) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 340.674057] XFS (loop3): mtpt option not allowed on this system [ 340.738113] binder_alloc: binder_alloc_mmap_handler: 26019 20002000-20006000 already mapped failed -16 [ 340.807196] binder: BINDER_SET_CONTEXT_MGR already set [ 340.848630] binder: 26019:26023 ioctl 40046207 0 returned -16 [ 340.886626] binder: 26019:26037 got transaction to invalid handle [ 340.892973] binder: 26019:26037 transaction failed 29201/-22, size 0-12288 line 2852 13:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:48 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000000000300"}) 13:58:48 executing program 2: r0 = socket$inet(0x2, 0x3ffffffffffffffe, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x879b0000]}, 0x10) 13:58:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001540)='/dev/sequencer2\x00', 0x202300, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000001580)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r2, r3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet(0x2, 0x4008000000000005, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_mount_image$ntfs(&(0x7f0000000240)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x2, 0x2, &(0x7f00000014c0)=[{&(0x7f0000000480)="4d303e0fb7fe6d872e8fe62d769b2061f796eb877591ca27088de1afa9e4fba96ac307fe67252b29468d6c50c58cc81e67ed06c6828c4fd1616047f08ff6225810f995c4fe09e63feea70dbeccadd57a854acc4b5c951bc726307fe55efafafbe91e0ad68967676d5703c7f574843588845b7a9af784d0d2cdc5fd7d59fbdbe0fa819534df45c128b518d688dac77817943afa2e6138e17598d82e704a30b632c8f2fd4dfa94996772332b42231e3e8b38e1c44c028820b5a8d03c0b28bf6121d5e9c6530d0c7b14792ff137ed6fca07f9a091a62bcdbaf06c20a0dfca69bf671246500117833edc2ecc547e1aaf551289d862b9179bfff1b9f96ceed262c0c137b7105f9f463d34a3bbdba218cd1f58229ed274ff098ed1693b21e3a36192754fefb8aca47ba746f4659d80d8c961f16db4116d19f9df10a05b93a86ead59ec30d5d238d670024cd91bed47bf5ec6ebfda8dd5268443f09cc96064e7c6f49cbe8c87369ffdcfc94ed02ebf4d2bf81aafb7726ba1a210177d1d6f06f421fd4fa6b2eb97b802b367d1887e74c5ebc4582d697ff1ddde5066267ec6e15450c58926d3af0871c8cc2990a4757fb2ef8b8367e0a76b7ea6dd31bb60df1051c92f5385a87ee85b7b5a675ebd98377471e25e4188ac1ee3c3182af8515eabf2af9507eaa556604a9dc5a82e6ea79cc6982559a7e101f8a4603713a3ee8da7cc3293c3d6f2ffdad37cc1955f7902796f01f49f37ed3e196284c5e1d8d238a8decb947c68565de64bd1526ee7c8f74765dacaebd9fdc82cd43cdce8d8f8dc95a5c923736653e5903d92839d2a097cfe99088fa067152f382822b6c3aa8a74dca6f72d2131c3cb89551d6cc6d99b2c47de99cd14162d34fe9fbc9040521cfb294d9ce68eb6e02768de0454a47053e27b5fb0b3e3ce871f53c07d0fd98dd5f7877428114567b6b5bfe27c324f40a74aa3ac21a86dedc3a854c1c3853e8ca8a2cb5f628f4a15589e1001f52db2b1e7e026689521a7994d522e60a8787743be857dd7323ff2066aebea033fd5938c75c9dc587a211e4b8a583c73d8b51f25b155ac3fc1fb41d8d7c5d1a1ee06be36e692afd9b02b4751e337cff355782c125349c505551411fdc4427eea2a460d74c7f5a78fcb7c14167170b0a327706930f1d6f3fdf1d13c104f0de995181aafd59e30be40ab2a5c00ec8f8709ed819f2cc0c85a24b504a32bd81b293c9c05f0ff5834a66978ecbf4b1eeb0b79edfa835a9ba9668de7c1220301b80f364a20ff86abf508a5e3bbfd6a07f6f8f86bf55eaa298e6966254f76f12bbaacbac0a1cd7b3caa638d5086d12fe58bec44266cdf18b11c326aa0ce66ea650a3852819cc40ebb67eff7577d3ef197c43fb2120c9ac020eed45865e4d86a74d50a21241049ffc2334b699b8a5d5b766cc9b863960c1243671e3d1df357f1fa82ca054ff245c3ab31089bcb556332804334887f1fb21f1606f478f913b0ffc0db933b5dccd6d9ba9ace36e7b365aa99e3363202453e6ec373f85724d356b96cd1bb5e78dfaec7e88e9d8c235b892d2237a249dc3bbe8e53460cf0e46ef14f00c752f3db82e1183f3a276c29543c8059f17dbe027dded328010361fde55505a90536dcdc5ce25c41d30f4148c39b2fdb3e9c3c1322f9e863419ad1c96712514f98348b8c091f5827281761e5d5b68c2063e2df71944c47f019515aba81c894eb6ed0f9a0fd466a44f8eacc27b4d4842f6399e4e2d1eee109d4b58cdde6342f18f0924406b67ceea29c4e950c49b35f79c8a58730fd9e1fe759a7737ae0e20411264f35faa2e6b36ce7034fd57be12b9a5f549d9a7e8efe6676907b1b056abbc0904529a621d1aa0f4c6f999aa0ad0e51ef4c3ba3c500955f3871f066d9b9c09673f67617a5d1b428afcc6288331ee111995584039805601d84ce6f87652460e303d990508a72a520f31fbd2c2bb0d476c0cab87bf7a54451f43f8c803b5200d2d8dba7f40ff2a6c8df80dede120bc67659b86e5d359dd42335d1011274e3da2db4c3a446b2f89829218245fc15780ed0c6a2221d1b35d010714cdc7698f18ea749907ed56293a48c9672ca4769ccd78ff6e8cef43447d213ab76c28d59c7d64c3ea9d405e2589ae6028aa938db403c2601e90e395560a67d1bf273d4833adf1a16836638fe68caba4ad707fa5c00d7800d7a75a2c9bb97cf9f41b40e4c665625c2a1e62a5e8d4a56567de7f859f702800052573640f1f298d394c58e730b21e36c10604bedb4c2c8aaa21d8ab435302d503c5a0c23b8151b46dcea65d0251963dbae9586595ba091261089b4eaa7a4a4278c58a0029988ac256c18c0ed2b71a01a0c187552c16fdf103b273fe5e5ebe4090aedfd327eb62ac126b5a224db68a831b8213e0c0d7662c0c1f45cab920611d00e9fe005415bde262266a4ed5488d623ca7da4fe23651a37ed7630b3194b80250792fca435cba59ff870bf9c6f75ecc6d3b51bd68099b522ecbf8618799314d86abd070fdacbdc70e454004b2c8fc45a8d751758bd87ce847de8499b1f6b32fce5f50a854668d40ba58189b2e0fc3660f71b62e9340080aa5b7968d2d095b9bfb794b8194f872f0bd34bce2c890ff31244591db33fa48ed768a11f31d284ea88f3415dd9fdac1c601e2cfe7cc846667c96270cf2d724fc2e96b25646fbbf68c87939140547c22721913b8f2fa67844e951328a71aca8c50bbf06c97deb7d60ec45afed85e820a84110a1f0f9b67c6fda7f1283cee6a765f723bee8c115ed020db5bbb9336c2afb21204969810c8509eb605f1a52aa724efde34e9265b1db4990dc46655a32856949b46db182b3ec145bcd0ba2ef5b0eab367ed692bb62e5df952520fab9baa3cf8623ff3479f2a747d87cb1700fa7f3ed6eb6d0798849fd56667caa804d38ce091b60e4713b19b6a4d36bbb67ae39c2ff56d5eceb569a70e32f3ffb4fbabb47ac076ce8c320b91cc46393cd7710a42599a9b50c270e58af11ec208dbe8e59acb0714b4d244a10ec9b7dff2c4fc6a4b7f6f3781878ff445843d0e238f0c88a96b44dd294feccad21821aaea397915fae289519999586222678974097837c74357c69d13d89c49fced9715c919da258a0db4a5eab662629e3dc9c348b464bd401fe32d1998f1dea89c8a0933c0504e40d511bbad5340135a0bc96441051b3db4697bb06a42bbdd761f555b9519926ca01959460f453977ea7f52f49ca3e11a585cfd1fc210b6e241b1787b6633cf8201d74817a80aac670047746685cb6c15b761a0fd56bbdde01102120e42198b3b24305f68191a78a86a9ebbc76686f9d69df62f7c795895acc8737b6d45bd1d044606a88c6f2f14cc3cde52f209acd51dc80a67e0db557439e2cf9af5137d67c1628313e6994d833a553d98162f9b1862f88c3ac74f1db69eb8ac94aec551234c91b410fc73b77df6256d139af66bcd7287eb9fbd0d7b61e862548ccf06e4ab320f31ce50ae07f5c498a47ccc2ba7b8b5e7510e9675d182e7c905062c3317e1d60d02084e537d08acd534241e9a7415cd70b3ef25749f4ea798a9a1dc8ce920e5ca05246c1c022173b485e4af596d781576252b63661fe0a13de826441cd8924c90b7cf380d4f2115b2618cd436f96a9232b4e94dae411a75b79ffe79582af6143aa73fd5e67c17fb95ab0fd67498bcb391b9cca6443145b76ab05b8b82957ca9c1515d1ce5a50ec309c1c6cd7cf058c7413e69e87fb6cf3e40ba661e0a09a6545c9ef6d4e773da140e4937649e1751f3a2f339222dadff1fa5a37454cdaa7eb592edfa989605875dadea9f9363c0fdd8c6512ade88a6c30ec26ca64f72677610cb2286f07f7e61ebda801795abefc945fe17468222f3a8048e4f836f902811043456888f1d05c6c76b06132abc3fa08b4151df329d4047dac5f6de0e5714890faff90488bfcc02710f221eaa54c3b0633d90a23844b94b1d604c9badc8349302222acb1519c8827edf07ab6ff88195d26b73e4e8d1ff2dc9b23d6ac0958748aa67437097a0ee54758181033f7f7368aa7db657aa17a25a8e1aea07a5f007045dcdeaffdbeb7da83036bda4f72e63b0d406be701f2c9c874f74823d2c014c725a9f8a5612f22c1ed085b521ece9761f5eb6fc9c4c90c454ec162057797e29527524015c523ca55569bd606adbdbc6801cabc16974f02bb24fd02858e45080c443df6ede9a0e9c72ffed155eb0fc47853f1a33026246f4b744bb74762b1213b02bc811fddfd0a62efe422766b30ba88a09916e1ed8add3a37e73ffb5d87cdf8b313f524d53e91a366d48d891d57a258611fb4fb6120320b464c59bf2258e00f6bf950be0503f3a7ee3c2dd18c65481e97a5331c141e69caf4b83e533de86d957a2d573c23865d9ab02fdd65b0535aa55b85e5669e437ee96ed1f225d90289f5932afa22274ad39150e14fe9a6112681c7b83f84e66fbcc1fe6185d01c1cfc0af408bd5f67e6e4eb13ab1015674266bdfa40f89d705540da2d66f832f7917df8a5905f6d282c8a8bfe99826f7cc113adde42ef0a7a084825dc01918ebec705770426e09dd4f19ffefbc1196f6d5d4a948068249575d51dedbb3b9533368b9a39ce1de1008e9d62008c68df2d815436307521f02342a8dd0c5d3a1b77c335d895e1df68b07b4dd343050691393199979b851836a31d6f9ac29f8d9ef28043cf1355133813f3690650c8ee5dd309e145846f4d6db8e0344e83e0d33464da8ee66861dd0dcc1de46ad641b519710f01e266599f4b5a55f78adb471f8dce4b319bfba04b162df28b0395fa50f3dcdb253d80396c352db662df856765bafab6395a66a3fa64f0d682f7d4bfeedc4ccf94265931bb470bdc77d9b1864781cc2ebfc6e1546e87f2078f3a982235773c3aeed7f8a080f5da1e9252336dad49fcbe7d31698aacf2ecc921e2db2947dbe0f1a50202c7600df280aeca14f643e4ec3f7224703e790d95b498a70ae6068da3f1ddfd90253de7a5d98ae2a0d1fe7e56c563e96d92b547b5470d0e23982340c9257fadea60ade60fff8e08f830179c1f7e4995dbc97c0610540736cac160e389f254bc230508535e3862b48a9c7035b0843b1c5830f05d4bb5ea972e6803599f958517970178cefb46eb2e92cd81b06708ccfa958a4eb42098f7aae1bfc4a8ab15fd89fd0b5536875e249659d254101635bb34a9898a2a3a31aa1acdc1954737500e57e20be706790f404dec8cfe421a353d39a08698e76a923a1299e153ad421f8965126749d516358678996a145b503eb4d46b23aab31d24e233a324bd86e00de4ff0911ca31d94c75f3d13cbf27f7fdedb0061b74cf65e97599edc006695c3e96201eb127168deaf562c461ee4975456fd6a32084ab0fd26416e13a546deb27d911c7a071cfb1cd9f22ea3539b20f902af6a201413bcb019f7cf4c94986f96cc8de2643fe017bf561e4e1f656942a159c9e8a40f618d1fb9a7330e37badc704ba7b817a31139fe482e6e458837b1cd57e1b09667a394a392a2e33a95ebaf1f090587fbdb0f1d19023ba4a7f5eb738eee500ef10437939f064855f4830372a077b4f93e6e7430a6e702dfb9105fa11c64676b9cf19b3146d6a168fa1966f411c1793833fc1e34d621d0559a97f21f873bb85156d8d77c7a1492c72fa5df126857c451dd758c869800477ab18dfa84d19584ba30386cb186c344aa3c0190be79c1436f1b162809bedc337102541d2880bf587847d39292e0d258d94f9e91a84541d687734266ec9a22497848e744", 0x1000, 0x8000}, {&(0x7f0000001480)="e98e3a06a5c22111aa3a4923dbe120f43cc79cbb47338ae35b66b81391caf4183b6149c7cdaf8740a95f8132cb3c8289be26cee3b4", 0x35, 0x7}], 0x200010, &(0x7f0000001900)=ANY=[@ANYBLOB="6d66745f7a6f6e655f6d756c7469706c6953720000000000000000655f73656e7369746976653d7965733d3800393f7d37002c64697361626c655f7370617273653d6e6f3d00372c6d6674757a6f6e655f6d756c7469706c6965723d342c674f62ef788f4e18797e35372c6572726f72733d636f6e74696e75652c666d61736b3d353632313535343557e466fd4fa50d3882370f092c00cfe462c35590c00459d4c1fd5d29d7d34f575d0954db197e4177bdbe9f7297a076b0da1e733e5bb07ad9686756c362a027bd83e142dbfb632c"]) fallocate(r0, 0x3, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000140)={{0x7f, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x1, 'dh\x00', 0x19, 0x1, 0x40}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24, 0x10000, 0x9, 0x7, 0x101}}, 0x44) sendto$inet(r4, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) pwritev(r1, &(0x7f0000001a80)=[{&(0x7f0000001740)="3a73cea92fdf85df9eac9a5538ef93a6bee9f5754643bff0cd37d6d8f09413769009f81578cb86f89fd88aa6c3b367bf1a3b344632498b168ecd5850172effd71a7f2a28b875515346fe06ff39deeec0fa7f2810a325b01a0761a93ee662d9e807ca49070368c0afba0f58fa47498821ea019ae59ae6af2e0fc9f0894450ce44c75857a9a199376592fc9998f75a1d240e8d3e10708d7955de4ca08cb1c3a5d9766372de941534", 0xa7}, {&(0x7f0000001a00)="b796165f5e63ae881fa1b5c3ea07868a1eda1155626e11970fc26484acfdfb3c9e16d78fb4cee5177f4647e4a7cb140a2e2adeef1b4947feafc179300311d43f348566ae195e1028", 0x48}], 0x2, 0x0) r5 = syz_open_dev$amidi(&(0x7f00000015c0)='/dev/amidi#\x00', 0x1000, 0x40001) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000001700)='/dev/amidi#\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000001600)={{0xffffffffffffffff, 0x1, 0x6, 0x0, 0x7}, 0x20, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0x133, 0x2, 0x9}) close(r0) getsockopt(r5, 0x4, 0x8, &(0x7f0000001800)=""/226, &(0x7f0000001500)=0xe2) 13:58:48 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:48 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xc7c90000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 340.923684] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.929606] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.984448] XFS (loop3): mtpt option not allowed on this system [ 340.994665] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_zone_multipliSr. [ 341.012513] binder: 26074:26076 got transaction to invalid handle [ 341.018877] binder: 26074:26076 transaction failed 29201/-22, size 0-12288 line 2852 13:58:48 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200000) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:48 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xa, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:48 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000ffffffc300"}) [ 341.065329] binder_alloc: binder_alloc_mmap_handler: 26074 20002000-20006000 already mapped failed -16 [ 341.080098] XFS (loop3): mtpt option not allowed on this system [ 341.094385] IPVS: set_ctl: invalid protocol: 127 172.20.20.187:20001 [ 341.097087] binder: BINDER_SET_CONTEXT_MGR already set 13:58:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffff9c, 0xfffffffffffffefc, &(0x7f0000000140)={0x0, 0x0}}, 0x10) chdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x2a5f}, 0x10) 13:58:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x27e7]}, 0x10) [ 341.170062] binder: 26074:26084 got transaction to invalid handle [ 341.172738] IPVS: set_ctl: invalid protocol: 127 172.20.20.187:20001 [ 341.176505] binder: 26074:26084 transaction failed 29201/-22, size 0-12288 line 2852 [ 341.195138] binder: 26074:26076 ioctl 40046207 0 returned -16 13:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c653005", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:48 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 341.271501] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_zone_multipliSr. [ 341.331558] XFS (loop3): mtpt option not allowed on this system [ 341.413329] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.419755] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.443405] XFS (loop3): mtpt option not allowed on this system 13:58:48 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xef5b0000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:48 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x20000140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:48 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000001100"}) 13:58:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x77ec000000000000]}, 0x10) 13:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 341.563670] binder: 26146:26147 got transaction to invalid handle [ 341.570056] binder: 26146:26147 transaction failed 29201/-22, size 0-12288 line 2852 13:58:49 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x14, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e20, @loopback=0x7f000001}, 0x180, 0x0, 0x7886, 0x7f, 0x101, &(0x7f0000000040)='sit0\x00', 0xbdfa, 0x8, 0x80}) r2 = socket$inet(0x2, 0x4000000000000004, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r1 = getpgid(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x3, 0x7f, 0x8000, r1}) sendto$inet(r0, &(0x7f0000000140)="ccc5e67d4344ec3797e38574c50806cc1ac26c823a8fbc91659e351568b890a27ac5c545270c532573cf3e5c9ab3ad9ba1cfcd9bbfb8e4df0be8577e1e7eb977d34bb37e5338d8f3da6cff9378ffd451b4383d67c53db5dd5a207e60fe5bd98e53d188f388f4d69e5321481d93856b3f0201002807c56a9140fb445622acae8e5e256517e0", 0x85, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 341.618392] XFS (loop3): mtpt option not allowed on this system 13:58:49 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xf73, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:49 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000ffffffc300"}) [ 341.676285] binder_alloc: binder_alloc_mmap_handler: 26146 20002000-20006000 already mapped failed -16 [ 341.699627] XFS (loop3): mtpt option not allowed on this system [ 341.742428] binder: BINDER_SET_CONTEXT_MGR already set 13:58:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xe803000000000000]}, 0x10) 13:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 341.779107] binder: 26146:26147 ioctl 40046207 0 returned -16 13:58:49 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 341.833139] binder: 26146:26164 got transaction to invalid handle [ 341.839621] binder: 26146:26164 transaction failed 29201/-22, size 0-12288 line 2852 [ 341.918944] XFS (loop3): mtpt option not allowed on this system 13:58:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000000002004e227f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000407db5e6608ed21b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e24e0000002000000000000000000000000cf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000400000000000000000000000000"], 0x190) 13:58:49 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x5dc, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x1d, &(0x7f0000000180)="025cc83d6d345f8f760070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400400) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)=0xf7d3) r2 = socket$inet(0x2, 0x0, 0x1200000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x3f23, 0x4, &(0x7f0000000440)=[{&(0x7f0000000240)="f1e9742911ec3e6256ef8c8161ebd54292d5c51ebd1fe072f14a99373495afc76802bb0028dcc55cf623", 0x2a}, {&(0x7f0000000280)="604b5dbf138071bde918fb16917aa17db6e7aab18e728910e4776411e5aa8efb7ae1b8adbb9562958e7059d96b7e81ecb15c99faa39a9a243df9d94a9370ea8f6e97c26adbba5e3b25d81daa0508cd61af738b6d1ef682b38fb011950099e069c3165d4e822dfdd365c3292e9f5f4c3fc2a17f2ec5804c71fa0e7249e58df852090d3fe18dd5900d30b6ca60a8217f2a07729f93e3dd840d0997e001481d7a3f3370d082df6608e6f65186c6e4865a6ada0ecec3", 0xb4, 0x9}, {&(0x7f0000000340)="a5200304b5", 0x5, 0xfffffffffffffffd}, {&(0x7f0000000380)="09938db9d4e70778daa0ba0a5bb3b4daa77a28c18bc2171ea17f72a8808b886f50edea759041444bf35bcdb1b0d7741f8ef10a010cfdbbe192ab040618928fdcaaaa73756a708fd88f2abe8e753cae2fcab8bc99d97546948b76bdeb6d1060a8d0993971da9a45bfc307101ec56f26d7c34a8dbb28dffe9e8bdcebc42c915902411940afa765513e1390c5523473363af05b49ae", 0x94, 0xffffffff}], 0x2, &(0x7f00000004c0)={[{@errors_ro_remount='errors=ro-remount', 0x2c}, {@jdev={'jdev', 0x3d, './file0'}, 0x2c}, {@hash_tea='hash=tea', 0x2c}, {@errors_ro_remount='errors=ro-remount', 0x2c}, {@resize={'resize', 0x3d, [0x37, 0x3d, 0x3f, 0x3f, 0x0, 0x33]}, 0x2c}, {@usrjquota_file='usrjquota=syz', 0x2c}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation', 0x2c}, {@balloc_test4='block-allocator=test4', 0x2c}]}) syz_open_dev$sg(&(0x7f0000000580)='/dev/sg#\x00', 0x9, 0x380) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0t', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:49 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000000000f00"}) 13:58:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x8a0d000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xcf44000000000000]}, 0x10) 13:58:49 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 341.968426] XFS (loop3): mtpt option not allowed on this system [ 341.990460] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.996417] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.099176] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "hash=tea" [ 342.104687] binder: 26217:26223 got transaction with invalid offsets ptr [ 342.127282] XFS (loop3): mtpt option not allowed on this system 13:58:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(r0, r0, &(0x7f0000000040), 0x3) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:49 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x4b05000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 342.169972] binder: 26217:26223 transaction failed 29201/-14, size 0-12288 line 2995 [ 342.194385] XFS (loop3): mtpt option not allowed on this system 13:58:49 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:49 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000200"}) [ 342.220832] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "hash=tea" [ 342.231336] binder_alloc: binder_alloc_mmap_handler: 26217 20002000-20006000 already mapped failed -16 13:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0L', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc7c90000]}, 0x10) [ 342.309452] binder: BINDER_SET_CONTEXT_MGR already set [ 342.344070] binder: 26217:26223 ioctl 40046207 0 returned -16 13:58:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x3f, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000002c0)={0xd3a, 0x9, 0x33ca9e0f, 0x6, [], [], [], 0x11, 0x2, 0x7, 0x100000000, "918c3d4ee028d29f1ce2e213bf7d6032"}) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0xf, &(0x7f0000000140)=0x7, 0x4) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)={0x6, 0x82, "8f064ab59426f25d74ae66f4dea7c4546d1e5e373c695bd82967f374dc231148f3a8f8da7445c4057b39e4742a9cbfc3e919a4033aa68374d5740b28e13ab6f04512d91411494f55956ccb46c80de012ce0465c0cb56e606749824cb7a3d898bc50b5e6158530f7b993c7bb22f6a0abef886d26ddc381f1f473c2404cf6f2ab17817"}) 13:58:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) [ 342.373626] binder_alloc: 26217: binder_alloc_buf, no vma [ 342.379279] binder: 26217:26251 transaction failed 29189/-3, size 0-12288 line 2967 13:58:49 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xffc3000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 342.433443] XFS (loop3): mtpt option not allowed on this system [ 342.496319] XFS (loop3): mtpt option not allowed on this system [ 342.541727] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.548925] binder: undelivered TRANSACTION_ERROR: 29201 13:58:50 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:50 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000c3ffffff00"}) 13:58:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$void(r0, 0x0) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:50 executing program 1: r0 = socket$inet6(0xa, 0xc2a04caeb2a9555, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x101}, 0x8) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:50 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xa14f, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x3705]}, 0x10) [ 342.713114] binder: 26306:26308 got transaction with invalid offsets ptr [ 342.735765] XFS (loop3): mtpt option not allowed on this system 13:58:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) poll(&(0x7f0000000040)=[{r1, 0x4008}, {r0, 0x400}, {r1, 0x4}, {r0, 0x8000}, {r1, 0x100}, {r0, 0x8}], 0x6, 0xfffffffffffffffa) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="0a2ab64c916444eec21ead069c054d335a8d0cf9eb596247969cb830c57d46bb43bd8215f747d3f4d4340267b53560c92e35cdaf8795c40fe0eb217e046afd2abc7e05cded62e1b744aff4e40b0214e3202f4c42320a41d1ee7b59d27cd88e7967dd36b412bffdc02b5ffab919544200e03a112870c6d3e6364feea5db1ecd2903ed8128ea2d478c70d5853ada836fb00addcad4a6766c0c2393fdd2687c86d7b5076dcd759e637403c65ab57a3a8d88cf5a4aaacd93499f974c4d7f476196a1fec46814993bc93e0e8ae98648a4660c62fc7952604c2f2ea8be59f382c8eaa05642e203e22224a10af2ddd4125a0c222f89a915e3be79", 0xf7}, {&(0x7f0000000240)="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", 0x1000}], 0x2, 0x8) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001240)="b91944", 0x3) close(r0) [ 342.778178] XFS (loop3): mtpt option not allowed on this system [ 342.787112] binder: 26306:26308 transaction failed 29201/-14, size 0-12288 line 2995 13:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c653003", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:50 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x2f8a0000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:50 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000100"}) 13:58:50 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xe727]}, 0x10) [ 342.854532] binder_alloc: binder_alloc_mmap_handler: 26306 20002000-20006000 already mapped failed -16 [ 342.932360] binder_alloc: 26306: binder_alloc_buf, no vma [ 342.938191] binder: 26306:26330 transaction failed 29189/-3, size 0-12288 line 2967 [ 342.947246] binder: BINDER_SET_CONTEXT_MGR already set [ 342.960112] XFS (loop3): mtpt option not allowed on this system [ 343.001277] binder: 26306:26308 ioctl 40046207 0 returned -16 [ 343.021269] XFS (loop3): mtpt option not allowed on this system 13:58:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x3e9) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$inet6(0xa, 0x4, 0xfffffffffffffff8) sendto$inet(r0, &(0x7f0000000100)="8d", 0xfffffffffffffe54, 0x800e, &(0x7f0000000040)={0x2, 0x400000000000, @broadcast=0xffffffff}, 0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x5ba669a2799be7c6, 0x0) recvfrom$ax25(r2, &(0x7f0000000140)=""/31, 0x1f, 0x2060, &(0x7f0000000180)={0x3, {"a7a9ddc7095c67"}, 0x9}, 0x10) close(r1) 13:58:50 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xc9c7, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xe4380300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:50 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:50 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000400"}) 13:58:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xe7e00000]}, 0x10) [ 343.106490] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.112659] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.205212] XFS (loop3): mtpt option not allowed on this system [ 343.214818] binder: 26374:26384 got transaction to invalid handle [ 343.221160] binder: 26374:26384 transaction failed 29201/-22, size 0-12288 line 2852 13:58:50 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xdc05000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 343.275768] XFS (loop3): mtpt option not allowed on this system 13:58:50 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 343.335611] binder_alloc: binder_alloc_mmap_handler: 26374 20002000-20006000 already mapped failed -16 13:58:50 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000001100"}) [ 343.422795] binder: BINDER_SET_CONTEXT_MGR already set [ 343.424844] XFS (loop3): mtpt option not allowed on this system [ 343.451987] binder: 26374:26384 ioctl 40046207 0 returned -16 [ 343.488513] binder: 26374:26393 got transaction to invalid handle [ 343.494946] binder: 26374:26393 transaction failed 29201/-22, size 0-12288 line 2852 [ 343.511362] XFS (loop3): mtpt option not allowed on this system [ 343.593798] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.599849] binder: undelivered TRANSACTION_ERROR: 29201 13:58:51 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x201, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000440)={0x100000000, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xa4a, 0x800) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') perf_event_open$cgroup(&(0x7f0000000480)={0x5, 0x70, 0x7, 0x9, 0x1f, 0x3, 0x0, 0x8810, 0x8000, 0x1, 0x0, 0x8, 0x7f, 0x100000000, 0x75f, 0x5, 0x3, 0x0, 0x3, 0x80000001, 0x11, 0x80, 0x2cbf, 0x5, 0x1, 0xfffffffffffffff9, 0x4, 0x200, 0x7fffffff, 0x1, 0xfffffffffffffffb, 0x3, 0xee, 0xaa51, 0x7, 0x8, 0xfef0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x5, 0x1}, 0x10, 0xf18, 0x4cc, 0x7, 0x8, 0xffffffffffffff7d, 0x7f}, r2, 0x6, r2, 0x8) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd221e31ffd5b9b0c100fddbdf25030000000875ff0003000000080004000100000008000000110002000a00000008020000000000080002000a00000008"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x6) 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x1000000]}, 0x10) 13:58:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="5472757301010000272c006026d1aca9a3ceef81dc61ed7fd0df606c91ac80f6f2221cfd36a60a910e0d702ca0800aa0b0f8a7a3119812b5a40d50b0fb18b273767baa0429dbe82e87afa073a3686942f49805a771644dafc7c8c64de6e92b4596107f6018f91e4359da2cf19ededb99878a2d657dc9ea69ed64c05d4bf4b89eb2afd66be7074ab15938d41a189f5c7f86e4f25a48b7528cee0a1cb8fbaac66607399894de9d0e58e6335490319d1f59840fd57416aabd75e13ca36852c8e334ef59f2842a39e312bef18ec1979cfc5a15265fcf480c5873475a0ecb4be59f39fc050c2ff7a468be8fdbedd4d1d0e1c6cba90a7f27cbb4f71b"], &(0x7f0000000180)=""/167, 0xa7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x100000000, 0x541000) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240)=0x5, &(0x7f00000003c0)=0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) fcntl$setlease(r0, 0x400, 0x0) 13:58:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:51 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x879b0000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:51 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000000000200"}) 13:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 343.712992] XFS (loop3): mtpt option not allowed on this system [ 343.729339] binder: 26437:26444 got transaction to invalid handle [ 343.735685] binder: 26437:26444 transaction failed 29201/-22, size 0-12288 line 2852 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendto$inet(r0, &(0x7f0000000240)="c21004bf70b2556929fa46c50cf60c538dcd55db2e576bf1a870dc8cb1282b4bcace5aa6940aef88d2bf1f6f05a00e961883a0c7834f0fd7c7df44e467aacb5dcf6efaf248558f4b159b5a06ffe66bad4af13c1eeabd59e12c170f76cdf431349c913f4cbce2fabd040d98d2d1fb2d64ee26ba0540a2e3e7d71e68883c78c0fb178f21e0f249be298e0bc49f241f08f5bf8883b96c89f13869e1656f2ed8dd8381be953de406074ab338ad7a88dbb77649cabadbdeb0a03f", 0xb8, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x800, @mcast2={0xff, 0x2, [], 0x1}, 0x7f}], 0x4c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10100, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) close(r0) syncfs(r0) 13:58:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x14, 0x80000) r2 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002980)={'tunl0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, r3}, 0xc) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000200)={0x8, 0x9}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r4, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r4) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x8001, 0x100000001, 0x40]}, 0xa) 13:58:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x37be]}, 0x10) [ 343.772108] XFS (loop3): mtpt option not allowed on this system [ 343.778698] binder_alloc: binder_alloc_mmap_handler: 26437 20002000-20006000 already mapped failed -16 [ 343.807650] binder: BINDER_SET_CONTEXT_MGR already set 13:58:51 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x1f220000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 343.841018] binder: 26437:26444 ioctl 40046207 0 returned -16 13:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:51 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00?\x00'}) 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000040)={0x399f1336, r1}, &(0x7f0000000140)={0x100000001, 0x7fff, 0xffffffffffff0000, 0x7098, 0x1000, 0x5}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x3}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000002c0)={0x80000000, 0x40, 0x8, 0x8, 0x647, 0x0, 0xfffffffffffff001, 0x1, r4}, 0x20) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000300)={'erspan0\x00', {0x2, 0x4e24, @rand_addr=0x4}}) [ 343.962435] binder: 26437:26481 got transaction to invalid handle [ 343.968795] binder: 26437:26481 transaction failed 29201/-22, size 0-12288 line 2852 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x1e5, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x19a) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 344.016576] XFS (loop3): mtpt option not allowed on this system [ 344.047434] XFS (loop3): mtpt option not allowed on this system 13:58:51 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xa7b20000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xf78f]}, 0x10) 13:58:51 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000feffffff00"}) 13:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x3f, 0x8) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="a7d428f9cd3d16a1f7267eed6db6b5eb559eda441d3b7c93fdcdac94bbfc4513fe24c84980cc987c79d20f06cb33d544009022c571fa94bf29e7a6ed21649300", 0x40, 0x800e, &(0x7f0000000140)={0x2, 0x2000000000000000, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x9, 0x100) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xba, 0x404201) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x34, 0x4) r2 = dup(r1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 344.223556] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.229661] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.284377] XFS (loop3): mtpt option not allowed on this system [ 344.310728] binder: BINDER_SET_CONTEXT_MGR already set 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:51 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x37cb, 0x101001) recvfrom(r0, &(0x7f00000001c0)=""/138, 0x8a, 0x100, &(0x7f0000000280)=@sco={0x1f, {0x2, 0x1, 0x80000001, 0x4028, 0x0, 0x6}}, 0x80) r1 = socket$inet(0x2, 0x7, 0x8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 344.352465] binder: 26529:26531 ioctl 40046207 0 returned -16 [ 344.355725] XFS (loop3): mtpt option not allowed on this system [ 344.386116] binder: 26529:26531 got transaction to invalid handle [ 344.392466] binder: 26529:26531 transaction failed 29201/-22, size 0-12288 line 2852 13:58:51 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000000000100"}) 13:58:51 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x80ffffff, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x80000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:51 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x57d5]}, 0x10) [ 344.452630] binder_alloc: binder_alloc_mmap_handler: 26529 20002000-20006000 already mapped failed -16 [ 344.501645] XFS (loop3): mtpt option not allowed on this system [ 344.535407] binder: 26529:26546 got transaction to invalid handle [ 344.541787] binder: 26529:26546 transaction failed 29201/-22, size 0-12288 line 2852 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 344.575525] XFS (loop3): mtpt option not allowed on this system [ 344.669836] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.678117] binder: undelivered TRANSACTION_ERROR: 29201 13:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:52 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) 13:58:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xe7270000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x800000000004e23, @rand_addr=0x4}, 0x5) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = fcntl$getown(r1, 0x9) waitid(0x3, r2, &(0x7f0000000040), 0xa, &(0x7f0000000140)) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc710000000000000]}, 0x10) 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:52 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xe85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 344.826448] binder: 26595:26596 got transaction to invalid handle [ 344.832880] binder: 26595:26596 transaction failed 29201/-22, size 0-12288 line 2852 [ 344.842622] XFS (loop3): mtpt option not allowed on this system 13:58:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r2 = accept$inet(r1, &(0x7f0000000040)={0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x42, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 344.889934] XFS (loop3): mtpt option not allowed on this system 13:58:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x17a7, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:52 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000fffffdfd00"}) [ 344.931425] binder_alloc: binder_alloc_mmap_handler: 26595 20002000-20006000 already mapped failed -16 [ 345.008212] binder: 26595:26617 got transaction to invalid handle [ 345.009104] binder: BINDER_SET_CONTEXT_MGR already set [ 345.014574] binder: 26595:26617 transaction failed 29201/-22, size 0-12288 line 2852 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x900000000000000]}, 0x10) 13:58:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) sendmsg(r0, &(0x7f0000001e40)={&(0x7f0000000740)=@hci={0x1f, r1, 0x2}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000007c0)="544c9a19898ae7f64da18452f2ef50311542a03248f7c67f2670a21d2f9cb488426873f195e415b6aa7884b08b18985add93ca5038531d376194131f1a4b9f678039fb1224132d370f63868cc02b209c4926e8d203f2b6b597c324dd58a6e8fc0b5278a20fe06b67c565160638c5db00f53169789136c551873fe576bb3b4fa4300298ecaf77be598af72f129214f93617f4f8aaad9d25f4721a91ad66aa5cf102de19590fbe471d9f579d0bb2b0740afa08e6669c03d7fe23a777534d1be852d84be7737ecbde9461b3c4711ed1ebae0c538f268ed5bf77ac624eb09f601f1d8aad8051d902dcc543979e36c36e356b34d7385a", 0xf4}, {&(0x7f00000008c0)="14", 0x1}, {&(0x7f0000000900)="c15258667b9a2697d1db2e3703f1e74cb24b6fc8cec49f4cd3ae741cd3b15b395382dc9fe93a2333662d30446541cdd46734b87aa908ec6c782f4a63e35caea37958d71c2f597a27682b7d3c5d45aa3ecd0544f0e4fc626cb6c4347db2fac92a767c4f1f1abac1169edd2dea5f300e2eaaa994380396e877639213a7d0f21d96a3156188f75278e2a7ef52035a45f1b18c117268c63d41b988d2a268d4f755737ef54431ca4dd1ef3d9570f6c49bcbe800f669bb96b2ba4b04d32dfc3bf666121f179b56c6ff3b18b526ea2ce4f136ff18333d63062066ac162f863a413a29d2ea198f1b6e825d", 0xe7}, {&(0x7f0000000a00)="8a3c3da83e9ff9d0ea0086fd404c08a83bd2d7d28f6f584c8b8e2fd4497a54d212b8808f216b6c1514c3a48c2c11e512826af62a6e7e2cd06366a58b8579552e4449b7008247fd5537e6b6a975c3da3ac063738d2f055d045f6f18a0dd5003004f35ca40a18b01630385fffc9638f2", 0x6f}, {&(0x7f0000000a80)="898102464fd0375ba00d46d850af07d04dbf64a8486bafc96f3f704ccf04b6d02625b1df567fd1c7d930ed8bd850eb5528f8bd869c961a54a17a20522f0cacf827a52092a786c4ac2bbd082ebd7ab49af6b6960c06b8fa0bb56f526796f7d70f9862ad79328f0ddd4e0fa492bd0cc4a6e20d67a2bbcc28264f6032c6f56d822eb821f2357976e58eef78b2ab51694503defdf99ac42101fcaca315a49951971a38d9639db0ba8b7e51aae2ef432a22014a901ff02fc7f6583e", 0xb9}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="e5e17a486830c2ea", 0x8}], 0x7, &(0x7f0000001c00)=[{0x10, 0x11d, 0x8001}, {0xe8, 0x0, 0x7, "2361f96327331b5ce7f4f6a5e9e3dd5e5ebe1783a394251772de84f849f8533846772d1a578fd86009bc0101849c890d0512fa309a24bd533ff6d9d7e174bb3de5d818a583cd6caba265f9a95da02935f50f70b34c698979a7943fe5dd013bf92cb3d21fa593723ad77cce471da0b10ac9d81f23ffa02d45af796bb9d179ae1b260f98adc091604517fae7b4c9925342cb10b75bede0f06d554b6ae3eea7f69f62993e71ab70834eaceca371dfd244d99cc7d0a15f40bddd4e8f3eec4b96827b94e0e27a0af11c8951e526242ce7eff728cd108212365a"}, {0xa8, 0x119, 0x1ff, "4428acd27b167224ac2d1ddfd2d433112cd199f33b01ed5a9d9ecc02cb02c47057e36dec13c54bf39bc7234a29c38bba0940e77c96bcea8a6ddfb5a7e50b5a832e8a5bc6ac4cbb9bef3d9bdecf0e2cdae446f6b9a9c3cb961f41da1606f778873cba8fbaad55a33fbf06351a59e5b3bd35f4d694c0ebcc2a5e7fbf82f85aff1607fc2bc79c6b367db4f07da4ca2b30e23a5a"}, {0x68, 0x11c, 0x7f, "9502fc2a2c600f4ac51e7a0aa5a7f1a9f6c733b7a99a6272a379a815fcb507d94d4b90b23e64c5f048e781f401a6dfdc3482bbaf7938a9c03eba1ec9cd94764ce0923dc325ad7af53a78b34228bd0b5864d7b5dabd"}], 0x208}, 0x8001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x8}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) close(r0) [ 345.058916] XFS (loop3): mtpt option not allowed on this system [ 345.123654] XFS (loop3): mtpt option not allowed on this system [ 345.197733] binder: 26595:26596 ioctl 40046207 0 returned -16 13:58:52 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x3b5) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xd557, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:52 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000fffffffe00"}) 13:58:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x1c6) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x318) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xafe6000000000000]}, 0x10) 13:58:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x33898, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 345.302682] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.308859] binder: undelivered TRANSACTION_ERROR: 29201 13:58:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffeaf) close(r0) sendto$inet(r0, &(0x7f0000000140)="973cc9c221e764a55e7ff48cd845aaef4b8c2ede1038a0f447d69190edbc6cd5778713baf028aa2f42c87b7143e7b5efa7234c76b9a4ea629677d8e0b77fe6b1e1c9849ac460654975414ebdd2f17d46ac205d27f1f1a7dfc3cf48629ce05619179aab9050df0f49bb75fde8d0dc10a25efd92ea2adc30eb6b625104cf459a024fc59c20e87fa005249c00efc5e28cc9c29c4a0023553cc76b4dd6483f32ab17490097fa3bb80b5a2f2dc4832ffad293af53274f21", 0xb5, 0x0, 0x0, 0x0) 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 345.374481] binder: 26673:26674 got transaction to invalid handle [ 345.380869] binder: 26673:26674 transaction failed 29201/-22, size 0-12288 line 2852 [ 345.392252] XFS (loop3): mtpt option not allowed on this system 13:58:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xd778, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000000040), &(0x7f00007adff0)={0x77359400}, 0x8) close(r4) close(r1) 13:58:52 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00Y\x00'}) [ 345.458305] XFS (loop3): mtpt option not allowed on this system 13:58:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) rt_sigaction(0x10, &(0x7f0000000040)={0x0, {0x8}, 0x2, 0x9}, &(0x7f0000000140), 0x8, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000200)=0x80) [ 345.520949] binder_alloc: binder_alloc_mmap_handler: 26673 20002000-20006000 already mapped failed -16 13:58:52 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x8f160000]}, 0x10) 13:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:53 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xcf44000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 345.609743] binder: BINDER_SET_CONTEXT_MGR already set [ 345.646589] binder: 26673:26674 ioctl 40046207 0 returned -16 13:58:53 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000c0ffffff00"}) 13:58:53 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) [ 345.676884] XFS (loop3): mtpt option not allowed on this system [ 345.684579] binder: 26673:26700 got transaction to invalid handle [ 345.690935] binder: 26673:26700 transaction failed 29201/-22, size 0-12288 line 2852 13:58:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0xfffffffffffffcba) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'syz_tun\x00', 0x3}) close(r0) [ 345.751374] XFS (loop3): mtpt option not allowed on this system [ 345.816156] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.823920] binder: undelivered TRANSACTION_ERROR: 29201 13:58:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x7f80000]}, 0x10) 13:58:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:53 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xe7e0000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:53 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="8d", 0xfffffffffffffe27, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x1a) close(r1) 13:58:53 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000fffffff500"}) 13:58:53 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0xfffffffffffffe14) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = dup2(r3, r2) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0xd5dd}, 0x1) getpeername$llc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000540)=0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) syz_mount_image$ceph(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x4, &(0x7f0000000480)=[{&(0x7f00000002c0)="de09eb86a5f44c93eda8c70bad3d680ac6bd213e0a5457ce3d23dfc52bd21a48ab9649ffb672dfc10e226726eb0c58419932c11e452b5f96a7ee880f20ab684d5a2bb5ce09a5a376501d71f3f7cb10526a2df350672ebe3f01b62212dbfeefd3e2eddae223c941e19d7515955be4309f8e9010f71a37d173d2abcc08ce901539b59a817665d60278e346be1711f0282d43834e7fd0932e009e09226ed5fadec22dd08a794dec0414007753b523b520d417a2971d2deaec", 0xb7, 0x4}, {&(0x7f0000000200)="df9c9933d0bddce8566bb8a657514aa2f8432c", 0x13, 0xffffffff}, {&(0x7f0000000380)="179e5dae6fd3406d6d6edb93d2875858132f0ad8d9c93ddd9084c8c47ecb18135ea22308de3272abb57db2625a5ce69ae7ccdc72b46b54c36dceb10fd31cadf07d503f3ee48ef4e7f1789eebc3a418b83386982114e8a40bc6f1426a5cde64d068eee5376e4ea93998b2495cc9d57c3ea5f1a9fe0c087b455efd8ab360f3d080a63c89d445fc9a55ed6d7cb8ec88163ddf07dabe12cac4d25facaf772d24ec971e65e1636ba423634ba5d9108f1473897e2ddbfacd51c0100c4949d59eb4f8b68809d545efd06b008b91ef5211ae859a5d926915b801eb22a6", 0xd9, 0x4}, {&(0x7f0000000240), 0x0, 0x8001}], 0x1000080, &(0x7f0000000500)='/proc/self/net/pfkey\x00') close(r0) [ 346.523188] binder: 26763:26765 got transaction to invalid handle [ 346.529513] binder: 26763:26765 transaction failed 29201/-22, size 0-12288 line 2852 [ 346.542469] XFS (loop3): mtpt option not allowed on this system 13:58:53 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(r1) [ 346.568257] ceph: device name is missing path (no : separator in /dev/loop2) [ 346.610776] XFS (loop3): mtpt option not allowed on this system [ 346.641670] binder_alloc: binder_alloc_mmap_handler: 26763 20002000-20006000 already mapped failed -16 13:58:54 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x9f7e0000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x5, 0x8, 0x3a, 0x0, 0xffff, 0x1000, 0xd000, [], 0xffffffffc9ece283}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x10001}, 0x2) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000000000200"}) [ 346.663355] ceph: device name is missing path (no : separator in /dev/loop2) [ 346.742775] binder: BINDER_SET_CONTEXT_MGR already set [ 346.784109] binder: 26763:26765 ioctl 40046207 0 returned -16 [ 346.828663] binder: 26763:26786 got transaction to invalid handle [ 346.835079] binder: 26763:26786 transaction failed 29201/-22, size 0-12288 line 2852 13:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x8467]}, 0x10) 13:58:54 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000140)="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", 0x1000, 0x40000, &(0x7f0000000040)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$addseals(r0, 0x409, 0x5) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:54 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x8fcf, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:54 executing program 1: recvmmsg(0xffffffffffffff9c, &(0x7f00000049c0)=[{{&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f00000014c0)=""/4, 0x4}, {&(0x7f0000001500)=""/215, 0xd7}, {&(0x7f0000001600)=""/165, 0xa5}], 0x6, &(0x7f0000001740)=""/138, 0x8a, 0x10000}, 0x1}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001800)=""/72, 0x48}, {&(0x7f0000001880)=""/7, 0x7}, {&(0x7f00000018c0)=""/97, 0x61}], 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x2}, {{0x0, 0x33e, &(0x7f0000001a00)=[{&(0x7f0000001980)=""/97, 0x61}], 0x1, &(0x7f0000001a40)=""/47, 0x2f, 0xfffffffffffffffb}, 0x1000}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a80)=""/160, 0xa0}, {&(0x7f0000001b40)=""/84, 0x54}, {&(0x7f0000001bc0)=""/40, 0x28}, {&(0x7f0000001c00)=""/90, 0x5a}, {&(0x7f0000001c80)=""/7, 0x7}, {&(0x7f0000001cc0)=""/146, 0x92}], 0x6, &(0x7f0000001e00)=""/4096, 0x1000, 0x5}, 0x5}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000002e00)=""/42, 0x2a}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/51, 0x33}, {&(0x7f0000003e80)=""/78, 0x4e}, {&(0x7f0000003f00)=""/139, 0x8b}, {&(0x7f0000003fc0)=""/139, 0x8b}, {&(0x7f0000004080)=""/118, 0x76}, {&(0x7f0000004100)=""/255, 0xff}, {&(0x7f0000004200)=""/178, 0xb2}], 0x9, 0x0, 0x0, 0x80000000}, 0x80000001}, {{&(0x7f0000004380)=@xdp, 0x80, &(0x7f0000004640)=[{&(0x7f0000004400)=""/115, 0x73}, {&(0x7f0000004480)=""/73, 0x49}, {&(0x7f0000004500)}, {&(0x7f0000004540)}, {&(0x7f0000004580)=""/140, 0x8c}], 0x5, &(0x7f00000046c0)=""/54, 0x36, 0x2}, 0x60a605ce}, {{&(0x7f0000004700)=@generic, 0x80, &(0x7f0000004880)=[{&(0x7f0000004780)=""/233, 0xe9}], 0x1, &(0x7f00000048c0)=""/202, 0xca, 0x4828}, 0x80}], 0x7, 0x40000020, &(0x7f0000004b80)={0x0, 0x1c9c380}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000004c40)={0x0, 0x80000001, 0x8000}, &(0x7f0000004c80)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000004cc0)={r1, 0x400, 0x1, 0x100000000}, &(0x7f0000004d00)=0x10) r2 = socket$inet6(0xa, 0x801, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="6238cc3c93ff070dea987a55e987ad16ae0a7b1286983078351c0aababd4de96780ba008fdb1f6325dd5592add548f79420621def2eef370037a3d889fb757b469f9a9cb85aeb3946cadcbdd97b006") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7c2b0bf3) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400100, 0x64) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r4, r5, 0xb, 0x1}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000f5ffffff00"}) [ 346.905296] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.911421] binder: undelivered TRANSACTION_ERROR: 29201 13:58:54 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(r1) [ 346.965643] XFS (loop3): mtpt option not allowed on this system 13:58:54 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x5c8, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x7, 0x80e07095b4c4c6d, 0x9) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) [ 347.012295] XFS (loop3): mtpt option not allowed on this system [ 347.024537] binder: 26831:26832 got transaction to invalid handle [ 347.030903] binder: 26831:26832 transaction failed 29201/-22, size 0-12288 line 2852 13:58:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x6fb8000000000000]}, 0x10) 13:58:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000ffffffc000"}) 13:58:54 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x101000) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 347.170638] binder_alloc: binder_alloc_mmap_handler: 26831 20002000-20006000 already mapped failed -16 13:58:54 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x7733000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x4000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000001200)={0x0, 0x9, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[{0x3, 0x9e7}, {0x3, 0xfffffffffffffffc}, {0x0, 0x1}, {0xb, 0x81}, {0x2, 0x800}], 0x5) recvfrom(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x100, &(0x7f0000001180)=@ax25={0x3, {"abf3ac8e484796"}, 0x9}, 0x80) [ 347.257721] binder: BINDER_SET_CONTEXT_MGR already set [ 347.257728] binder: 26831:26855 got transaction to invalid handle [ 347.257750] binder: 26831:26855 transaction failed 29201/-22, size 0-12288 line 2852 [ 347.287013] binder: 26831:26832 ioctl 40046207 0 returned -16 13:58:54 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) [ 347.314010] XFS (loop3): mtpt option not allowed on this system 13:58:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00 \x00'}) [ 347.388617] XFS (loop3): mtpt option not allowed on this system [ 347.416342] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.430419] binder: undelivered TRANSACTION_ERROR: 29201 13:58:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x9, 0x9, 0x8, 0x5, 0x0, 0x4, 0x4]}) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0x3, 0x7fff, 0x1f, 0xd4, 0x8, 0x2, 0x100, 0x7fffffff, 0x7, 0x7, 0x100}, 0xb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x80000001, 0xfff, 0x3, 0xa944, 0x9}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r2, &(0x7f0000000300)=0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x94802, 0x0) accept$ipx(r3, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$llc(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000003c0)=0x10, 0x80000) 13:58:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000140)="62d5306d48a2a57e7f153693c771d8bbefd1401d6f8c5aa5e42feddd2bb84dbecb7200664695813ca45e3155851c85107fc506d950b88ec813f4b4bbc83c6b3bb90f365fcf2784c4ebdf94", 0x4b, 0x80, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:54 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xe7270000]}, 0x10) 13:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530fd", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6966623000000f00"}) 13:58:54 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xff0a000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 347.637550] binder: 26914:26917 got transaction to invalid handle [ 347.643906] binder: 26914:26917 transaction failed 29201/-22, size 0-12288 line 2852 [ 347.650041] XFS (loop3): mtpt option not allowed on this system 13:58:55 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x44, &(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) sendto$inet(r1, &(0x7f0000000140)="c63214eb3ed449e529424fed9ef81eba15b176bfbe14df10729b1a1667cf603d53ad87249a48fc78eba799d81d9182428a3df708ab8cbe45f2d6eff455e0e6fe759c678f84a74efa09a70e0697f776241851d76dbb5f88c4a3e0618680095e9c8e35b1a6b897f26e370b71ca150482e7a67258f89c86e9ebdae026c2bc45063bbc42f1c762bfc05362bdec69e2e74541bb2bca30438f4f4ee690deabc86082b84933d9dc750080ed462ab66d73c6f57418d716230c8a5bf20334602c038cd6d6a116827d33456a9ab146cbd43e896258f7a35c31aaf89fc11bf3681722e385aeea88a4320cd8feb35bcf17494a4e", 0xee, 0x10, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 13:58:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 347.705620] XFS (loop3): mtpt option not allowed on this system [ 347.732125] binder_alloc: binder_alloc_mmap_handler: 26914 20002000-20006000 already mapped failed -16 13:58:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x57d50000]}, 0x10) 13:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530ff", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:55 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x37be000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:55 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x44, &(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:55 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00Y\x00'}) [ 347.827142] binder: BINDER_SET_CONTEXT_MGR already set [ 347.863973] binder: 26914:26917 ioctl 40046207 0 returned -16 [ 347.901581] binder: 26914:26936 got transaction to invalid handle [ 347.907949] binder: 26914:26936 transaction failed 29201/-22, size 0-12288 line 2852 [ 347.909486] XFS (loop3): mtpt option not allowed on this system [ 348.026070] XFS (loop3): mtpt option not allowed on this system [ 348.048916] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.059257] binder: undelivered TRANSACTION_ERROR: 29201 13:58:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x5c8]}, 0x10) 13:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:55 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000fffffdfd00"}) 13:58:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x440, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000940)={0x1, [0x0]}, &(0x7f0000000980)=0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0xb6) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x5e3, 0x9, 0x10000, 0x1, 0x7ff, 0x2, 0x3e, 0x10001, 0x67, 0x38, 0x2c7, 0x9, 0x2, 0x20, 0x2, 0xffff, 0x9, 0x9}, [{0x4, 0x8, 0x1, 0x8, 0x2, 0x8001, 0x7, 0x6}], "5a74622fc4dcf1a102f5f61549919d5bfad1bce0ebbde0e34a04582feff0abd9cefbde98cd96226380bc447ae8fb46fdd4b57566b642df11dba1defcc9d6697263ebbe1f2224dead848bb880bb7f02be263484dfccc0fd0f649f4ca9307d968020264636e05ec7717f10616a4cb92fce554e3aa64cc4f42e86f270d795aa3272ffab22e9880464d5561588b0b3c2361ce5fcd22b3052ba57f46911b11c539977831356be0e76fb1e7d4b75d139b56e16ea8ba4f2014edc366e1cb97051de5f492b0fb08b27df3109444ec96c3401c8553c7d2177e55f2c489949c9b7eae43bfd72ada9190d0c934d40d0ef6501008d52700d14d1", [[], [], [], [], [], []]}, 0x74c) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:55 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x44, &(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) close(r1) 13:58:55 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x3f39, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) getsockname(r0, &(0x7f0000000280)=@generic, &(0x7f0000000300)=0x80) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) socketpair$inet(0x2, 0x5, 0x15, &(0x7f0000000340)) keyctl$update(0x2, r1, &(0x7f0000000180)="01df76f17bb7efa919d14be1c686511c457b878e78ce98ba2514e9b745a6c3b6f2328c451dd63f3d760e6911790ff1e300f4b2e996b668735df89e2b0b5c640a6471bdf7784bce30114d0f761317bdc585788c667b4d82fed567449c71be976943ee6215005f694002a63764d2b736eb8ab74fa1493259a4674196d52d10261135535d2a0b91f718ea3be912562f914da0bdd3a508d753a11d1170870ef336b1aeb842778f963900cc3b5ed820cabae5eb2724174d1b9e67f5c402227b0e83bc034bb8bf28ae6477e024706b1e877707be99437f919b90a78b5226186775abf0cb83560bbd32d9ddb391d25f58d4400b", 0xf0) 13:58:55 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x5f50000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:55 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="8d", 0x1, 0x44, &(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) close(0xffffffffffffffff) 13:58:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0xd43}) [ 348.166583] binder: 26988:26989 got transaction to invalid handle [ 348.172969] binder: 26988:26989 transaction failed 29201/-22, size 0-12288 line 2852 [ 348.194547] XFS (loop3): mtpt option not allowed on this system [ 348.257269] XFS (loop3): mtpt option not allowed on this system [ 348.267375] binder_alloc: binder_alloc_mmap_handler: 26988 20002000-20006000 already mapped failed -16 13:58:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x974a0000]}, 0x10) 13:58:55 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00Y\x00'}) 13:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 348.329161] binder: BINDER_SET_CONTEXT_MGR already set [ 348.367153] binder: 26988:26989 ioctl 40046207 0 returned -16 13:58:55 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x7f8, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 348.413776] binder: 26988:27011 got transaction to invalid handle [ 348.420141] binder: 26988:27011 transaction failed 29201/-22, size 0-12288 line 2852 [ 348.473996] XFS (loop3): mtpt option not allowed on this system [ 348.542311] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.547949] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.554674] XFS (loop3): mtpt option not allowed on this system 13:58:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffd2f) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r1 = dup(r0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000a40)={0x7, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}]}) connect$ax25(r1, &(0x7f0000000140)={0x3, {"578c510fc6b948"}, 0x200}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00'}, &(0x7f0000000380)=0x54) splice(r1, &(0x7f00000004c0), r1, &(0x7f0000000500), 0x9, 0x2) sendto$inet(r0, &(0x7f0000000100)="8d", 0x0, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) write(r1, &(0x7f00000006c0)="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", 0x100) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x2c040) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x1f, 0x7, 0x1000, 'queue0\x00', 0x200}) close(r0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000340)={r1, r2, 0x7}) 13:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xa00000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x2daf]}, 0x10) 13:58:56 executing program 6: 13:58:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000fffffffe00"}) 13:58:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgrp(r2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:56 executing program 6: [ 348.651898] binder: 27058:27060 got transaction to invalid handle [ 348.658240] binder: 27058:27060 transaction failed 29201/-22, size 0-12288 line 2852 13:58:56 executing program 2: r0 = socket$inet(0x2, 0x6, 0xffff) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00000002c0)=@hopopts={0x67, 0x1, [], [@pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x800}, @pad1={0x0, 0x1}]}, 0x18) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) socket$inet(0x2, 0x0, 0x7f) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 348.704323] XFS (loop3): mtpt option not allowed on this system 13:58:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) pipe(&(0x7f0000000040)) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 348.753708] XFS (loop3): mtpt option not allowed on this system [ 348.785394] binder_alloc: binder_alloc_mmap_handler: 27058 20002000-20006000 already mapped failed -16 13:58:56 executing program 6: 13:58:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xa717, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x1c57]}, 0x10) 13:58:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) msgget$private(0x0, 0x40) close(r1) [ 348.842898] binder: 27058:27079 got transaction to invalid handle [ 348.844242] binder: BINDER_SET_CONTEXT_MGR already set [ 348.849285] binder: 27058:27079 transaction failed 29201/-22, size 0-12288 line 2852 13:58:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000ffffffff00"}) [ 348.988415] binder: 27058:27060 ioctl 40046207 0 returned -16 13:58:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2284c0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) r5 = getegid() r6 = timerfd_create(0x7, 0x80000) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="956d7faad5934326b14c6ed7ce452215759f53a66e75054cda22fd7782c834a4e077322c86f2c464b0e22a56b674415a8e8950d9427ce6b2c49b49274d7e60bbc334593e47", 0x45}], 0x1, &(0x7f0000000480)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r6, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}], 0x58, 0x8094}, 0x4000) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) 13:58:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x54b]}, 0x10) 13:58:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00?\x00'}) 13:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0H', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000500)="025cc83d6d345f8f760070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x1, &(0x7f0000000080)}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:56 executing program 6: 13:58:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x7f67000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 349.075488] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.081399] binder: undelivered TRANSACTION_ERROR: 29201 13:58:56 executing program 6: [ 349.163118] binder: 27129:27130 got transaction to invalid handle [ 349.169516] binder: 27129:27130 transaction failed 29201/-22, size 0-12288 line 2852 [ 349.194668] XFS (loop3): mtpt option not allowed on this system 13:58:56 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x2004) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x7, 0x1000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) preadv(r0, &(0x7f00000001c0), 0x1000026b, 0x0) 13:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x200000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:56 executing program 6: [ 349.279495] binder_alloc: binder_alloc_mmap_handler: 27129 20002000-20006000 already mapped failed -16 13:58:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00@\x00'}) 13:58:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0xffff, @remote={0xfe, 0x80, [], 0xbb}, 0xb4f}}, [0x100, 0x100000000, 0x3, 0x3, 0x1, 0x7f, 0x22, 0xfffffffffffffc00, 0x1000200000000000, 0x100000000, 0x5, 0x0, 0x157, 0x9447, 0x2]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r1, 0x2233}, 0xd70175b6) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) [ 349.344606] binder: BINDER_SET_CONTEXT_MGR already set [ 349.376411] binder: 27129:27130 ioctl 40046207 0 returned -16 13:58:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x100000000000000]}, 0x10) [ 349.414184] binder: 27129:27151 got transaction to invalid handle [ 349.420557] binder: 27129:27151 transaction failed 29201/-22, size 0-12288 line 2852 [ 349.433280] XFS (loop3): mtpt option not allowed on this system [ 349.498691] XFS (loop3): mtpt option not allowed on this system [ 349.580344] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.586224] binder: undelivered TRANSACTION_ERROR: 29201 13:58:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:57 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}) 13:58:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x27560000]}, 0x10) 13:58:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c65307f", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:57 executing program 6: 13:58:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x40000, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) fcntl$addseals(r1, 0x409, 0x4) close(r1) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1e, 0x80040) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x2469) 13:58:57 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x73f0000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:57 executing program 6: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000000200)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000071ef4b800004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7df3d14eedbc8e1060000000000000300000000000000d0170000000000000000000000000000000000000000000000000000000000000000000000000000c67e9b79000000000000000000000000000000020000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000fcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b8a7d0f83454d3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb967801d0c2e0b100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e02fe28e2e1816b82c516633c667fc5600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000"], 0x439) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0fdf04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adb0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a39d824fa2001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc35551fdfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b737611c430f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b"], 0x49f) 13:58:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x80810, r0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400000) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x1, 0x4) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000140)) close(r2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f00000012c0)=""/4096) [ 349.691600] binder: 27195:27198 got transaction to invalid handle [ 349.697956] binder: 27195:27198 transaction failed 29201/-22, size 0-12288 line 2852 [ 349.721800] XFS (loop3): mtpt option not allowed on this system 13:58:57 executing program 2: r0 = socket$inet(0x2, 0x40000000003, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x63d, 0x20000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000240)={0x9d97, 0x8000, 0x7fff, 0x1ff, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={r2, 0x5e, "3676473c7b8690e0187d58ec29eb4fa62285891440a05d79629d5c6a470a131c1718c241bb44b8558de858768ca59c07345064ffbbfadf04eda60522b02f40bb3de300558153b8ce3a17487f5b290c36b0ba5641f5543b23163c9354a457"}, &(0x7f0000000340)=0x66) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x408000, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)="037f0f"}) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40, 0x0) [ 349.760524] XFS (loop3): mtpt option not allowed on this system 13:58:57 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x3ff2, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:57 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00\x00\x00\x00\x00\b\x00'}) [ 349.816477] binder_alloc: binder_alloc_mmap_handler: 27195 20002000-20006000 already mapped failed -16 [ 349.845192] binder: BINDER_SET_CONTEXT_MGR already set 13:58:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/166, 0xa6}], 0x2, &(0x7f00000003c0)=""/46, 0x2e, 0x8}, 0x2020) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 349.867973] binder: 27195:27198 ioctl 40046207 0 returned -16 13:58:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x73f0000]}, 0x10) [ 349.951701] binder: 27195:27239 got transaction to invalid handle [ 349.952314] XFS (loop3): mtpt option not allowed on this system [ 349.958065] binder: 27195:27239 transaction failed 29201/-22, size 0-12288 line 2852 [ 350.049467] XFS (loop3): mtpt option not allowed on this system [ 350.093931] binder: undelivered TRANSACTION_ERROR: 29201 [ 350.099992] binder: undelivered TRANSACTION_ERROR: 29201 13:58:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0xd8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:58 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000000000400"}) 13:58:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x1, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x8, 0x1000, 0x2, 0x5, 0x7ff, &(0x7f0000000080)='bcsf0\x00', 0x8, 0x8, 0xffffffffffffffff}) 13:58:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e20, @multicast1=0xe0000001}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x5}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x4}, 0x1) 13:58:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:58 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x3f07, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xa7b2]}, 0x10) 13:58:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c56", 0x10}], 0x1) [ 350.796896] binder: 27274:27276 got transaction to invalid handle [ 350.803229] binder: 27274:27276 transaction failed 29201/-22, size 0-12288 line 2852 [ 350.807246] XFS (loop3): mtpt option not allowed on this system 13:58:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101200, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x100000000) close(r1) 13:58:58 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xaf2d000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:58 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000f5ffffff00"}) [ 350.853393] XFS (loop3): mtpt option not allowed on this system 13:58:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000180)="f630dfca5e26b1317a5f109841d0bbbfb35491e5d4de1b98fb4356d11183263840ea16a0bc86e2cdc713f05b8850653746c4e1606f21d32045a3bffd7ba8454f831d40cec1b3029b851e94d7771a1844b1e10da3c5c3baf923bb1a801722145a0c76f01feb5ce5bec5fc47f2b6c361e7fe473ccd8959fb86ff89c2e48ad780259d8fda324c709c9dcd3698f0123c417e3f2c43133ed2ec744954457622294a83ecc42cbb16f2d05a0ced5d53652f72ca7bf7c5f6f06249a0", 0xb8, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000240)=0x8) 13:58:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)="2e2f66696c6530ff", 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xb2a7]}, 0x10) 13:58:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) read(r0, &(0x7f0000000080)=""/126, 0x7e) [ 350.926912] binder_alloc: binder_alloc_mmap_handler: 27274 20002000-20006000 already mapped failed -16 [ 350.955447] binder: BINDER_SET_CONTEXT_MGR already set 13:58:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) chdir(&(0x7f0000000040)='./file0\x00') bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 351.028264] binder: 27274:27276 ioctl 40046207 0 returned -16 [ 351.060957] binder: 27274:27318 got transaction to invalid handle [ 351.063475] XFS (loop3): mtpt option not allowed on this system [ 351.067311] binder: 27274:27318 transaction failed 29201/-22, size 0-12288 line 2852 [ 351.133294] XFS (loop3): mtpt option not allowed on this system [ 351.210793] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.216692] binder: undelivered TRANSACTION_ERROR: 29201 13:58:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:59 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80400, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x8000a, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x20a4) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x2756000000000000]}, 0x10) 13:58:59 executing program 6: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) 13:58:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400000, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x1, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'bridge_slave_0\x00', {0x2, 0x4e23}}) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x101000) close(r0) 13:58:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0xe8030000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000000000000200"}) 13:58:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 351.898969] binder: 27345:27347 got transaction to invalid handle [ 351.904542] XFS (loop3): mtpt option not allowed on this system [ 351.905347] binder: 27345:27347 transaction failed 29201/-22, size 0-12288 line 2852 13:58:59 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@full={{0x3, {"239742fe52373f"}}, [{"a1e62c2f56a250"}, {"f6bb19b0c1c80a"}, {"a1a2429d76a953"}, {"5ec5e5ce778526"}, {"07483eae934382"}, {"49645939aad804"}, {"ec5e8dfb57a70d"}, {"a3483df5849a2a"}]}, 0x48, &(0x7f0000000080)}, 0x0) [ 351.950520] XFS (loop3): mtpt option not allowed on this system [ 351.959624] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 13:58:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x6784000000000000]}, 0x10) 13:58:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"69666230000000000000000000000400"}) [ 352.042739] binder_alloc: binder_alloc_mmap_handler: 27345 20002000-20006000 already mapped failed -16 13:58:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x400300, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 352.095921] binder: 27345:27370 got transaction to invalid handle [ 352.102380] binder: 27345:27370 transaction failed 29201/-22, size 0-12288 line 2852 [ 352.127698] XFS (loop3): mtpt option not allowed on this system 13:58:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:58:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x208000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) [ 352.174464] binder: BINDER_SET_CONTEXT_MGR already set [ 352.175120] XFS (loop3): mtpt option not allowed on this system [ 352.185313] binder: 27345:27347 ioctl 40046207 0 returned -16 [ 352.316172] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.327793] binder: undelivered TRANSACTION_ERROR: 29201 13:58:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:58:59 executing program 6: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x20020000) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) poll(&(0x7f0000000100), 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) 13:58:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x4fa1, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:58:59 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt(r0, 0x8, 0x8, &(0x7f0000000140)="0845a4d87a1047bcd2ae8f8b352d894a8cae8061220735fd0097c406904c1eb1bb384780530bedc27db680420ae0e392999171ad7b3a348e29df0d75adebecc832c66ddeb6e2159c281a94ee0504217b49d4aa745a63b99a7d934fd4b3ca67243a77e3fee1477f22e0d363ec9180cec78a00e190e3d4ba453ab4cb61525b0a6bc25ed371264c00a6bb02ab778c0dd5247ab661ed4982f984fa230031faf82f0471b398b1feb42f0a6ba73e2f65c787c14bfef154caba692646b23093c900b0677dea7044a538b62d9489e4a98480b77b127df4cbdd0e09", 0xd7) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) 13:58:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0h', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:58:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000001100"}) 13:58:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x410040, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000280)=0x7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0x6, 0x3, 0x8}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) 13:58:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x77ec]}, 0x10) 13:59:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xc8b, 0x614002) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140), 0x4) close(r0) 13:59:00 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x879b000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 352.621534] binder: 27426:27428 got transaction to invalid handle [ 352.627900] binder: 27426:27428 transaction failed 29201/-22, size 0-12288 line 2852 [ 352.643814] XFS (loop3): mtpt option not allowed on this system 13:59:00 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x4000000000000001, 0x7f7) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000002880)={&(0x7f0000000140)={0x27, 0x0, 0x0, 0x7, 0x7, 0x7, "fccf02d80ab40dfaf23e85ce53ed6c6cc3043f21448eb77fed6b5d5c1d3203caf04a1790ac4081ef1c653d892419af44de713e66bdc7e698e960cc7a62c79f", 0x31}, 0x60, &(0x7f0000002700)=[{&(0x7f00000001c0)="0936854a2e", 0x5}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="f7b81bd6bd93f0a8c24a981214f4ddcf808a6104527c2b12950681e8cae59f19e77d738b7a1a032cf7a0c0ba45c75f44cb620f0f43c984429747e8d09a74c8495eb68e5bbd9f038404173f44425b680d2346cda6f4c33aba8f45b898e5b78b91ea0ed7044dc666cdfc756b0d06b53b397aa541863a9805a54b58f3227256fcf07b6b2de32712f54c6bec3de5d02524a28ef3f3bf0c2a6ee96d8d2b30c83df6ce7aee665f34acac0438fdd611e698c91b4e5a", 0xb2}, {&(0x7f0000001380)="01250d6e277b91fbbb69320710d1da29083b7389ae826fed393bca584f274d442fb6a8cea7dd3bc8d63ab99a77d61264111358bc522aac0febebb7e2f03353e452bcaff40b634a87960eee172a54fe34de0d35494ceafa743bb20641cb981e02e57d308c64fd30687c00747923331bf0d723545b0457b279a68d42fb8e1d132777b481", 0x83}, {&(0x7f0000000200)="311b49f4eb27", 0x6}, {&(0x7f0000000240)="d33c6c742a75455e88efd972c45f5a2b119c012d73db337846378bee8fb60f143b683499f064219cfa57315c23b1f8305cdfb44018057b91c765", 0x3a}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="6ce54062a66920adcc6be692996b67be30e15ad3c581f1d4760fa02328e1734a9fa2be75374b5a6dca4fbee533fa4b7e8bc13356d8e6664122ff685197e9d805b8cc1b3f2ad9c0369f89026cef12ae641c91b33bd8b564f7f936407870ed1faedd6e8a290644a71eb439ff74e49efa1db682b512bd1d3bdacaf4f9b823a54505c7d3b81d74ee64779b8c97257ef8410cb8b6dafb8db9954b5129222efd59c3002f6e8729cb7bf2975651ec8a53b04a2d84f50a3fe72f296037ee053ed568f6db560cc3c15e9bd0872f2b7dc6e7320940ec79fc877f74eeb175a503b1f96c1212c41005e4947a58272c06024e52fb453e82", 0xf1}, {&(0x7f0000002540)="49d3c4a594b98c9e4885533baa34512d409db2ec3281fdb6f417ecff589f544a856f5053a992d87b2372fe391a7acfd5ba9487982615d3e0cc468eb993bdf1cdd567e88ab2346a7f9c16d6a96841855b92f350f78236b767fbd24574a91773c6eeb337f1e97f80931a03abe1711d5c928366b0bb6833521dae8029becfc89367740937f657981ec3ae87b01fb9986f61298c95024f7d84de0d8c4ab985efe51d1e3c4abd3249078d1be1933d4ea30d159f53a3a7d6ce34012dd3fcb6d822e33983d3c31f5b09923431890512051df262dc", 0xd1}, {&(0x7f0000002640)="0a817ce4c62bd57d6432e0cc22a98f71fec742a0fca39ba2c4e638cb11bac6148f62bc49d483dd680235d259c68a2224cfa867e556a032975a9cd2749f05fc4536b8d5bf93bd048443b1a6cff349d05c02c77c83699b37beb1537e9c9e6e389f7a7e33955ebe790fc2f296893d665fd66ae55588f46d4f7ebe7e29b60217420b40720cdf5d120a1932", 0x89}], 0xa, &(0x7f00000027c0)={0xb8, 0x110, 0x9, "881c28bc2a36e08f57d66c58d3e5bd5465132d856b691152782f570457843278d376458ff4735e7286099fbf64a4c1a65704f7a9d22faa7accc6390ff2d6244ee6d675f7644f72520a2547f7fd815cbb4b747c2d90f85adf5748ee54b79aa00c0eac721bf3aa9347ac0c40c77ae2d395090719cf8422c887d2041ff95764d575769de9d01a822c0698ea9697f3e99954d9c57a9cdcaf7c9d12c69e735b5fe18cde"}, 0xb8, 0x4}, 0x4000) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40400002}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x80, r3, 0xe08, 0x70bd2d, 0xffffffffffffffc1, {0xc}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) 13:59:00 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000100"}) [ 352.701562] binder_alloc: binder_alloc_mmap_handler: 27426 20002000-20006000 already mapped failed -16 [ 352.726842] XFS (loop3): mtpt option not allowed on this system 13:59:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0xc9c7]}, 0x10) 13:59:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) [ 352.783205] binder: BINDER_SET_CONTEXT_MGR already set [ 352.817730] binder: 27426:27428 ioctl 40046207 0 returned -16 13:59:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x100000002f, &(0x7f00000001c0)=0x1ff, 0x3) sendto$inet(r0, &(0x7f0000000140)="dd3630853dc18db69867153f24e708bdfa9645b2cf11d5bfa247fab72e309889f53e944f3d7da92acfdd79c5b32e66066ebfd9bf2838e6b19f19f54cca32ac337160d783391023879fbccda4f19cdbcc16990fd36a01a73945b871e62a5b75e867a8054db1", 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xf) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:59:00 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x3ff2000000000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) [ 352.851811] binder: 27426:27442 got transaction to invalid handle [ 352.858188] binder: 27426:27442 transaction failed 29201/-22, size 0-12288 line 2852 [ 352.885501] XFS (loop3): mtpt option not allowed on this system [ 352.934699] XFS (loop3): mtpt option not allowed on this system [ 353.007262] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.022334] binder: undelivered TRANSACTION_ERROR: 29201 13:59:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 13:59:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x100000000, @mcast1={0xff, 0x1, [], 0x1}, 0x1ff}, @in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x4}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x3f, 0x100000001}, &(0x7f0000000240)=0x8) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x80000001, 0x4) sendto$inet(r0, &(0x7f0000000280)="acbb84f70a30d5006abcdabdd1b34fec9257e62c33f223a3e158de67bb", 0xffffffffffffffba, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffec1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 13:59:00 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x3f000000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe00003e8}, 0x10) 13:59:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001, [0x1fdb0000]}, 0x10) 13:59:00 executing program 6: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x20020000) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) poll(&(0x7f0000000100), 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) 13:59:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 13:59:00 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) close(r0) 13:59:00 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"6966623000faffffffffffffff00", 0x4001}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"696662300000000000000f00"}) [ 353.549333] binder: 27494:27495 got transaction to invalid handle [ 353.555673] binder: 27494:27495 transaction failed 29201/-22, size 0-12288 line 2852 [ 353.570057] ================================================================== [ 353.577737] BUG: KASAN: null-ptr-deref in xdp_umem_unaccount_pages.isra.4+0x3d/0x80 [ 353.585536] Write of size 8 at addr 0000000000000060 by task kworker/0:0/5 [ 353.592541] 13:59:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x1) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002740)='/dev/ppp\x00', 0x100000000000fffe, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') vmsplice(r0, &(0x7f0000002540)=[{&(0x7f00000002c0)="a7dd69984d0d39d861abc977ec3c15cd609f3eacc792dba69cebdd03d2c2f59992f2e5231fac14622ce6316e1e2934a2e957ff601c4c75ade7aaea34b17ab591a0b57d52c3cb80896611dbda9a191ea04863b93d8e00bcd08dacce8d8390a9731eca07ec5d22f4eb2dd0a3a124e89d", 0x6f}, {&(0x7f0000000340)="ab04d286ca1587f53e6670229af6a9685c7d848c637ac63057b855979197e4db21c3b52d0a8a7c5ec4073414246cee4277acc43a0f48b73de7", 0x39}, {&(0x7f0000000380)="f037ddf5d0c7719acd73479febc12d1c21de2a26e14fb3648b0d81c8200173", 0x1f}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="930079c5b4dfc5e5d8047c2330a9fae002874862588f16fc6c38963041542e", 0x1f}, {&(0x7f0000001400)="7415b1d66b1dacb8bc402a5b441283c204e1a566f21a7a625e9cc90371b7e8c3c0c9ffc5d7f0bf74a71b1fc24bdabed3163bed0c049158c496a5d348221f471e4deb6c0efbf8b32eefd1bcc536c82d06a53993145d9fcf40e19032e5a09ef275c0975fa8cea843147b77", 0x6a}, {&(0x7f0000001480)="0346c48595a2c02db2d51e0c13f84a5eb1ceeb4948b79ab8e49a35fef7a5aafd3aff22fc84b34d09eac82ff0d9d6802ebb8b99f78110aefc4c7d0e23d852c85d75a183d4a4743b2d15b08c4cf42056f8339b8c1ca4419ca03ee375f73463cb11e4e482ede7addcea0075a051774d1baf88658620efec76b9f9ac88b850216ef24c82b63b6fb5c2e636fb8c84b08ff221662ed315c3fe31380e21780e9dfcb29ccd3720a310", 0xa5}, {&(0x7f0000001540)="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", 0x1000}], 0x8, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000026c0)=0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2009}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r2, 0x51c, 0x70bd27, 0x25dfdbfd, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x487}]}, 0x70}, 0x1}, 0x40000) close(r0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000025c0)=@ioapic) [ 353.594177] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 4.17.0+ #90 [ 353.600577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.609945] Workqueue: events xdp_umem_release_deferred [ 353.615331] Call Trace: [ 353.617927] dump_stack+0x1b9/0x294 [ 353.621563] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.626758] ? kasan_check_write+0x14/0x20 [ 353.630999] ? do_raw_spin_lock+0xc1/0x200 [ 353.635239] ? vprintk_func+0x81/0xe7 [ 353.639050] ? xdp_umem_unaccount_pages.isra.4+0x3d/0x80 [ 353.644503] kasan_report.cold.7+0x6d/0x2fe 13:59:01 executing program 2: r0 = socket$inet(0x2, 0x8000000002, 0xfffffffffffffffe) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 353.648829] check_memory_region+0x13e/0x1b0 [ 353.653242] kasan_check_write+0x14/0x20 [ 353.657309] xdp_umem_unaccount_pages.isra.4+0x3d/0x80 [ 353.662590] xdp_umem_release_deferred+0x46a/0x600 [ 353.667528] ? xdp_umem_unaccount_pages.isra.4+0x80/0x80 [ 353.672990] process_one_work+0xc64/0x1b70 [ 353.677224] ? finish_task_switch+0x182/0x840 [ 353.678585] binder_alloc: binder_alloc_mmap_handler: 27494 20002000-20006000 already mapped failed -16 [ 353.681728] ? pwq_dec_nr_in_flight+0x490/0x490 [ 353.681758] ? __schedule+0x809/0x1e30 13:59:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x100000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000140)={0x1ff, 0x568f, 0xfffffffffffffc01, 0x6, 0x6, 0xfff}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8d", 0x1, 0x800e, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 353.681785] ? graph_lock+0x170/0x170 [ 353.681801] ? lock_downgrade+0x8e0/0x8e0 [ 353.681830] ? find_held_lock+0x36/0x1c0 [ 353.711758] ? lock_acquire+0x1dc/0x520 [ 353.715737] ? worker_thread+0x3d4/0x13a0 [ 353.719890] ? lock_downgrade+0x8e0/0x8e0 [ 353.721372] binder: BINDER_SET_CONTEXT_MGR already set [ 353.724046] ? lock_release+0xa10/0xa10 [ 353.724063] ? kasan_check_read+0x11/0x20 [ 353.724079] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 353.724105] worker_thread+0x181/0x13a0 [ 353.724130] ? process_one_work+0x1b70/0x1b70 [ 353.724150] ? graph_lock+0x170/0x170 [ 353.753131] binder: 27494:27518 got transaction to invalid handle [ 353.754295] ? find_held_lock+0x36/0x1c0 [ 353.754323] ? find_held_lock+0x36/0x1c0 [ 353.754354] ? __schedule+0x1e30/0x1e30 [ 353.754369] ? do_raw_spin_unlock+0x9e/0x2e0 [ 353.754383] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 353.754399] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.754412] ? __kthread_parkme+0x111/0x1d0 [ 353.754424] ? parse_args.cold.15+0x1b3/0x1b3 [ 353.754441] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 353.760680] binder: 27494:27518 transaction failed 29201/-22, size 0-12288 line 2852 [ 353.764701] ? trace_hardirqs_on+0xd/0x10 [ 353.764722] kthread+0x345/0x410 [ 353.770256] binder: 27494:27515 ioctl 40046207 0 returned -16 [ 353.772732] ? process_one_work+0x1b70/0x1b70 [ 353.772744] ? kthread_bind+0x40/0x40 [ 353.772761] ret_from_fork+0x3a/0x50 [ 353.772779] ================================================================== [ 353.772784] Disabling lock debugging due to kernel taint [ 353.772928] Kernel panic - not syncing: panic_on_warn set ... [ 353.772928] [ 353.854238] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 4.17.0+ #90 [ 353.862067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.871412] Workqueue: events xdp_umem_release_deferred [ 353.876762] Call Trace: [ 353.879331] dump_stack+0x1b9/0x294 [ 353.882941] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.888114] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 353.892859] ? xdp_umem_unpin_pages.isra.3+0x350/0x410 [ 353.898117] panic+0x22f/0x4de [ 353.901289] ? add_taint.cold.5+0x16/0x16 [ 353.905418] ? do_raw_spin_unlock+0x9e/0x2e0 [ 353.909806] ? do_raw_spin_unlock+0x9e/0x2e0 [ 353.914196] ? xdp_umem_unaccount_pages.isra.4+0x3d/0x80 [ 353.919628] kasan_end_report+0x47/0x4f [ 353.923583] kasan_report.cold.7+0x76/0x2fe [ 353.927885] check_memory_region+0x13e/0x1b0 [ 353.932275] kasan_check_write+0x14/0x20 [ 353.936319] xdp_umem_unaccount_pages.isra.4+0x3d/0x80 [ 353.941578] xdp_umem_release_deferred+0x46a/0x600 [ 353.946490] ? xdp_umem_unaccount_pages.isra.4+0x80/0x80 [ 353.951924] process_one_work+0xc64/0x1b70 [ 353.956140] ? finish_task_switch+0x182/0x840 [ 353.960620] ? pwq_dec_nr_in_flight+0x490/0x490 [ 353.965285] ? __schedule+0x809/0x1e30 [ 353.969714] ? graph_lock+0x170/0x170 [ 353.973498] ? lock_downgrade+0x8e0/0x8e0 [ 353.977630] ? find_held_lock+0x36/0x1c0 [ 353.981685] ? lock_acquire+0x1dc/0x520 [ 353.985639] ? worker_thread+0x3d4/0x13a0 [ 353.989768] ? lock_downgrade+0x8e0/0x8e0 [ 353.993901] ? lock_release+0xa10/0xa10 [ 353.997855] ? kasan_check_read+0x11/0x20 [ 354.001985] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 354.006560] worker_thread+0x181/0x13a0 [ 354.010519] ? process_one_work+0x1b70/0x1b70 [ 354.014997] ? graph_lock+0x170/0x170 [ 354.018783] ? find_held_lock+0x36/0x1c0 [ 354.022828] ? find_held_lock+0x36/0x1c0 [ 354.026883] ? __schedule+0x1e30/0x1e30 [ 354.030847] ? do_raw_spin_unlock+0x9e/0x2e0 [ 354.035236] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 354.039800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.045316] ? __kthread_parkme+0x111/0x1d0 [ 354.049617] ? parse_args.cold.15+0x1b3/0x1b3 [ 354.054094] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 354.059091] ? trace_hardirqs_on+0xd/0x10 [ 354.063219] kthread+0x345/0x410 [ 354.066567] ? process_one_work+0x1b70/0x1b70 [ 354.071039] ? kthread_bind+0x40/0x40 [ 354.074832] ret_from_fork+0x3a/0x50 [ 354.079141] Dumping ftrace buffer: [ 354.082660] (ftrace buffer empty) [ 354.086355] Kernel Offset: disabled [ 354.089957] Rebooting in 86400 seconds..