m 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 08:53:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x40000000) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x800, 0x80) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8e60000000000000) 08:53:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7901]}) [ 2447.378877] binder: 19201:19219 unknown command 1077961548 [ 2447.397011] binder: 19201:19219 ioctl c0306201 20000440 returned -22 08:53:14 executing program 3: inotify_init1(0x800) r0 = socket$inet6(0xa, 0x3, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@local, @local]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:53:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000009f]}) 08:53:14 executing program 0 (fault-call:0 fault-nth:0): syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406360, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:14 executing program 3: inotify_init1(0x800) r0 = socket$inet6(0xa, 0x3, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@local, @local]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:53:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a01]}) [ 2447.836546] binder: 19471:19491 unknown command 1077961568 [ 2447.849943] binder: 19471:19491 ioctl c0306201 20000440 returned -22 08:53:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40400, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000240)={0x8, 0x6, 0x1000, &(0x7f0000001a00)="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"}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8, 0x4}, &(0x7f00000001c0), 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2447.937919] FAULT_INJECTION: forcing a failure. [ 2447.937919] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.949828] CPU: 1 PID: 19509 Comm: syz-executor.0 Not tainted 4.19.38 #6 [ 2447.956873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.966257] Call Trace: [ 2447.968884] dump_stack+0x172/0x1f0 [ 2447.972548] should_fail.cold+0xa/0x1b [ 2447.976469] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2447.981708] ? __sigqueue_alloc+0x173/0x4d0 [ 2447.986074] ? find_held_lock+0x35/0x130 [ 2447.990161] __should_failslab+0x121/0x190 [ 2447.990181] should_failslab+0x9/0x14 [ 2447.990195] kmem_cache_alloc+0x47/0x700 [ 2447.990211] ? kasan_check_read+0x11/0x20 [ 2447.990228] __sigqueue_alloc+0x268/0x4d0 [ 2447.990245] __send_signal+0xedd/0x14a0 [ 2447.990261] ? lock_acquire+0x16f/0x3f0 [ 2447.990278] send_signal+0x49/0xd0 [ 2447.990293] force_sig_info+0x251/0x310 [ 2447.990416] do_general_protection+0x13f/0x300 [ 2447.990464] ? general_protection+0x8/0x30 [ 2448.035083] general_protection+0x1e/0x30 [ 2448.039249] RIP: 0033:0x20000048 [ 2448.042639] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 0a 34 b5 98 cd 80 52 5c e8 e8 69 62 f5 69 62 00 d9 d9 d0 d2 60 c6 c7 e4 c7 53 fb c4 [ 2448.061554] RSP: 002b:00007f888dd70bd0 EFLAGS: 00010286 [ 2448.066945] RAX: fffffffffffffff7 RBX: 0000000000000009 RCX: 0000000000000002 [ 2448.074235] RDX: df99bed93f9a8f1e RSI: 0000000000000000 RDI: 00007f888dd71608 [ 2448.081535] RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000006 08:53:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000b0]}) [ 2448.088821] R10: 0000000000000007 R11: 0000000000000008 R12: 000000000000000b [ 2448.096110] R13: 000000000000000c R14: 000000000000000d R15: 0000000000000003 08:53:15 executing program 0 (fault-call:0 fault-nth:1): syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406368, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:15 executing program 3: inotify_init1(0x800) r0 = socket$inet6(0xa, 0x3, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@local, @local]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:53:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b01]}) [ 2448.379802] kauditd_printk_skb: 100 callbacks suppressed [ 2448.379817] audit: type=1400 audit(31995.220:921): avc: denied { map } for pid=19607 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000b7]}) [ 2448.455192] binder: 19627:19669 unknown command 1077961576 [ 2448.494239] binder: 19627:19669 ioctl c0306201 20000440 returned -22 08:53:15 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2448.529262] audit: type=1400 audit(31995.230:922): avc: denied { associate } for pid=19603 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:53:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x3000808, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2448.658690] audit: type=1400 audit(31995.260:923): avc: denied { map } for pid=19607 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:15 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:53:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040636c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2448.769052] audit: type=1400 audit(31995.270:924): avc: denied { map } for pid=19607 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:15 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce0003f8020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2448.935009] audit: type=1400 audit(31995.280:925): avc: denied { map } for pid=19621 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2448.954024] FAULT_INJECTION: forcing a failure. [ 2448.954024] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.030753] CPU: 1 PID: 19911 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 2449.037751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.047126] Call Trace: [ 2449.049748] dump_stack+0x172/0x1f0 [ 2449.053403] should_fail.cold+0xa/0x1b [ 2449.057323] ? mark_held_locks+0x100/0x100 [ 2449.061589] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2449.066786] ? security_compute_av+0x27b/0xb70 [ 2449.071422] __should_failslab+0x121/0x190 [ 2449.075689] should_failslab+0x9/0x14 [ 2449.079096] audit: type=1400 audit(31995.290:926): avc: denied { map } for pid=19627 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2449.079507] kmem_cache_alloc+0x47/0x700 [ 2449.079528] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2449.079543] ? avc_compute_av+0x225/0x690 [ 2449.079556] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2449.079572] avc_alloc_node+0x2a/0x630 [ 2449.079587] ? kasan_check_read+0x11/0x20 [ 2449.079607] avc_compute_av+0x22d/0x690 [ 2449.079628] avc_has_perm+0x32d/0x610 [ 2449.138597] ? avc_has_perm_noaudit+0x570/0x570 [ 2449.143289] ? _parse_integer+0x190/0x190 [ 2449.147463] ? __lock_acquire+0x6eb/0x48f0 [ 2449.151357] binder: 19938:19941 unknown command 1077961580 [ 2449.151809] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2449.162479] sock_has_perm+0x1fe/0x2a0 [ 2449.166482] ? selinux_secmark_relabel_packet+0xe0/0xe0 [ 2449.171975] ? __lock_is_held+0xb6/0x140 08:53:16 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea01473905003f005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f04]}) 08:53:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x1a) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000007c0)={0x4, 0x3f, 0x9, [], &(0x7f0000000780)={0x9909d4, 0x64, [], @p_u8=&(0x7f0000000740)=0x1000}}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0xf4, 0x2, &(0x7f0000000200)=[{&(0x7f0000001a00)="a6fab23805e255cda062ae72dff1a216b6a1b2a4a588da486690b525ec097957538105915091457da833f608a71ee703fe5938d9584f10896c54d9d7203b5f3fe4a1d9a93ba34f0200fde5420099d7d9c1add02789fbe9d67dd3ea649807dadbe36523146e32aac044fdba22f1fdb8dd160206a6a072bbdf7cf161715dbed7005a161c25e0c7dcd63acf6aae5fc826ebd7bce577c40c93892eca7bc027842243ab5a15149a106e083e15b06ceacb0b81471c23375576914c069d8c19bb988f6fed6f741152fbfc48b912e62cea7f7712c8a2504726476ab7bf6f266731674998fa74ecf98d1b67d260a19ffadadef70ce5088b501ae60b6998e81436e338e987183fe7687d65e52599b7e2ebbc69ca2667db3b6a53d2be1c5ff4441f3fe41be838f484b9719cdd6c1a4747d394dda9e6b0b85b359a8ca7677b073d5fbcd56fd3fafe12d5057f624a049f4a5199ab95da938921a156f8ec0953847d4a9479a5cd1377ab56da7f38be6db73dff1678e9372f451112455d0ee1ac389c69a7dd23b2082a2f8b61cff2ea9083ce8b569b14e658fd3ad7ad0206c464720515801623333e35b574baf3d2e5baead748d797a472888d17b720e84add4f83b4405ca99ae4e8eeedc880973052df37349497119bf0da1dfb7f375a347a8d88c89702bac4e92a27324a81abe62d1668e93b8b1822b40bac7a1773ac7d9563ddaced10f7310fcb1543b3292208e55c8d0c365d099a2151e053485065cafac02e374b62e0b1b4d4c2078df0b2d37ba2305de8af3bba48e8a2f5e1419a3f998b6c253def9a3ff488358ad38d97839dc869862fca466c828ca32deeddf2951f50fb73dcae0f8d3bd545c22683abc58d6c01f75d3c37905b6ec51c51deb4c79e4e22dd2a088fcf3db935d761a48bdab614a24143888ee1220c400388da71595f3f6a5befc7b5daf98731a6767bfd0407c149b505ae57f0e5e10e5d3e6fa4c950b9a54f6f50b27288d8aba185e9cba88fda09a5a53e1587b0e6ee958e3a3b77ad4340a891536f12f506f742db4614316f4af837285f28a69ca60f9ef657143415f8922811c0ae5bce0f20c11528e1b4bbaa134a97b81b78782bee4c982abb6e0e82e8a7c7cfec798890c6f1a6444dae840da75b22cadaf27a5625092dd55b6992ebc9978f50f9d4b4bcd49c82fca96c9f3b2b67001ce7a624fc1485a5ba99011c85dd9f6a68b4ce85c1740baa54c2172ed732e730457836f51710b016f941c72582b02137415820c84ff37e8dedbb20e2e596f67208b27680f6146a71ee4cf255bd5202fe19f862db201e1609083cbc5dfe89bcf49a5c8f6e83a9d2fd6f6807578c3f944a7e5325045d8d6437bea8623707f6a465e839e9a2ceeabde7e2f7ac54c877734d8361c78fdb1679f75e2d26083012ccff2d67566af240ceefde4dd895e2500db83e835ce4d25b8459e929faefffcfdb00a96520e35b26d7e1fe73be043f5e54a7405300606719b6cd305a0d4e45b77d3fd96bdc54a58c45290078c83c0dd53e5ddd8fc41ca1886f8ad9bb8880fbd50423a772addf6036ec0f2f7a3ed07de71877f74df671393fc7aec7c27e5da99114fd7302d5206515bd5c101fbdd85d0e7d4910f62c0bb71e9ea0c8ccbd6a56e098d172fba0086b45d4c0272d55ac4e0bd3e50c47a6feb681e8f80972e9bbbf4481cc45857bef7f4d0df4fb9d5c0c5972656a03289864b345d056a834f57359839cd1810eaf94c979df43ec8646b05ae521adf5b877a2d8a54b6273bcaec0f709bbfcdc6483d3cfde9e5368b88d65738c0193b40761dd9b99b649ede25499df9755bc102f693df32f9af4fdb379b3944f3f2bb21cedf98efdacc1aca702990ee50493bcc704e64ffca8f108a707518eee49d0afec60e24be7688b3d31e8123445fd9e85832b6a2c407fc79f0ed1811323e6c5d10340bcff214c15f1e435e8e4c87ed1936fc6225f86d8f16935d101455159e3e9ed8b65e657bb01a9bea4ca7fb830482302708330c14c73fb325fa833ed6fe9ca46b05cdc07c8d16994cc91d7b60cefccb26ba2133c26a2910a8e6e995faeea81130b3c648af861b713cc333f40a2abe3391daf75635cc997705a78247bbade29a1d7ff874807cdff0c682c465057295f6b396db743173aae65126c13f907d4f43e3fa4f1e6e7a69024158bee2f809cf04475e5876e9625b2f43ae0d874e2d40f3534c6cb5867589c5fea81aa39b428659cbebce34ce48eb959fbca10813287f48356dffdc8f3071e2fb038635bee7638055653231ad746d915c7ca6242fd3c21e268fdc5b19969f09afdd150ef238f2af2e69ce3d7034a88b0e97547386fbf2493d02d3c1653084c778317b8c391334ec64130f22b81bc7a71fbb1a0bd150dd7e71f120c9f4c252f84b35a7d3811175b78261193c917f84ba7644a78ef2d033dc324a5e2dbeaed6510683800ad5c22ec5634705121e7088074eb2a42bd89b3a10f44d5cd1404249555dbb058bd4c2ddac9a942455c082efa54b9b73719366470066aefee9f3b20ac9821d2b094c64c5a702dbef1fedae344ec316ffe549a84c588a8292a57c43f5aa7689464754564e3bfc9fd3faa9b53dfe20f4567cbe6aae0dc3e96612faf574b671af3d4cb7e0eec785726bd9b1c5cbfac9423c465efa27d99e3f2ecda64c5292dafa762b8fe0e6c8a205b2d5fa5961d6a4d9220901ad6ab18ec75998f99b0f18b49f75a4ccc2c86287a1f29e5075caf54c912060193401fafa98c185ab7beee638430f69e5b9b9103524b528c67ec330105c77e64fde31a9c342632e0df08dd81904912f7c0c17303e6842bbacc54223611ad8a5a91460f78bc1ac80d2391c7243f6ae27206adb6129375971a87ff57f4fd0e9ec8a617738a26864a0e2d72c3c7e6906d43090217dca97d2b1442cd2b3b07ba315f7e476065ad9149ea6092f6112071afa1ff7dbee3371e8d87205cb0b5208c0f1e536e06bbbf514647779a60470e5695bff546151a49f6da79695ebd5ed32decdca0734d2c1c490da542ac81d53782524502dfe7f37e6a61830016b9630e871b448d0e43a051ebb395b842f608ecf8cbd4b87f726ad4cfc27e1e520aed565a798cd4c0b0dd0777e81dec268b608c2c6df477cb467602cda7f0a090d4b52de672f4da7d7ef90117fdecf5578631d256b6a1f328d6013918fd362a67b8c6f6d78282b6e5554431229a7fc219cca64dca711b8ee00d51a8ae4649c99e02c2d6e028f880dd95d5259f15e33fb7840a4e7b47b0df028f9a9bba506106791928115e809a4747c63b818b581601a7dd937307678e826b9e94d6feb331f2e107e13b622f3954a18d03b8053291acb5b18b6679495c4b2d38affd04ad4f7571ef19fe4670cc23654c7f093796159a15f6de3084c2b329fae37bea0e48e8888799b34436d7edc9c7688f1ca9c226c35bbe22f772fd60a871cd0d9e91964fe89724064d53c4b17e985cb10135fe71d56aba24e12b26f79bc0390704c4130479abd21f8350925c97f5652969efa70bb5c9be835c909e700247089e542e77a28313c2d4c3f2e6d0789f40c277d2a897e71cf302be50234eaf3d0dcf635a07a2db726d95b853cc045cae8fb7dec108fd08b70186f2cd7e849412e1e821782b7ccf73b889d1cce04593f99ec4c0ce9a2f6ae3faaa712456415cba4aacc0ac45256b24ddef41fe62f8d492e35aaf9e0cd7c2ba06464c1ed535e70bb320784f1fba9103aaaf9a0441f073bfb85e364812dac13939d5aa6b8a79ce3a42f5fd354bd9e3c550fd9962e441fa895f900d34f8a87a7e98ba24f4d7d76b87aaa0aeaa31e2827310deae079150cfae2c8d5fe5d80dea49df335ce212b9f794b2a5a7dbaf67cf93c88d51cd07c66be8ec5651116956b1fb800aa2d696953c7ee8e494ca73a7216f2dcc0b78d52c7e46e8598a08c330e4791baecd8ec69e50ea0914923950c6e9f10a4a5c37ddf70e5f1a14474b78f4c866d2f9c2264844d0a224928485b2a98edc6d2e6d65c15901120be2ff1e6421d456a58adf876ed36d69fbd7dcbe05c59723aaf181f3a70c26b1fe7bcf5b2b083e38cb2bbab219f1d8e1e38c08f5e8d575c57ddc26741656137de1d9c08d335f71150ef82be1b520f20259531887aa1954db614a342a06d2c19576c381564c4d80c059c40500f066ac981e358fc065eb898160d41c532d2c78f88b63a5e03cdd9834ff7757f863dd7e075e29910c344e7fda62dd7accae351f4414bcdc3ef1497dc671f812138030c14e63d76499f9f1dd4aaec4407ac35f5ca40e058e57f03703e091253f08d87d9d4c5486ea2057acc8097f680191404537ac9b0a4a91ab2630a315eb75832f78b848671fd95a50f29f9a86554a5583df3935cc8d822b9067734c60c9bf0cd5c4a10ab1601077c1e734962b687cc658e673ad2c72aa8455ece18a256842a5415649338062d6d7fd077babcd837f86b7759f6898c14e11f2f08d764b6fa9a5f8aa68f4650251ec0902d32a9fe0c50b26481a91c71a22b3b614fd4e85d36f8b6b628d0c413670c67bb7715eaf9bc268f9c4f890f2cdd49b9728a68fc8acf2f28915372c1903b2c59acde042e3997c99e8d69c36669572a4e7f687b9af0d4905467d70613a11f22817d40fcec30b5bf6547bba20df700c5d4174707604d3b917512ee70744bcb0bf3a73aa14bf3f2cd059a82cc9d9b36bc32e42f5a73ddb4b144a38d9ea5143e5f9f97bb9f83167b97c499a61a49eb83043b101ed1fa4292be0eabf5d221a6158f5d3b2d6a0196c429438540a89633b68d4a8a6605045f8f74364a9d17cc1beabfb4b3fddecd582a0209d50b66448c8ae4ecbc56e4da590aac7cb8718c3fa1d4600ba80cdfaa5b9d56bfefabd73d66521b50dde5978b57e6733df94b21568a4d827784d37a74007c6169792138b8811929ccfbaf03c8a6a4edc59d2a6db1dfbc2bd710ced236cef2108489c921805da91e6250ce3ee3b0e7b31b9dad9f68a7f1c1cbd3bd1e903e4374fd70713e624bb673e7598946992c90c4b5d0114d8566e317249cbf5d04a2127e644c927726bea9cec9cd2a7a98b17388fadd7af8bf36bc0a011ae1c5885b7a7fa4a6a7ceda62e82d74376412bf1447a39ad0be9c57c03512a358e4c9ce4e5a3ef4047636b28a8b8492cd79268c558751b12d5a15f104e5cc08170b0e0b8478937899c556c870b4f56227be3f3d74a05cf9856991d832123fe416a60f4a3f0e52da705bde4517c49d7672ecc2ec464c5aa2f9f046ed3e7dde39c427484e13244c01a5241de8713292e1359d85d1083ad086de1c594ee5ee88fa34a66bdc009f00551f83b3f9d6b0db5aefe83399316941ab3b190f71b56c69be9f93782ce001aa179d46ca111ac32d330bb8a57bc736fa3b16413551d9482e3f5e7f6440455310610559107a62b0ac99aef5bbe7c3d13b0fb7cf540761eb037b97d158a4307b021664a0e16216510a7969967cc65cebdee77bacbb6ff985699ab524504364d3acfb5672bc8358861939fa505516f9efdf41d274ea828d867f2bcd7eb52a7f229cec33f9e7a137b128a027718edbb035bd4706386a7b06d0548d1dc74155a90c74f6afafa37d6b465d4002e8a041ecfd0cfec0428d745aa721c8a3ecee59a06f8fdff3a2968a93cbc8589fd92b97cd876a969ebcf029c330f746df145ade0b0a34a5923460e5d9cadb35511980b4e6ad1bb8c69bc355ce36bc8357bf829f2688193147024675c3c0bd4794272ec013634fa352be9d545ead4aa206863ca5f828a0735c5f09b66af3051", 0x1000, 0x8}, {&(0x7f00000001c0)="8ad8b631af0268e87bd68712c7ad9d455c4d8e94fa1a0704d6439c6b5199be386afc3f4199953e81cee268826bb09d1d94", 0x31, 0x10d}], 0x800000, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c66736d616769633d3078303030303030303030303030303030352c61756469742c7065726d69745f646972656374696f2c6f626a5f747970653d627066002c6f626a3efe155fc29062935f747970653d627066002c646566636f6e746578743d756e636f6e66696e65645f752c736d61636b66737472616e736d7574653d2c66736e616d653d627066002c00"]) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') mount$9p_virtio(&(0x7f0000000340)='eth', &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'TIPCv2\x00'}}, {@version_L='version=9p2000.L'}, {@msize={'msize', 0x3d, 0xffffffff80000001}}, {@afid={'afid', 0x3d, 0x2000}}, {@aname={'aname', 0x3d, '^*['}}, {@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0x9}}]}}) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, r3, 0x110, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff81}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @mcast2, 0x2f}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000480)=0xe8) r5 = getegid() lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x250008, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0x00000000ffffffff,default_permissions,allow_other,max_read=0x00000000000007ff,measure,mask=MAY_EXEC,defcontext=sysadm_u,dont_appraise,appraise,fsuuid=9v{w97\x00f-99dw-f\x0047-d9\x00}-c087ef95,obj_user=vmnet1em1em0ppp0bdev:&em1%cgroup!self!nodev$,euid>', @ANYRESDEC=r6, @ANYBLOB="2c7063723d30303030303030303030303030303030303031392c6673757569643d627f7f37617d77302d3b7777002d3a36737b2d77333f372d63343276003632002c002f4168207187ae96dd283d263c1a7132287694e8a5466eb645e7b2d7a833125e89225f1f11d34f96bd061bac810090d2e2940e52aea018dc1a401bed2d8782b683fd27634f1f2a79c45d1b3e0b9bd389f6470101fa15b79df9fe2f56dce5814c2c74491d09535cf9461a13b5b80fd092287321d3208c5eeeebb612f855d82f083e845815040180d1edc81d84accdfc4d02196db3f93c3c075cf36e15ccc0147834903ef512653f5d2fb7e7e718a4e6cadd1bd5ee39a091abc5b62653e49189b28695398e3049b5e384f5a8493c953520947288912e29d4d7be679f8ca52cf8d65bf93a3717972049ec700a26e7d41c2e3a4cfcf86e5ace55bc2f106b201108e6482a951b0d05cd0af695876668d6fb0de79925955502752b000000000000"]) [ 2449.172757] binder: 19938:19941 ioctl c0306201 20000440 returned -22 [ 2449.176075] ? __fget+0x340/0x540 [ 2449.176102] selinux_socket_bind+0xe6/0x930 [ 2449.176118] ? find_held_lock+0x35/0x130 [ 2449.176133] ? selinux_socket_setsockopt+0x90/0x90 [ 2449.176154] ? lock_downgrade+0x810/0x810 [ 2449.176183] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2449.176200] security_socket_bind+0x7d/0xc0 [ 2449.176252] __sys_bind+0x1ca/0x290 [ 2449.187924] audit: type=1400 audit(31995.300:927): avc: denied { set_context_mgr } for pid=19627 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2449.190587] ? __ia32_sys_socketpair+0xf0/0xf0 [ 2449.190610] ? ksys_write+0x166/0x1f0 [ 2449.190630] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2449.190643] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2449.190657] ? do_syscall_64+0x26/0x610 [ 2449.190672] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.190684] ? do_syscall_64+0x26/0x610 [ 2449.190702] __x64_sys_bind+0x73/0xb0 [ 2449.190719] do_syscall_64+0x103/0x610 08:53:16 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 2449.190745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.197958] audit: type=1400 audit(31995.310:928): avc: denied { map } for pid=19621 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2449.199758] RIP: 0033:0x458da9 [ 2449.199773] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2449.199781] RSP: 002b:00007fe8edc66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2449.199796] RAX: ffffffffffffffda RBX: 00007fe8edc66c90 RCX: 0000000000458da9 [ 2449.199804] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2449.199811] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2449.199819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8edc676d4 [ 2449.199827] R13: 00000000004bee2f R14: 00000000004cfc60 R15: 0000000000000006 [ 2449.352006] audit: type=1400 audit(31995.310:929): avc: denied { map } for pid=19621 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100]}) 08:53:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406374, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x1c) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x18008, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x10, r1) r2 = socket(0x15, 0x1, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2449.611040] FAULT_INJECTION: forcing a failure. [ 2449.611040] name failslab, interval 1, probability 0, space 0, times 0 08:53:16 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea0147390500003f5bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2449.643360] audit: type=1400 audit(31995.460:930): avc: denied { map } for pid=19738 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2449.730035] CPU: 0 PID: 20052 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 2449.737042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.746435] Call Trace: [ 2449.749062] dump_stack+0x172/0x1f0 [ 2449.752725] should_fail.cold+0xa/0x1b [ 2449.756650] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2449.761780] ? security_compute_av+0x27b/0xb70 [ 2449.766404] __should_failslab+0x121/0x190 [ 2449.770665] should_failslab+0x9/0x14 [ 2449.770680] kmem_cache_alloc+0x47/0x700 [ 2449.770700] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2449.770713] ? avc_compute_av+0x225/0x690 [ 2449.770726] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2449.770742] avc_alloc_node+0x2a/0x630 [ 2449.770755] ? kasan_check_read+0x11/0x20 [ 2449.770775] avc_compute_av+0x22d/0x690 [ 2449.797621] avc_has_perm+0x32d/0x610 [ 2449.797642] ? avc_has_perm_noaudit+0x570/0x570 [ 2449.797674] ? sel_netport_sid+0x24f/0xb10 [ 2449.807473] selinux_socket_bind+0x78f/0x930 [ 2449.807496] ? selinux_socket_setsockopt+0x90/0x90 [ 2449.807521] ? lock_downgrade+0x810/0x810 [ 2449.807554] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2449.817087] binder: 20054:20059 unknown command 1077961588 [ 2449.822181] security_socket_bind+0x7d/0xc0 [ 2449.822203] __sys_bind+0x1ca/0x290 [ 2449.822217] ? __ia32_sys_socketpair+0xf0/0xf0 [ 2449.822248] ? ksys_write+0x166/0x1f0 [ 2449.822266] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2449.822280] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2449.822314] ? do_syscall_64+0x26/0x610 [ 2449.829884] binder: 20054:20059 ioctl c0306201 20000440 returned -22 [ 2449.831722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.831740] ? do_syscall_64+0x26/0x610 [ 2449.831762] __x64_sys_bind+0x73/0xb0 [ 2449.831781] do_syscall_64+0x103/0x610 [ 2449.900545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.905850] RIP: 0033:0x458da9 [ 2449.909076] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:53:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040637a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004]}) [ 2449.928003] RSP: 002b:00007fe8edc66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2449.935740] RAX: ffffffffffffffda RBX: 00007fe8edc66c90 RCX: 0000000000458da9 [ 2449.943032] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2449.950330] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2449.957632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8edc676d4 [ 2449.964929] R13: 00000000004bee2f R14: 00000000004cfc60 R15: 0000000000000006 08:53:16 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 08:53:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200040) r2 = openat$cgroup_type(r1, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000840)={0x0, 0xd1, "bf7b8af385deb5a980e4691fb53ad4c9b99ed356c4813fc322f137931e781ee868a00a237a665e60a2fa16e6a5239f2ebcc70f2cdc64dc50a1c19b045c31d843d3972aeb55cd1c2b0bcb9b356fcd9a2b3fbfdfcc6cf1be9b67d82df004f2fbc6af9f9a50563c8a09685469613aaeb92de236f0b17ea08753cb87a46a2a42b769aeb16e621fbe083493eecac711c7a277e30a2308e72ecef385a004a6b2b843a67ebfe755a64db060a7baa98b7144c1ace5f67e88f1993cd2d6ba060e0949b486690c95808f6e02dc995fb550ccd89c9f5d"}, &(0x7f0000000780)=0xd9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000940)={r4, 0x53, "fbcc8a1bb2ce836450abee6cb30d7c942981c817ccf0fc0dbac3e63d228f8d6dae1fffa6bc2f3a7a82e0de521c3146cebc4a91ebe118c6a352c7c88d7fbb35d6143e74c1961a8bd72c2a30019197ff79201a45"}, &(0x7f00000007c0)=0x5b) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x4, 0x3, [0x3, 0x4658, 0x8]}, &(0x7f0000000140)=0xe) getsockname(r3, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000400)=0x80) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={r5, 0xc8a}, 0x8) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000280)={0x7002, 0x2, 0x1, 0x1, 0x1f}) unlink(&(0x7f0000000340)='./file0\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x100001, 0x91, &(0x7f0000000500)=""/145}, {0xd003, 0x86, &(0x7f0000000600)=""/134}, {0x3000, 0xb3, &(0x7f00000006c0)=""/179}]}) 08:53:16 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:53:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000108]}) [ 2450.154837] binder: 20169:20171 unknown command 1077961594 [ 2450.188912] binder: 20169:20171 ioctl c0306201 20000440 returned -22 08:53:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:53:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8601]}) 08:53:17 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet6_int(r0, 0x29, 0x59, &(0x7f0000000040)=0x4, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:53:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010000]}) [ 2450.642536] binder: 20390:20397 got transaction with invalid handle, 0 08:53:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0x2, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:53:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8701]}) [ 2450.762253] binder: 20390:20397 transaction failed 29201/-22, size 24-8 line 3061 08:53:17 executing program 0: syz_execute_func(&(0x7f0000000100)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2450.827584] binder: 20390:20397 ioctl c0306201 20000440 returned -14 [ 2450.842573] binder: undelivered TRANSACTION_ERROR: 29201 08:53:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400101c0]}) 08:53:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file1\x00') mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x401) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x54) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000200)={0x3, 0x5, 0x5a346f84, 0x3ca5c588, 0x8, 0x60, 0x5}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0x16, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:53:18 executing program 0: syz_execute_func(&(0x7f0000000a40)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x882, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) r2 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x0) r3 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000740)=0xe8) r7 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000780)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000007c0)=0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000800)={{0x8, r4, r5, r6, r7, 0x180, 0x101}, 0x80, 0x9, 0x2, 0xfffffffffffffffd, r8, r9, 0x1f}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r1, r2}}, 0x18) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000880)='dctcp-reno\x00', 0xb) r10 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4ea, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) r12 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x99de, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r12, 0x40086424, &(0x7f0000000440)={r13, 0x1}) fadvise64(r10, 0x0, 0x40, 0x5) getsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f00000008c0)={@empty}, &(0x7f0000000900)=0x14) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101440, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r11, r14}}, 0x18) 08:53:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b00]}) [ 2451.275235] binder: 20817:20819 got reply transaction with no transaction stack [ 2451.311810] binder: 20817:20819 transaction failed 29201/-71, size 24-8 line 2762 08:53:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410101c0]}) [ 2451.326343] binder: 20817:20819 ioctl c0306201 20000440 returned -14 [ 2451.382376] binder: undelivered TRANSACTION_ERROR: 29201 08:53:18 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9}, 0xc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x100000001) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) 08:53:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x80000, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r2, 0xffffffff}, 0x8) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/135) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1, 0x20}}, 0x30) connect$x25(r3, &(0x7f0000000340)={0x9, @null=' \x00'}, 0x12) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040), 0x4) signalfd(r1, &(0x7f00000001c0)={0x2}, 0x8) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0x1000000a, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:53:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d]}) 08:53:18 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 08:53:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 08:53:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) pwrite64(r0, &(0x7f0000000140)="c6e7a2481cfe32b563a65189d196d1471e034063003595506e6c164376520994b4a06bdaaa3bf40ec7f16a6d", 0x2c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x408000, 0x32) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x800, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={[], [], @local}}, 0x1c) [ 2451.925034] binder: 21186:21246 got transaction to invalid handle [ 2451.974338] binder: 21186:21246 transaction failed 29201/-22, size 24-8 line 2855 [ 2452.030965] binder: 21186:21246 ioctl c0306201 20000440 returned -14 [ 2452.084687] binder: undelivered TRANSACTION_ERROR: 29201 08:53:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9104]}) 08:53:19 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/status\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x101800, 0x0) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) fchmod(r0, 0x15) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x1cb}}, [0x7fff, 0x3, 0x0, 0x1, 0x1f, 0x7, 0x7, 0x1, 0x0, 0x10, 0x7, 0x7fff, 0x40, 0x8, 0x7fff]}, &(0x7f00000003c0)=0x100) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x2201, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r2, 0x1}, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000500)={0x9, @vbi={0x6, 0x81, 0x3c, 0x0, [0x3], [0x9], 0x1}}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) connect$can_bcm(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) 08:53:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d00]}) 08:53:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={[], [], @local}}, 0x1c) 08:53:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000500)={@isdn={0x22, 0x3, 0x7fffffff, 0x751ac3bf, 0x40000000}, {&(0x7f0000001a00)=""/4096, 0x1000}, &(0x7f0000000440), 0x10}, 0xa0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='[@GPL(GPL@keyringppp1\x00', 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r2, 0x3) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x0, 0x101, 0xffffffff, 0x8001}, 0xa, 0x2, 0x0, 0x0, "711364f6ea84122bd99f8207b141ecf9e8138f2f1f6ae54ed4119ae0bcfead3fed9678a6476d51dc49c8f547131d906d01a7005512c3cba9c35d5631dbd36b27"}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x0) 08:53:19 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)=""/16, &(0x7f0000000100)=0x10) 08:53:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d01]}) 08:53:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9801]}) [ 2452.572792] binder: 21678:21680 got transaction to invalid handle [ 2452.607306] binder: 21678:21680 transaction failed 29201/-22, size 24-8 line 2855 [ 2452.642971] binder: 21678:21680 ioctl c0306201 20000440 returned -14 [ 2452.709713] binder: undelivered TRANSACTION_ERROR: 29201 08:53:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfc, @ipv4={[], [], @local}}, 0x1c) 08:53:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) socket(0x1a, 0x6, 0x3) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) umount2(&(0x7f0000000800)='./file0\x00', 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x70) 08:53:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:19 executing program 0: syz_execute_func(&(0x7f0000000400)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178f64660f3a152900bce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abdc09000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d02]}) 08:53:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9901]}) [ 2453.178077] binder: 22025:22059 got transaction to invalid handle 08:53:20 executing program 0: syz_execute_func(&(0x7f0000000400)="0c0a34b59821218052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0fc421fd293cc22a00c4356af2178fdf2bbce0000080400f7f59064f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee4f1f12067e2f2abab00008fc9f094937003552ec401fe5ff6df64673467668366e80f11116666450f17720d1411") [ 2453.229759] binder: 22025:22059 transaction failed 29201/-22, size 24-8 line 2855 [ 2453.263242] binder: 22025:22059 ioctl c0306201 20000440 returned -14 [ 2453.274904] binder: undelivered TRANSACTION_ERROR: 29201 08:53:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x346, @ipv4={[], [], @local}}, 0x1c) 08:53:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e00]}) 08:53:20 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa00, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000100)) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000002c0)) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000480)=0x1, &(0x7f00000004c0)=0x4) 08:53:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d03]}) 08:53:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0/file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000001a00)="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", 0x1000, 0xfffffffffffffff9}], 0x1000, &(0x7f00000001c0)={[{@shortname_winnt='shortname=winnt'}, {@fat=@sys_immutable='sys_immutable'}], [{@smackfsroot={'smackfsroot', 0x3d, 'cpusetwlan0vmnet1)wlan0'}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}, {@obj_user={'obj_user', 0x3d, 'bpf\x00'}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, '-'}}]}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x588e, 0x0) accept(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80) r2 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@local, 0x4e23, 0x0, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x3f, r1, r2}, {0x0, 0x8, 0x8000, 0x7fffffff, 0x7, 0x9, 0x3, 0x2}, {0x2, 0x2, 0x2, 0xd87}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d5, 0x7f}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3505, 0x6, 0x2, 0x9, 0x59d2, 0x3f, 0x2}}, 0xe8) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2453.598601] kauditd_printk_skb: 123 callbacks suppressed [ 2453.598615] audit: type=1400 audit(32000.440:1054): avc: denied { map } for pid=22339 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x347, @ipv4={[], [], @local}}, 0x1c) [ 2453.724498] audit: type=1400 audit(32000.450:1055): avc: denied { map } for pid=22339 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2453.758147] binder: 22429:22458 got transaction to invalid handle [ 2453.795516] binder: 22429:22458 transaction failed 29201/-22, size 24-8 line 2855 08:53:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d04]}) 08:53:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001]}) [ 2453.846582] binder: 22429:22458 ioctl c0306201 20000440 returned -14 [ 2453.873531] audit: type=1400 audit(32000.510:1056): avc: denied { map } for pid=22338 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:20 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002280)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002380)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000023c0)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000024c0)=0xe8) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x4, &(0x7f0000002200)=[{&(0x7f0000000140)="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", 0x1000, 0x9}, {&(0x7f0000001140)="0f8e0f0009cce37322bfd82847e832f731c08ac289c8c642dbb3439eaf9e1c752ed405a4da2a725852adcb6148d741b9699da34c62e8dc516eb2574d230877737fb14486ce0cbbcb52949edd7d2257a6b50fb2e6541486108cba518e53bac12bb72e1f13f0949fd72dd64a5895df06f0a8ecd83cb1b6", 0x76, 0x7}, {&(0x7f00000011c0)="a7aabe3c72c07c4c9cc41cb21aa42e28e6b05f757beb544f72a8e7f4355265f5f285c6d052f6d426a88dc8a1a11a89bf192b591924aa7578a6482b4a", 0x3c, 0x800000000000000}, {&(0x7f0000001200)="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", 0x1000, 0x3ff}], 0x836098, &(0x7f0000002500)={[{@sbsector={'sbsector', 0x3d, 0x109}}, {@map_acorn='map=acorn'}], [{@obj_user={'obj_user'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '/eth0'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r1}}]}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2453.914254] binder: undelivered TRANSACTION_ERROR: 29201 08:53:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) fcntl$getflags(r0, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 2454.003544] audit: type=1400 audit(32000.570:1057): avc: denied { map } for pid=22424 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:21 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/4096) 08:53:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x500, @ipv4={[], [], @local}}, 0x1c) [ 2454.189708] audit: type=1400 audit(32000.570:1058): avc: denied { map } for pid=22424 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2454.347787] audit: type=1400 audit(32000.600:1059): avc: denied { map } for pid=22429 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2454.386918] binder: 22856:22860 got transaction to invalid handle 08:53:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550001c0]}) [ 2454.394701] binder: 22856:22860 transaction failed 29201/-22, size 24-8 line 2855 08:53:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00d]}) [ 2454.449749] binder: 22856:22860 ioctl c0306201 20000440 returned -14 [ 2454.483744] binder: undelivered TRANSACTION_ERROR: 29201 [ 2454.546205] audit: type=1400 audit(32000.600:1060): avc: denied { set_context_mgr } for pid=22429 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:53:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/75, 0x4b) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x1003810, 0x0) r1 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='bpf\x00', 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000500)="53a7f50ad852e198a135b8dcc117e8c5b0d059488517d89965eb69b69cb381b536b68bc449c58bdbeb8de1c12dd886e143c9b0f00d47a1e2f8bdbceab347b8e994fd65d8bfbf67df7f5018415cd2040da158641f1bfe3b1acf096c05f109daf1f8b39ac5835f805dc1fd349932d7c0976f0da5e14b830c473720a092d979e6b933bbd3d7545c0e73", 0x88, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={r1, r2, r3}, &(0x7f0000000600), 0x0, &(0x7f0000000680)={&(0x7f0000000640)={'cbcmac-aes-ce\x00'}}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:21 executing program 0: syz_execute_func(&(0x7f0000000180)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea0147394d000000c4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734f3f14d6666450f17720d1411") r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x0) [ 2454.667244] audit: type=1400 audit(32000.840:1061): avc: denied { map } for pid=22640 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4603, @ipv4={[], [], @local}}, 0x1c) [ 2454.760320] audit: type=1400 audit(32000.870:1062): avc: denied { map } for pid=22640 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x580001c0]}) 08:53:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100]}) [ 2454.922832] audit: type=1400 audit(32000.940:1063): avc: denied { map } for pid=22749 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2455.048324] binder: 23284:23328 got transaction to invalid handle [ 2455.078673] binder: 23284:23328 transaction failed 29201/-22, size 24-8 line 2855 [ 2455.118084] binder: 23284:23328 ioctl c0306201 20000440 returned -14 [ 2455.150462] binder: undelivered TRANSACTION_ERROR: 29201 08:53:22 executing program 0: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000000)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2c4a3394bb169941db400ab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r0, 0xfffffffffffffff8, 0x10}, &(0x7f0000000280)=0xc) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x4}, &(0x7f00000002c0)=0xc) 08:53:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4703, @ipv4={[], [], @local}}, 0x1c) 08:53:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc200]}) 08:53:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74010000]}) [ 2455.318993] could not allocate digest TFM handle cbcmac-aes-ce 08:53:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x7ffffd, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:22 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x42000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r1, 0x201, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae83}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73da}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fe1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}]}, 0xe8}}, 0x24048090) 08:53:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x80fe, @ipv4={[], [], @local}}, 0x1c) [ 2455.611790] binder: 23761:23772 got transaction to invalid handle 08:53:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd00]}) [ 2455.666682] binder: 23761:23772 transaction failed 29201/-22, size 24-8 line 2855 [ 2455.693113] binder: 23761:23772 ioctl c0306201 20000440 returned -14 08:53:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75010000]}) [ 2455.722534] binder: undelivered TRANSACTION_ERROR: 29201 08:53:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:22 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000500)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c435c4f2178f68682b20004f67c4c7dd6d68e90d484848c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2427e2f2c442610165a3ab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r3 = getgid() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x50b840, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x0, 0xf4}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000540)=@assoc_id=r5, 0x4) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000440)='system.\xe8posix_acl_defau6(', &(0x7f0000000400)={{}, {0x1, 0x3}, [{0x2, 0x4, r1}], {0x4, 0x1}, [{0x8, 0x0, r2}, {0x8, 0x5, r3}], {0x10, 0x4}, {0x20, 0x3}}, 0x3c, 0x3) 08:53:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xc0fe, @ipv4={[], [], @local}}, 0x1c) 08:53:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce00]}) [ 2456.142182] binder: 24231:24234 got transaction to invalid handle 08:53:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76010000]}) [ 2456.195872] binder: 24231:24234 transaction failed 29201/-22, size 24-8 line 2855 [ 2456.230830] binder: 24231:24234 ioctl c0306201 20000440 returned -14 [ 2456.269387] binder: undelivered TRANSACTION_ERROR: 29201 08:53:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x400004, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000200)={0xa, 0x19d, {0x55, 0x100000001, 0x1, {0x200, 0x7}, {0x2, 0xe3b9}, @const={0x9, {0x3, 0x6, 0x8, 0xfe}}}, {0x57, 0x81, 0x1, {0x200, 0x80000001}, {0x4, 0x7ff}, @cond=[{0x1, 0x8, 0x7f, 0xfffffffffffffff9, 0x0, 0xac65}, {0x2, 0x3, 0x8001, 0x8, 0x5557, 0xf3}]}}) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000100)="63461014cc64784275b95b91664e546eee7b2ce6efd310d16da91aac8b8f83300ea6317be4fa2f0180d8658283f19cd8e33aeacc848085b2a2c0ecb23d042c3b60766ceb7eeb5b01dcc20a8f7a1893552037e0de90cbc04f9d565ff4e2e1fe8265f30f26232472218ef6fbafc7d11be260a52a2438327818f005838d0bd74fb1dcf7a7b4f69a70d6a806158fe54515185601786e4a5f28eadc94e49bb961abe5d3f92ea42e7970efcd2b9db408616dedb67da131cee285e30f7b4319e1a80b3fdb5ae25e85bb145025d304a293dde829749a784821c8b4648742e6aaf7796e83386c", 0xe2) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x8000000000000020, 0x0) r1 = socket(0x11, 0x0, 0x9) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x4) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd004]}) 08:53:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfc00, @ipv4={[], [], @local}}, 0x1c) 08:53:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79010000]}) [ 2456.721583] binder: 24669:24704 got transaction to invalid handle [ 2456.759982] binder: 24669:24704 transaction failed 29201/-22, size 24-8 line 2855 08:53:23 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000001340)='/dev/snd/pcmC#D#p\x00', 0x5, 0x300) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@bcast, @default}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2456.794996] binder: 24669:24704 ioctl c0306201 20000440 returned -14 [ 2456.859366] binder: undelivered TRANSACTION_ERROR: 29201 08:53:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd901]}) 08:53:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfe80, @ipv4={[], [], @local}}, 0x1c) 08:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2000000, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a010000]}) 08:53:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:24 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x3f, "5e712959355e257e5385e43b351e50e5dc7222a262d4e035816e942b11475f0afbf5ed0db472734226a7d61cd7e6e143dc5c29c96ad3284708136d44a2c441"}, &(0x7f0000000180)=0x47) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0xe3df, 0xffffffff}, &(0x7f0000000200)=0xc) r2 = getpgid(0x0) ptrace$poke(0x5, r2, &(0x7f0000000240), 0x8001) [ 2457.351408] binder: 25180:25222 got transaction to invalid handle [ 2457.365478] binder: 25180:25222 transaction failed 29201/-22, size 24-8 line 2855 08:53:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb01]}) [ 2457.406409] binder: 25180:25222 ioctl c0306201 20000440 returned -14 08:53:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfec0, @ipv4={[], [], @local}}, 0x1c) [ 2457.451536] binder: undelivered TRANSACTION_ERROR: 29201 08:53:24 executing program 0: syz_execute_func(&(0x7f0000000100)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = socket(0x19, 0x8000005, 0x16) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@empty, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x401, 0x4e24, 0xffffffff7fffffff, 0xa, 0x20, 0xa0, 0x17, r1, r2}, {0x2, 0x7, 0x38d, 0x2, 0x6, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x5, 0x1}, 0x6, 0x6e6bb4, 0x2, 0x1, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x8, 0x9}}, 0xe8) fchmod(r0, 0x2) 08:53:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b010000]}) 08:53:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0x3bf8) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8eb, 0x800) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x80000000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000340)=0x7309, 0x4) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0xb, @sdr={0x337b7f5b, 0x6}}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01]}) 08:53:24 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x8}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x8, 0x1, 0x7, 0x2}) 08:53:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xff00, @ipv4={[], [], @local}}, 0x1c) [ 2457.989729] binder: 25601:25604 got transaction to invalid handle [ 2458.014927] binder: 25601:25604 transaction failed 29201/-22, size 24-8 line 2855 08:53:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f040000]}) [ 2458.044358] binder: 25601:25604 ioctl c0306201 20000440 returned -14 [ 2458.066879] binder: undelivered TRANSACTION_ERROR: 29201 08:53:25 executing program 0: syz_execute_func(&(0x7f00000002c0)="0c0a34b52e646540d9ffcd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c487dd6d60e948e948c1ea013e653e36660ffbd6c4a131ebca45363ef80f9966030faee42c2467e2f2abab3e6f26400f0d18c401fe5ff6df646734676683660f111411") 08:53:25 executing program 2: setxattr$security_smack_entry(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)=')$eth0vmnet1keyring\x00', 0x14, 0x1) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPIN\x00', &(0x7f0000000240)=']!eth0\x00', 0x7, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000340)="0adc1f123c123f319bd070c0cb4724839b6df4f193eff802ed26d21ddda5ff175696a0d0a981c4717a343aa2dfcd4e5b259a57c04001cf9cb867dd6dbfc6ebd2eb88d2d57aab2b8e9faa7b208a96e349d8759bf2b7555b68b7163d8a0f0637e092cc6feb375ab2d7e29f0dd68ddc8cc7617ce63526713a156370196fe00089e80336ed3c5217a12746bd612f3e815c729582c124365d3c577c03a3f96f37f20f58cddfa47eb33b1df21165f555b114e98e7c07066746dfeba99c66d0603b83bba5b877280000000000000000") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@ipv4, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) r2 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a80)='./file0/file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b40)='./file0/file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="04fc06000040abf300000000", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="10000200000000002000000000000000"], 0x7c, 0x1) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x1) 08:53:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe006]}) 08:53:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1000000, @ipv4={[], [], @local}}, 0x1c) 08:53:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000c0]}) [ 2458.500639] binder: 26018:26023 got transaction to invalid handle [ 2458.520216] binder: 26018:26023 transaction failed 29201/-22, size 24-8 line 2855 08:53:25 executing program 0: syz_execute_func(&(0x7f0000000340)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822afdc4356af2178fdf2bbce000008020004f67c4c7dddf6d68e9484848c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f11d9c21411") [ 2458.553444] binder: 26018:26023 ioctl c0306201 20000440 returned -14 08:53:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2458.610965] binder: undelivered TRANSACTION_ERROR: 29201 [ 2458.632003] kauditd_printk_skb: 111 callbacks suppressed [ 2458.632016] audit: type=1400 audit(32005.480:1175): avc: denied { map } for pid=26032 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2458.781152] audit: type=1400 audit(32005.520:1176): avc: denied { map } for pid=26032 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00]}) 08:53:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4000000, @ipv4={[], [], @local}}, 0x1c) [ 2458.904793] audit: type=1400 audit(32005.530:1177): avc: denied { map } for pid=26032 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:25 executing program 0: syz_execute_func(&(0x7f0000000280)="0c0ac443c9496204fcf30f5cb208db0000cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4b5f77d0f828a2a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bd14b0045363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/71) [ 2458.947761] audit: type=1400 audit(32005.550:1178): avc: denied { map } for pid=26032 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000]}) [ 2458.978290] audit: type=1400 audit(32005.550:1179): avc: denied { map } for pid=26032 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2459.015706] audit: type=1400 audit(32005.820:1180): avc: denied { associate } for pid=26237 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:53:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x82400, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2459.135167] binder: 26241:26246 got transaction to invalid handle [ 2459.188507] audit: type=1400 audit(32005.960:1181): avc: denied { map } for pid=26244 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2459.233641] binder: 26241:26246 transaction failed 29201/-22, size 24-8 line 2855 [ 2459.261816] binder: 26241:26246 ioctl c0306201 20000440 returned -14 [ 2459.319259] binder: undelivered TRANSACTION_ERROR: 29201 [ 2459.332757] audit: type=1400 audit(32005.970:1182): avc: denied { map } for pid=26241 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 08:53:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5000000, @ipv4={[], [], @local}}, 0x1c) 08:53:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02]}) 08:53:26 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x6, 0x0, "4916dc57b9c92f6b6e9af2c90d44fa59994491d9e0f8e061887f265b5260a9ddebdf371712761e06738bf321020da1c29a83335c5ac08041fb2c46e3bf26e60f6167f593b8cffad2f36ea29fb5eba39b"}, 0xd8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x9013, r0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x3, 0x4) [ 2459.434166] audit: type=1400 audit(32005.970:1183): avc: denied { set_context_mgr } for pid=26241 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2459.503647] audit: type=1400 audit(32005.980:1184): avc: denied { map } for pid=26244 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000c0]}) 08:53:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/8) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000001a00)="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") mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x46030000, @ipv4={[], [], @local}}, 0x1c) 08:53:26 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20540, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000680)={0x101, 0x8, 0x100, 0x1, 0xfffffffffffffffe, 0x9, 0x6}, 0xc) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140), 0x4) geteuid() ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000640)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockname$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000600)=0x1c) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0)={0x32d800000000000, 0x1, 0x396, 0x10000, 0xb343}, 0x14) 08:53:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0b]}) [ 2459.898522] binder: 26765:26777 got transaction to invalid handle [ 2459.910082] binder: 26765:26777 transaction failed 29201/-22, size 24-8 line 2855 08:53:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820000c0]}) [ 2459.948035] binder: 26765:26777 ioctl c0306201 20000440 returned -14 [ 2459.989835] binder: undelivered TRANSACTION_ERROR: 29201 08:53:27 executing program 0: syz_execute_func(&(0x7f0000000400)="0f3434b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef8364724480faee42c2467e2f236656766420f5604ddb1000000ab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000380)) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x100, 0x6, @random="4e5ce4748dd0"}, 0x14) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) read$alg(r3, &(0x7f00000001c0)=""/202, 0xca) 08:53:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x47030000, @ipv4={[], [], @local}}, 0x1c) 08:53:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830000c0]}) 08:53:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040]}) 08:53:27 executing program 0: syz_execute_func(&(0x7f0000000940)="0cd50a0ab5409898f56994c481fe16eaddc4c1a1573e47aac7e4c753fbc46153b6ee87ee87c4c47d0f8282c48fe9a89902df2bbce0000080a000000000008000004f67c4e948c1eac4a131ebca45363ef80f9966030faee42c2467e2f2ab0000c4617f5916df646734676683660f114d6666450f17720dc422612d0a") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10a01, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) [ 2460.524579] binder: 27202:27214 got transaction to invalid handle [ 2460.551291] binder: 27202:27214 transaction failed 29201/-22, size 24-8 line 2855 08:53:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mkdir(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2460.606514] binder: 27202:27214 ioctl c0306201 20000440 returned -14 [ 2460.634124] binder: undelivered TRANSACTION_ERROR: 29201 08:53:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfc000000, @ipv4={[], [], @local}}, 0x1c) 08:53:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840000c0]}) 08:53:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c0]}) 08:53:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:27 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = gettid() r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @local}, 0xa, {0x2, 0x2, @multicast1}, 'veth1_to_hsr\x00'}) getpgid(r0) 08:53:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfe800000, @ipv4={[], [], @local}}, 0x1c) [ 2461.171545] binder: 27617:27706 got transaction to invalid handle [ 2461.211682] binder: 27617:27706 transaction failed 29201/-22, size 24-8 line 2855 08:53:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 08:53:28 executing program 2: lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000140)='#&em0cpuset\x00', 0xc, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000240)='./file0\x00', 0x2) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0xfffffffffffffffd) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='security.SMACK64\x00', &(0x7f0000000380)='#&em0cpuset\x00', 0xc, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file1\x00', 0x0, 0x18}, 0x10) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) [ 2461.235605] binder: 27617:27706 ioctl c0306201 20000440 returned -14 [ 2461.263880] binder: undelivered TRANSACTION_ERROR: 29201 08:53:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86010000]}) 08:53:28 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xe7) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x3, @raw_data=[0x1, 0x0, 0x1, 0x900, 0xff, 0x4, 0x4, 0xb8, 0x5, 0xffffffff, 0x2, 0x43, 0x5, 0x7fff, 0x1, 0xfffffffffffffffe]}) 08:53:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfec00000, @ipv4={[], [], @local}}, 0x1c) 08:53:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201c0]}) 08:53:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87010000]}) [ 2461.765672] binder: 28122:28183 got transaction to invalid handle 08:53:28 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x800000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) lstat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000100)) syz_mount_image$hfs(&(0x7f00000002c0)='hfs\x00', &(0x7f0000000340)='./file0/file0\x00', 0xcc7, 0x1, &(0x7f0000000380)=[{&(0x7f0000001a00)="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", 0x1000, 0xf7a}], 0x2000000, &(0x7f00000003c0)={[{@part={'part', 0x3d, 0x898d}}, {@creator={'creator', 0x3d, "f2b8ac45"}}, {@dir_umask={'dir_umask', 0x3d, 0x3}}], [{@obj_role={'obj_role', 0x3d, 'bpf\x00'}}]}) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPIN\x00', &(0x7f0000000240)='bpf\x00', 0x4, 0x2) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2461.824057] binder: 28122:28183 transaction failed 29201/-22, size 24-8 line 2855 08:53:28 executing program 0: syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x2) openat$capi20(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x600) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0xa180, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) uname(&(0x7f0000000300)=""/66) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2461.885577] binder: 28122:28183 ioctl c0306201 20000440 returned -14 [ 2461.950694] binder: undelivered TRANSACTION_ERROR: 29201 08:53:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfeffffff, @ipv4={[], [], @local}}, 0x1c) 08:53:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}) 08:53:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b000000]}) 08:53:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x1) 08:53:29 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) write$vnet(r0, &(0x7f0000001180)={0x1, {&(0x7f0000000100)=""/101, 0x65, &(0x7f0000000180)=""/4096}}, 0x68) 08:53:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}) [ 2462.448006] binder: 28682:28767 got transaction to invalid handle [ 2462.470617] binder: 28682:28767 transaction failed 29201/-22, size 24-8 line 2855 [ 2462.484532] binder: 28682:28767 ioctl c0306201 20000440 returned -14 08:53:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xff000000, @ipv4={[], [], @local}}, 0x1c) [ 2462.497957] binder: undelivered TRANSACTION_ERROR: 29201 08:53:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d0000]}) 08:53:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d564b]}) 08:53:29 executing program 0: syz_execute_func(&(0x7f0000000100)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef8c461e56c47410faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x40) write$P9_RREAD(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x100b) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xdd9}, &(0x7f0000000080)=0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x200}, &(0x7f00000001c0)=0x8) 08:53:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffe, @ipv4={[], [], @local}}, 0x1c) [ 2462.968310] binder: 29153:29206 got transaction to invalid handle 08:53:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000240)={'ip6_vti0\x00'}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2463.016160] binder: 29153:29206 transaction failed 29201/-22, size 24-8 line 2855 [ 2463.071277] binder: 29153:29206 ioctl c0306201 20000440 returned -14 [ 2463.084577] binder: undelivered TRANSACTION_ERROR: 29201 08:53:30 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91040000]}) 08:53:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 08:53:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x100000000000000, @ipv4={[], [], @local}}, 0x1c) 08:53:30 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) 08:53:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0/file0\x00', 0x4, 0x3, &(0x7f0000000340)=[{&(0x7f0000001a00)="cc1c3d6f8fa73e05658f9b39cda56eb07bf04d10f52002b852ba191cb9dccf2ce5f9b89472b136bb2a814fedc3a0a9bac718987dc3f0b0989b140659db9df53500ad87685b5e33536e73c7923e7373fd6e635f08e7acd450a895ec4ee5a0694417c6f099ff31f556e9ed3d349a85a607e8366c9e79df9208f778392d78b5e0be996824798baf7b274b24e026c89577c19afac4fe8bd58bc1fc25e6314e59997826336583c47a95e486ec36ab451017576bb9e9f56eff1afd70846b199d1103d67573b77d334eaec903cde77f5d56b36c1c7e2287f2b9a493c048e8385ac87f947222112d1d2e0a51994be5d28a8ea479e3bd8c0ef8f37ec29194d09da8a9a5839640767db810fe7edfe5547d8479d17ec7ee01709b39821165755e0114733c8868140754a156930dba215f9676c0edf12efdff5ae23cfcd9d56141a68565d7d9af7b999dbc95da5069c32159b815ad3d710f62147a680c8bd45b7d07bc95e51139182119d9683097fff672414f44dc07cffe40f3fe0517224e19c91d65b2e6b792ccd31508cb01ec5b4948e789299770247b8613d08963c0824048c9cfea35fa3ade50ebd2608b8c02702025b8b9d5cc79f57ac5143f5e1b9b6997da761f9464ee6c6d33948a611e92a8cc1f01991b95d6004bbd295007804092484b3d5da88317bb19a6e7b1cccebdf94bdc244db1d79e3d9981f30fe7b79764f1f6d2c9baa2d4fbbfed09f6dc4c57fb77a870e9bc52f7669a23b3a7d806b5f0da5ddcfbe1db2dcccb7f9efeebd9223fe0781da0497c151a9791c3c363b9656db39dce9c69a970635e47a32c17534e585cc7e92fa2e791ec095a34febd4ede3220b15b24f37a59af7ff2bbb86e711b6f944bad2a4560018629173adc20825219132b1d1e71c2018793b3a534c041a39d068dbe0f6daecf2a4a9605b8649c0162a324847e5e981eabe3e27104dcd23449d3863c42e7a35d99e73898a7b03321eebe06c621feed92698e7af60a964809d89e31601c267c9b5b0be61326935996ccd545d4e257b4fefb7ad76da47752a520b810e1b51f437ddbbaa47c7272c8f3a32b9936bdc6d70a03c05efb88f36da3cd0f3706ea20255cbef02dec23f34cd1c31415ba74bf32c5afe3ce716271dcd49c6f38b48f67fe5a4f54bd394392ab220a783b419c34bc9e2647b4c0cd14fc054a3f3d2c72154d66fd71573b21efa9e81ef505708fb339280869c16a337d9d3433b0a52a2da3bb695b201a2c3dc9d4e77a71a9bee9b3ae7509dbcb6ecee9daa4b1af89eb0b109fbf00e176f0a10e95a2e4448cf296e81d2969c7072ce009ce6022bb5b3a32bcd0a781c05d4a7d90b02db2508f1b225421bc7fb3c0a0c83eb02a942f0e4ba329cdebd35d8d7f0d2ce462d3f603e447d4b8496e7113b21413eea2dfb35e6e6b537c2f840e4a60d065f992edea88fa17af5921cec78c0507fe743914c9e3530b893fcd85c8d59d5aa48ed73ba885569b4e0f92c9f184b84e4285f49de216afd5099532106d0c1f78e3b26e1ce8ad965d137eba74f63b6e06124fa56de79c88f273d2f938a73bc3a885ab61f6411207e614ea4826ea7a4d176e47a460c765ee2de1aa9fc32c1d69423a328d0e908ca00c09d08734dbbf191717eb13c7f38f490866c8c90c9b9e8ed1874f48574e7d2655b480031e4885a208f55deeffab2dbc957d7a0932c3fc05e92ee70081d417802ead167f26747c15b9efab20c1fdfeb9618256a7e696ed9dc14b91c93dbf4d2dbc652a557f8702c1404ecf816860b41252f5a3e2930577cb16b11450450338ddcc03712812677f4f3da29943657426cbe2ba0df208075f33b63b2063f81a900551f81ca95cffbfdf33a3ae67756d08a27c18e96b9db004ab4ba7d952c9e2b6f807890891ade7dab097cb89d3272dca62b5a0905a741973aee1ce06f3d1071d5a4eca7ed6b997a3c4b6152878702e48fc280c71a83954d69e40643f0ab97682daad5fa75983929e80da1f0ecefd47451c070a6320dcf21402abc23af68b02342c7ec405ef10c15b6ca2ce8d9a88957aef3ca31b7e747584a692b1dd7be3041cbc6fcea68373f42e2f8386621ab026fe4523e91671a040a0badf8dd626926bbce76d10f85f83b105bb879cef4278c7ab583d5c252b37f677a4d0d6f1b4c5f5534afb6f1e0daa9b3257d5e411370ca13e6b9a9cabf3e96fb1fddfeed04b94f590491f03778da6c9a827726665b4930665332e1fe4ef07e97fcc0c1805815d79524f76346258dcb16318be3a49b8062851224c83b88d9ff748ab15915d77bdb028e1120fc15f21011e7aad56081abdb55a29e48e97039f8f35fe6845ec6420f684e44a379e3a99be0d24e0c658dcedcf2557e34392b8c78fb116648c8e2bb7aadda22f85c4d81617611b15fa68a7dd288b269f51bd3e964c8404f14e2f84db9b9c610426eb4168efc29c15d9553e4349f3499e1a6e69af915d7169b51471ab3dc60a4ef4714b4c5f59b7d1cba19d1921b5c44e36d905fa2240d643d6e54791f6ed010dbd5f4474bc987f992dc4f060f3b1e8c8757851d0a6a11c86bce5930b23216c18b01cd26765856bec8a0f924992aef2cc76ab5d24936669720330a374e0332299597564770aabc01bdb996ee2118ca4451a17f55e537d79c9d28b8fbc3e061d26beaccaf41f46854dafd4c3ebe37b0a9c1f02c9668035d4b6cdba00354dbaac220037f3035e6e69a117ac62d2299900fc34a33cea9e6959cbb91822bfa4c82ce0ebd43fa0a14048e2ed5fb558810d9342c0df39f189c542e91bee39affa82d9f11e2877d53a103b191ac6a0b22497c56d76cf25953f8e030054e30fb4c523a0a94674f1fb4d113890788412b9f15acd15b2144d3d6161057a0bc12da04d4d34885325eac6568ee3a5d0706edd0be62aa4283cd4b9f8632b3177a9a8f57cb021b76ff8ec46fed524a2e9d796b90a6945552f21bc12071f65f8c3b0a1fd057a1c03c4d52e0f294fed066246a96b1f39707ebe84ad5aeeae7b970c8f5f63355c87136427c19190ab525edb099730faaaa0bad1b1953aa61c26731efb68b87c2d9b0e13ada8930ea7a73b1b824d069b81e9cc07f03fdd822b7a81a69809dc24790f355e8d7fed4db6289315721e4b10c615b099797437e84c56da3f641c6580631fa2041f003a10047299f235abef092366678822c7060a387981067fe7973608e2fd0cb069e3a2646ec95931d1dfd91d07e43bfe3b80ad6475c51ea33bbd96938a53da8a2a649e7c76ffe2b39e552b74ed854691bc374b5a8031d5544c097a6deb509069a4c47c94780487b5edf1e8c64f3b25d8a87da46f3fd9b75b82d47f15b739c67a6e1b6cbff1309960cac2b3c9c852ddc9d0504f0093c4eca9d79f5921462edd02f969f36e48a95cfdf053151e24fd8cb6f86832ac310f446e15bb5167c250d7a318fac01109b082b044fa676ff912ba71d13cf9781aab6bbff62e39bd1a42416b6749884347561b147a1b68c8be2a4c54ebd36ac780fa1fa42e5d522eecd35c646d937d6d9a05ae035000e18b003fa4cd85816fe4ba4053f26af9aab646679f7b26267573d9902d68511130370416a0499b074cfc3028e17cf075a706fef3b87a9eddc1f6466324d4fcbdca29d64a32137cb42ae16692ed1c6299d805650caebe67f64787749af8760670a13fda6120b5ffe4527f95cde8966ab315886f95af17d4f68fdd00b75dc914732e4d2a694d14b8d07d7239fdf1c6011810e7521c77c89026df32a563345b86e38583c56e6ab1bcf2cd1e9fbf5204f26c0436d693f678fcf73e564f1ae6da281f2496bcf27294b6201a2509cc6124ad4a748472bde7e980fa8be77e7cf2142b1667aa3bd9c7eec656f704da53e67b78b078efdc22520ee57c7ebd265c04b6d52907f2e9be84f29e13afa4e1b80117bccc2d7d9a14ec4d6194281720d6c2a1f9067a93824d58de58a852f0f580283745758a406c63a32036e9be748f459a00c7013cbdb6976c2cb1872a17d086c741397d21eaccda6a334e8cb89d7b59c7990c6cbd3f6dee2e76c5722ec1087a1ae00d3d79833ce7118998a248c048eefeb97543d01c6cab94ea98825a05a21e5b9886aa07b8a005f37778574df4711cb1901c2c8dfe6d99ae33ffdc815f637ab88164015070d455d80f753987462326753ff6da335372fb6c9ef6a1667d2f077569aea834dbcf836ce1af23df0c56a32d2be660143dd65087b739d0fa1eab6b26c9b38437add918dcc058b9c540ad3651d6ce8ece9ced68d84b761728b0cc6acb1a722690ca43c0629dec5f24b95464684511233b268f5485bd895b0c43c38b95b9cf33c394d5c4b8bf28e1eb99471095a353ad3e496bb9b88ff3a1b13f6fafeac95e1930299013fbd9c02ff4c41d7e8917411b09212a71a8f0b4bd7172ddcf4b3292b62303a70c6a559c3be6085135e36bf13e747e99dc30ad90e59e78e92a6aef2f1d4acf10252533c75978a168c6f2575651d4dd03d318702ba339b4865f38132af432f30a1b57152a4763f5fa5cf0bff205402bd2f40bd8f4c8b91c130bbddff20c63a2e921134195867e66348dd08addddf55f451d9725b22d951909476a2e44f74866594e1817de19039f82e0c6adad3908fd1c43ca98b225d864ff003a4343d3c5a430e3e1d542b46e78cbb244f33997bd4dbcb65418be07852d86b688168f86a7aee4773d06b814428bc0b59fc1cf37ddfe6d9db27e161fe6c6ed2d8c0e54cb9d1b6bbdc79d0b725ed79b7465bff2660c19e715059aed70d3d67d1e9545e46f98a33516be0984ddd59149a07044380c49a550ffebc3fdee2bdb887a6d28e17c7ee1e13dfd66964f5a2ebd832b32f06bda01667c52d7baf171482830072cd4773ba0b86e0666fce440b40d4ef84480e7349fe139921c8759086b6f143cfefc6b887c12e37ea47b3c88010b12c53223c329d04d7d0cabc3f08b20858f265735e49696643994107c00220735bad8865bd1f5b6ff078217f45f79671a3a622baefdaadc53f55340d23a6cfb8b753f311d762637a09d82d876a8329d7f411bf39c6e738dd02998043c9e13dbd0b3e26f77a3c37efe6b2e77d6b233eef6e67f534507e5b617495d0a38db5f93fc3e045a9c22688a8344083eb534232a41678ed8e6823050da49b3f2fa1129283ae664a7691f9528f8bad447649020981cde5a4077fba11f6909bf13a4e98873ec1e1ec0d51fc5ea9a99ccf008478ec9dda84d894b20946a1462561207aeb68fc7b1474947dd986511615eba246d571e8359818bfba3eadbab4b8e2e586d6159a153802e3c71e9225942910f891ab4722c7501f44f6d9239f573b0d4053c91f4e677e77ca809c29a697da9c0b3b5b4a8676ece027b8dc400d1571cac5f575573c30bfa5430ee297cd15ece47088b5680064855323d80191059b4df175ef40f672a50cbf8d091ceb8aa684e4a32d1b71c223be12666c00a1ccc16830d90d952b6cebc942c8d4d0401fae2e2103010405f933681472e61c7996d651a4af323aceedd865bc86fa3cfed062e6271f97f3fafdfc2fdf42d11ce799f36c18c5ca71be04ebca0297755fa0ebc1c88d5338ab075a0782c728b733b31a76237d863661f2a3e43673fef583a7c801afd4382db8534ae5df72bb8e081cd7cd06ae397f9ffa0bff39eb99744493bda970e8c1d8449ead40e7c61aabb52cb6056a9275ee34872f657a7f25f296ff9b6484b6ac67785b924eea4bcf3e4aa7a086fe3a5a4f369c2f760b34fe9af2ca5396374a40567c2c588ff0af7c0b96b3b604f0249", 0x1000, 0x401}, {&(0x7f00000001c0)="6650678e655fa307ea1494f750a700dd662732f13f78cb4b54d9ecd7fbc13df75c760a244f2e776c09406df131e74329372a57f74e23b54b9d0cccd5d3689ebe54996836ef3e90f325c12c2ff979f736e231a0169e339e0f0d5a1062c1317598f18fcce5cead973f909511c7cd10e5315c0c11581a27c0b0931eacb3a5d3c895f3fdbf76b0a0ec0d86916191cc1c4dc220a814c5330df755ac03bf1b1304614b4e0979885117cf73b8921b7f193415b53864b24499abb376a5f73508f2cf518170a5ec642d47b26fecad261a43e1f313f494835c0d5a52197d074c6b6b38eb9a8c4abcdb662a0713fc11ed1c78ebaef2d48ad8f0c792", 0xf6, 0x2}, {&(0x7f0000000140)="2e4768a9dcc57ef15e", 0x9, 0xcf2}], 0x848002, 0x0) 08:53:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98010000]}) [ 2463.600375] binder: 29495:29549 got transaction to invalid handle [ 2463.620139] binder: 29495:29549 transaction failed 29201/-22, size 24-8 line 2855 [ 2463.642960] binder: 29495:29549 ioctl c0306201 20000440 returned -14 08:53:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 2463.692237] binder: undelivered TRANSACTION_ERROR: 29201 08:53:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x400000000000000, @ipv4={[], [], @local}}, 0x1c) [ 2463.818323] kauditd_printk_skb: 115 callbacks suppressed [ 2463.818338] audit: type=1400 audit(32010.660:1300): avc: denied { map } for pid=29737 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:30 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200000, 0x107) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000140)=0xfff) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x10000) ioctl$BLKRRPART(r1, 0x125f, 0x0) 08:53:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2463.944982] audit: type=1400 audit(32010.710:1301): avc: denied { map } for pid=29737 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2464.002000] audit: type=1400 audit(32010.710:1302): avc: denied { map } for pid=29737 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99010000]}) 08:53:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x480, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x80080, 0x6e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2464.158090] audit: type=1400 audit(32010.720:1303): avc: denied { associate } for pid=29777 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:53:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x500000000000000, @ipv4={[], [], @local}}, 0x1c) [ 2464.272581] binder: 30004:30118 got transaction to invalid handle [ 2464.297761] binder: 30004:30118 transaction failed 29201/-22, size 24-8 line 2855 08:53:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100c0]}) 08:53:31 executing program 0: syz_execute_func(&(0x7f00000004c0)="0c0a34b598c46209f794bca800000052a05ce8e86962f5696200d9d9d040c3c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2b0fae0460d9f24f67c4c7dd6d68e948f20f38f07900c421a131ebcaca363ef80f9966030faee42c2492e239abab000026400f0d18c401fe5ff6df64673467d20e83660f11116666450f17720d1411") [ 2464.330016] audit: type=1400 audit(32010.910:1304): avc: denied { map } for pid=29873 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2464.381906] binder: 30004:30118 ioctl c0306201 20000440 returned -14 08:53:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000000]}) [ 2464.426740] binder: undelivered TRANSACTION_ERROR: 29201 [ 2464.477177] audit: type=1400 audit(32010.930:1305): avc: denied { map } for pid=29873 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:31 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/202, &(0x7f0000000380)=0xca) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000100)={0x5, @raw_data="3243a2def2b2553fd033991a20602b99183145897ab3bffcc10d617ab82840f2a4a4b9ad2fc2eea04f918d2ed1cf8cc46dfef7f7d4c253e1f0ee2fbae7425c394d77096b0253ff94c7dd79a031c5de3bdfedc440cb4bbf0d84bf89d1759c387b74b44ecc0c30e81bb82ade6fc668d3ec213072b02e94f59e854515d2353107b978c0a85e9a7cf0087e2bbd64748a953ed94cb81089e1ea16bd8e6d625cf1f71d0a5fe570d86918fa046dea5400f93406b4dd6cd2d764a4219c6179a7e313261ee84723ac6ef85e88"}) accept4$alg(r0, 0x0, 0x0, 0x3) [ 2464.668112] audit: type=1400 audit(32011.000:1306): avc: denied { map } for pid=30036 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d564b]}) 08:53:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xa0, 0x100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48020080}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x13, 0x800, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2464.816820] audit: type=1400 audit(32011.000:1307): avc: denied { map } for pid=30036 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4603000000000000, @ipv4={[], [], @local}}, 0x1c) [ 2464.884266] audit: type=1400 audit(32011.030:1308): avc: denied { map } for pid=30036 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2464.925864] audit: type=1400 audit(32011.070:1309): avc: denied { map } for pid=30036 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2464.975403] binder: 30494:30502 got transaction to invalid handle [ 2464.988437] binder: 30494:30502 transaction failed 29201/-22, size 24-8 line 2855 [ 2465.002791] binder: 30494:30502 ioctl c0306201 20000440 returned -14 [ 2465.035611] binder: undelivered TRANSACTION_ERROR: 29201 08:53:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f000040]}) 08:53:32 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xa20000, 0xe4c, 0x7, [], &(0x7f0000000000)={0xbe0937, 0x8, [], @value64=0xac}}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 08:53:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4703000000000000, @ipv4={[], [], @local}}, 0x1c) 08:53:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}) 08:53:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x7, 0x0, 0x0, @irqchip={0x6, 0x2}}]}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100c0]}) [ 2465.584985] binder: 30928:30949 got transaction to invalid handle [ 2465.600348] binder: 30928:30949 transaction failed 29201/-22, size 24-8 line 2855 [ 2465.623037] binder: 30928:30949 ioctl c0306201 20000440 returned -14 [ 2465.668907] binder: undelivered TRANSACTION_ERROR: 29201 08:53:32 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4300, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_execute_func(&(0x7f0000000100)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc466f3400f01f911edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f996603aee42c2467e2f2abeb000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfc00000000000000, @ipv4={[], [], @local}}, 0x1c) 08:53:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00d0000]}) 08:53:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24d564b]}) 08:53:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000340)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) r5 = geteuid() getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) sendto$unix(r9, &(0x7f0000000ac0)="87cf45f1f4623648ab51a589315ecdc8aec4e23fd595e217a316bd79932e1bea15d0e7bc56ee55ff1bb2ca5648905a8842e6ec48a8a7d96964da88aa1cd3c63df272991489dade62e978c47de3b1be6f229c344d7e71f66f2a9b54a131d7df6c8bbce8bc78cf525d3ea2f769b6f69f1032ca4aefaf630c05aa447252c288da439f5b8b86abb61b3292e199a76695a5620a74066fb142e7271cacb035b78a0ea8764a4c9b50f30e73a79fb00ac6b678221bcfd175895a42", 0xb7, 0x0, &(0x7f0000000b80)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) getresgid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r1}, {0x2, 0x2, r2}, {0x2, 0x4, r3}, {0x2, 0x2, r4}, {0x2, 0x2, r5}, {0x2, 0x0, r6}, {0x2, 0x2, r7}, {0x2, 0x1, r8}], {0x4, 0x1}, [{0x8, 0x2, r10}], {0x10, 0x4}, {0x20, 0x6}}, 0x6c, 0x2) [ 2466.205013] binder: 31286:31407 got transaction to invalid handle [ 2466.220104] binder: 31286:31407 transaction failed 29201/-22, size 24-8 line 2855 [ 2466.239296] binder: 31286:31407 ioctl c0306201 20000440 returned -14 08:53:33 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x5, 0x3, &(0x7f0000000480)=[{&(0x7f0000000240)="5a177b28e6f67180e07ab52b4e466d2a782a49d67381e6cf8b862e2322aa4a4ff6dc84cb9ab793e79e9f98025545d0db378b00431e5fdc5e6ce7ebd39c79065db472a95a124233a38c52d061", 0x4c, 0x6fa}, {&(0x7f00000002c0)="d884c78cf374bbfae29d7678bac1ed634124559a5469b73d7425f9de2f67b3f85a2dac823d88b0f9b915999ff97fbfd0f7aed6645f64a368c66d67c5b1ee296a717f80979fc6b8971dc276df141a62b4c15b3c947976eb7693d5103400a046d4f991c75fd1bd3515daec89c19dd98133743691969f69638b4fb83172d2d7086a725decf87934b4a83cb4c1a3364416706457293aac7535aa19f492e275586a89ea8613c727dc7fba1977b1cfbff93352a7f34603431de0e4dbbf59ded704fa5b93a9fb552e03f75b765646305528453ae9babcadb7a0d4503f40ee7c219a9dcfe89ba1175f4061efc1c1e4b5b6", 0xed, 0x80000000}, {&(0x7f00000003c0)="e3265bf174720017bc6f342bc097b1b6d1c99ccb88d6b21a5ee9e70d8b7b695f47925f86bf12d93468d07668433de278152636d2ae9f7f9c8707f00661ac0cb7500045f6c847d00e327a9692f03dfcc0355a5d372b829aa3957a65700489f11e747dd6e83d82af70f2b3dd53ef78636ab49f4683f115b5632277fe0ed464813570130d3b099ea8e283af501f156d2955d11f2ab55a969bb7d80b6cccd6b28811855454", 0xa3, 0x1f}], 0x3000000, &(0x7f0000000500)={[{@umask={'umask', 0x3d, 0xfffffffffffffff9}}, {@umask={'umask', 0x3d, 0x4}}, {@session={'session', 0x3d, 0xffffffff}}, {@part={'part', 0x3d, 0x4}}, {@session={'session', 0x3d, 0x7fffffff}}, {@session={'session', 0x3d, 0x9}}, {@creator={'creator', 0x3d, "5ca77dbe"}}], [{@obj_user={'obj_user', 0x3d, 'bdevbdev\x8dmime_type$security)eth0{'}}]}) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000780)=0xe8) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='overlay\x00', 0x800, &(0x7f00000007c0)={[{@xino_on='xino=on'}, {@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_off='xino=off'}, {@metacopy_on='metacopy=on'}, {@metacopy_on='metacopy=on'}], [{@smackfsdef={'smackfsdef'}}, {@euid_eq={'euid', 0x3d, r2}}, {@subj_role={'subj_role', 0x3d, 'vboxnet1^)/\xed'}}]}) flock(r1, 0x8) [ 2466.264558] binder: undelivered TRANSACTION_ERROR: 29201 08:53:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfe80000000000000, @ipv4={[], [], @local}}, 0x1c) 08:53:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0000040]}) 08:53:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30100c0]}) [ 2466.494460] hfsplus: session requires an argument [ 2466.548198] hfsplus: unable to parse mount options 08:53:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x2802) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000100)=@rose) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfec0000000000000, @ipv4={[], [], @local}}, 0x1c) [ 2466.824005] binder: 31768:31825 got transaction to invalid handle [ 2466.859924] binder: 31768:31825 transaction failed 29201/-22, size 24-8 line 2855 08:53:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7000040]}) [ 2466.891001] binder: 31768:31825 ioctl c0306201 20000440 returned -14 [ 2466.921513] binder: undelivered TRANSACTION_ERROR: 29201 08:53:33 executing program 0: syz_execute_func(&(0x7f0000000700)="0c0ac482c9be7a0c98f20f38f10852a05ce8e87962f5696200d9d9d0d260c6d81cff6111edca7ec4c47d0fa14b72822a00c4c23dbec0356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea01488fae410cc4a131ebca4536bef80f9966030faee42c247d67e2f2f2ab000026400f0d189c0133c422459ca47712430000c441557c7b1d6734676683660f114d6666450f17720d1411") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 08:53:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34d564b]}) 08:53:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer2\x00', 0x204a80, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000c00)='./file0/file0\x00', 0x29, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8000, 0x1) umount2(&(0x7f0000000800)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000000c80)='xfs\x00', &(0x7f0000000cc0)='./file0/file0\x00', 0x3, 0x9, &(0x7f0000001180)=[{&(0x7f0000000d00)="68c1cc9bf8ab2a1c9d5e3743fce6a0e459a9944291ccbafc0561a26f039da5fb2a0401ff1cc2d063978afc63c3ae0f5e9370873f8cc9fa879c2a5c1f07961bbcb96d97813040c7fc856c3f6fef650bdaf89ae404af8107265cc95b9636bdd2cccddd433ecf2d9401d6d5d7ec1d9e8803c8ea3c6ab34b81387b1781", 0x7b}, {&(0x7f0000000d80)="c79adea4b9937470053ae1b6f4a20d131b99ed7321ef3fa1c9b259a4b3b3b08e6b4cc33f1dbf8de7ec6d2501f4e5fe82409e076abec41806b4b349bae724895950d8c1fd6209e6e9533ee5895ca1537766309658ecce6986cb061222dc5a037b453be415d4ac1a675375ad3d55e30fa711cff1c5fa8ccc63d4dabbe6632fbaa010a1afb8d9a1f23118272c802a6e16bd62fd73d718b6d8851aaf134e43de8751124a38", 0xa3, 0x101}, {&(0x7f0000000e40)="a34f3f9c57c387f60570be2310a71adf", 0x10, 0x80000001}, {&(0x7f0000000e80)="04fba2990e61efbd376869a24e0b3fe83e46d2089063fdd9b279a8a5aaba28a422f62d3fe4f179d9bd0ffef6", 0x2c, 0x200}, {&(0x7f0000000ec0)="a40078ea026edd832816ebdce4e9e78be345ab29f95c2005e9cda846df38b2389aaace463e60c3660b5d30c876774a31300e811a0110a0d05a79434841b63fc79bc5a9ef69974fe7b8de010bd7d9deb357ef19d5d7529336eca2e332eb1ee55bbc2ab552b9e0c478a49d92198fa51ecf7dd0444b54f46cb61c22a4c14ac6113d6ba3b3c5f203bed3d72f0ebb508b4b5879341f", 0x93, 0x7}, {&(0x7f0000000f80)="dae0b55b81bf6c2abee4", 0xa, 0x9}, {&(0x7f0000000fc0)="b7c587a9e78c53a0f4ce7aa4cd96a26558f79456b53d5245c2b7f2bb557f2150cf300f0418a86020be35fe2a1257538728d0a45e24c9a56a26f835059bfa355b859c7e16047603e2325c0dea36777424aa84989d4382967403c110fe12170104b9acee2e1d42b35e0b5b8aad694d239d87", 0x71, 0x7}, {&(0x7f0000001040)='d', 0x1, 0x6}, {&(0x7f0000001080)="2eb21fa7a29da584c6e1226472e812848c92d10e81ee03db4ef8454f6ffeef7a1a1e19a35c6623c972d9a602023239177c2259bee8d5490c3e799fec72dba63558a3f059c612b1ccc365d57ab2ecc68dd2ba595777743083f5d9c0402ff63ae231a93734363f6089b14733a1c63d96f427c1053f95136058a8714639c53d9d14c1c9099a6648c9cb115cc0e4bbf8ecfada3d908dbb0969aea47013b688e26b4f80c04a0a03f39336556ac8c2ac1b7aae1d3304e9bfff0c8fdb5f46a0d9cb30f57959e8cb8aa5f31381e4", 0xca, 0xffffffffffff6d57}], 0x8000, &(0x7f0000001280)={[{@lazytime='lazytime'}, {@logbufs={'logbufs', 0x3d, 0x4}}, {@bsdgroups='bsdgroups'}, {@largeio='largeio'}, {@uquota='uquota'}, {@uqnoenforce='uqnoenforce'}, {@noalign='noalign'}, {@noikeep='noikeep'}, {@sunit={'sunit', 0x3d, 0x1000}}, {@dax='dax'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bpf\x00'}}, {@measure='measure'}, {@hash='hash'}, {@measure='measure'}]}) process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/40, 0x28}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000840)=""/254, 0xfe}], 0x7, &(0x7f0000000480)=[{&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f0000000940)=""/229, 0xe5}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000440)=""/55, 0x37}], 0x4, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/cachefiles\x00', 0x8000, 0x0) bind$netlink(r3, &(0x7f0000000bc0)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) 08:53:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfeffffff00000000, @ipv4={[], [], @local}}, 0x1c) 08:53:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000080]}) [ 2467.339282] binder: 32236:32261 got transaction to invalid handle 08:53:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d564b]}) 08:53:34 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) [ 2467.395093] binder: 32236:32261 transaction failed 29201/-22, size 24-8 line 2855 [ 2467.454474] binder: 32236:32261 ioctl c0306201 20000440 returned -14 [ 2467.492018] binder: undelivered TRANSACTION_ERROR: 29201 08:53:34 executing program 0: r0 = epoll_create1(0x80000) flock(r0, 0xc) flock(r0, 0xe) flock(r0, 0x2) eventfd2(0x5, 0x1) syz_execute_func(&(0x7f0000000280)="34b552a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7cc4c4400ff6bf8900000082822a00c4356af217c2df2bbce000008020004f67c4c4a2793d40dbe948c1ea014739050000005bc4a131ebca45363ef80f99660340df8d000001002c2467e2f2abab000026400f0d18c401fe5ff6df646734656447d815f8b000004d6666450f17720d1411") 08:53:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xff00000000000000, @ipv4={[], [], @local}}, 0x1c) 08:53:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000081]}) 08:53:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70001c0]}) 08:53:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getsockname$unix(r1, &(0x7f0000000840), &(0x7f0000000580)=0x6e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) umount2(&(0x7f0000000800)='./file0\x00', 0x0) syz_emit_ethernet(0x110, &(0x7f0000000340)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [{[], {0x8100, 0x2, 0x1791}}], {@generic={0x8301, "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"}}}, 0x0) [ 2467.950783] binder: 32619:32678 got transaction to invalid handle [ 2467.987766] binder: 32619:32678 transaction failed 29201/-22, size 24-8 line 2855 08:53:34 executing program 0: syz_execute_func(&(0x7f0000000280)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d261c67a7ae4c753fbc46111edc4c13d74998f591220c47d0fc4e23dabff2a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bf242ac45362eeba4a49966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x4], [], @local}}, 0x1c) [ 2468.060088] binder: 32619:32678 ioctl c0306201 20000440 returned -14 [ 2468.088964] binder: undelivered TRANSACTION_ERROR: 29201 08:53:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000082]}) 08:53:35 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x4, 0x5a, 0x80000000, 0x1, @time={0x0, 0x989680}, {0x7fff, 0x7}, {0x1, 0x5}, @control={0x8b, 0x2, 0x1}}, {0x4, 0x20, 0xa4a, 0x71, @time, {0x100, 0x3}, {0xfffffffffffff1b2, 0x1}, @time=@time={0x0, 0x1c9c380}}, {0x4, 0x5, 0x40000000000, 0x4, @tick=0x7, {0x7fff, 0x1000}, {0x401, 0x1f}, @control={0x3, 0x3ff, 0x8}}, {0x2703, 0x5, 0x9f0, 0x6ad, @tick=0x7fff, {0x54e, 0x4}, {0x1, 0x10000}, @note={0x66f, 0x7, 0x6, 0x41, 0x7}}, {0x3, 0x7, 0x92, 0x1, @tick, {0x1ff, 0xfff}, {0x9, 0x24a2}, @note={0xd84, 0xfff, 0x6, 0x1f, 0x3}}, {0x0, 0x6, 0xff, 0x494, @time={0x77359400}, {0x2, 0x7}, {0x7, 0x1000}, @raw32={[0x200, 0xc035, 0xfff]}}, {0x3f, 0x1, 0x9, 0x20, @tick=0x5613, {0x40, 0x7fffffff}, {0x6, 0x40}, @raw8={"10a18ac008fef80cd8edebd1"}}, {0x4, 0x2, 0x0, 0x8, @tick=0x6, {0x284, 0xfffffffffffffffd}, {0x5}, @control={0x7, 0x10000, 0x20}}], 0x180) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010040]}) 08:53:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x5], [], @local}}, 0x1c) 08:53:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_smack_transmute(r0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1824bcb4ab959d47) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = getgid() mount$9p_xen(&(0x7f0000000080)=')cgroupkeyring%/\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x40, &(0x7f00000001c0)={'trans=xen,', {[{@version_L='version=9p2000.L'}, {@privport='privport'}, {@fscache='fscache'}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@mmap='mmap'}, {@cache_fscache='cache=fscache'}]}}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000083]}) [ 2468.567055] binder: 665:667 got transaction to invalid handle [ 2468.598066] binder: 665:667 transaction failed 29201/-22, size 24-8 line 2855 08:53:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa010000]}) [ 2468.665156] binder: 665:667 ioctl c0306201 20000440 returned -14 08:53:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xc682, 0x80000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x1, r1}) syz_execute_func(&(0x7f0000000000)="0c0a8fa9d09356f298cd805200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e9484739050000005bc4a131ebca45363ef80f9966030faee42c24c483696d9c51e70000000d4babab0000c401fe5ff645d9fb4d6666450f17720d1411") [ 2468.724377] binder: undelivered TRANSACTION_ERROR: 29201 [ 2468.881804] kauditd_printk_skb: 127 callbacks suppressed [ 2468.881825] audit: type=1400 audit(32015.730:1437): avc: denied { map } for pid=908 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfc], [], @local}}, 0x1c) 08:53:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000084]}) 08:53:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:35 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfffffffffffffffe, 0x400000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xffffffffffffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) syz_execute_func(&(0x7f0000000340)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178f88f3469ce1069ce106008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f240d8edab26400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r1 = semget$private(0x0, 0x3, 0x24) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/55) 08:53:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2469.141125] audit: type=1400 audit(32015.990:1438): avc: denied { map } for pid=1094 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0201c0]}) [ 2469.226224] audit: type=1400 audit(32015.990:1439): avc: denied { map } for pid=1111 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2469.295272] binder: 1120:1155 got transaction to invalid handle [ 2469.323100] binder: 1120:1155 transaction failed 29201/-22, size 24-8 line 2855 08:53:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x346], [], @local}}, 0x1c) [ 2469.343825] audit: type=1400 audit(32015.990:1440): avc: denied { map } for pid=1111 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2469.379678] binder: 1120:1155 ioctl c0306201 20000440 returned -14 [ 2469.380900] audit: type=1400 audit(32016.050:1441): avc: denied { map } for pid=1107 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2469.411539] binder: undelivered TRANSACTION_ERROR: 29201 08:53:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000100]}) 08:53:36 executing program 0: syz_execute_func(&(0x7f0000000280)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42ef2a767e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2469.510569] audit: type=1400 audit(32016.050:1442): avc: denied { map } for pid=1107 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2469.554089] audit: type=1400 audit(32016.120:1443): avc: denied { map } for pid=1120 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 08:53:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2469.698346] audit: type=1400 audit(32016.130:1444): avc: denied { set_context_mgr } for pid=1120 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:53:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 08:53:36 executing program 0: syz_execute_func(&(0x7f0000000000)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc4610f0f279aca7ec4c47d0f82822a00c4356af2178fdf2b3ce00200363620404f67c4e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c24670f3800a50e000000f2ab000026400f0d18c401fe5ff6df646734676683660f314d6666450f17720d1411") [ 2469.750200] audit: type=1400 audit(32016.310:1445): avc: denied { associate } for pid=1265 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:53:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x347], [], @local}}, 0x1c) [ 2469.886228] audit: type=1400 audit(32016.730:1446): avc: denied { map } for pid=1648 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000101]}) [ 2469.980490] binder: 1650:1652 got transaction to invalid handle [ 2469.998848] binder: 1650:1652 transaction failed 29201/-22, size 24-8 line 2855 08:53:36 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000001, 0x30000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x36, "b91a6e143eb6e3d4f8eccabe7bc0c2e181293068fb84242f89daa001ea95f6ce642962f8b1932f9596b6128d6e811380fbd1caff7f9a"}, &(0x7f0000000140)=0x3e) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x0, 0x8001, 0x8001, r1}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x1000}, 0x8) [ 2470.035803] binder: 1650:1652 ioctl c0306201 20000440 returned -14 [ 2470.097851] binder: undelivered TRANSACTION_ERROR: 29201 08:53:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001c0]}) 08:53:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1000010, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x844, 0x480c01) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) fanotify_mark(r1, 0x14, 0x8000000, r2, &(0x7f0000000180)='./file0\x00') mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x500], [], @local}}, 0x1c) 08:53:37 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) accept$alg(r0, 0x0, 0x0) 08:53:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000102]}) 08:53:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) [ 2470.535093] binder: 1977:1991 got transaction to invalid handle [ 2470.601185] binder: 1977:1991 transaction failed 29201/-22, size 24-8 line 2855 [ 2470.640928] binder: 1977:1991 ioctl c0306201 20000440 returned -14 [ 2470.679045] binder: undelivered TRANSACTION_ERROR: 29201 08:53:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000140)="0adc1f123cbdb6ddb8b20ad6192d5884404c") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x800000000000000, 0x100}]}, 0xc, 0x3) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x90) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x2000}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x4603], [], @local}}, 0x1c) 08:53:37 executing program 0: syz_execute_func(&(0x7f0000000280)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") keyctl$session_to_parent(0x12) 08:53:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000103]}) 08:53:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:37 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) socket$bt_bnep(0x1f, 0x3, 0x4) 08:53:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) [ 2471.160875] binder: 2547:2588 got transaction to invalid handle 08:53:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x4703], [], @local}}, 0x1c) [ 2471.212129] binder: 2547:2588 transaction failed 29201/-22, size 24-8 line 2855 [ 2471.247257] binder: 2547:2588 ioctl c0306201 20000440 returned -14 08:53:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xfffffffffffffffc) 08:53:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010000]}) [ 2471.291262] binder: undelivered TRANSACTION_ERROR: 29201 08:53:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120101c0]}) 08:53:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x80fe], [], @local}}, 0x1c) 08:53:38 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfe6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x2, 0x10, 0x7}, &(0x7f00000001c0)=0x18) 08:53:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:38 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x77, 0x7f, 0x10, 0x60d6, 0x59}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0x2}, &(0x7f0000000340)=0x8) 08:53:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010007]}) 08:53:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000080)="a5591b21f8117771d68842c8cde491fff28405f02bb6bbdc74df77be0690a1d1565f5343f3434e2c8218278902461bcac709227865", 0x35, 0x10, &(0x7f0000000100)=@llc={0x1a, 0x1b, 0x650b482a, 0xffff, 0x9, 0x3}, 0x80) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2471.815812] binder: 3017:3129 got transaction to invalid handle 08:53:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xc0fe], [], @local}}, 0x1c) [ 2471.869663] binder: 3017:3129 transaction failed 29201/-22, size 24-8 line 2855 [ 2471.889689] binder: 3017:3129 ioctl c0306201 20000440 returned -14 [ 2471.901425] binder: undelivered TRANSACTION_ERROR: 29201 08:53:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130101c0]}) 08:53:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200100, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000027c0)={0x3ff, 0x7, "4dead0625c6e4409126ea73f122382eaa83bb78d8d321793068966c912252e74", 0x0, 0x7f, 0x6, 0x30, 0x8}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") syz_mount_image$nfs(&(0x7f0000000200)='nfs\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x9, &(0x7f0000002680)=[{&(0x7f0000000280)="f93c23c7ef416abda1b0c0ea9baafa1e5c3e4178a06fffec0888bf431cbb262a469e2fbc19530fca9334c6721bb4c9f4fc281d5c205edd9cbb922c124fb2f35f1228093478525df284d294ab5e996a24403435699ab0ae5e7570363b892bab03145d9266f1a75fed844a5e3abe747d6d9f24fdf22438b0bb508e32317b7aa56a088236b821a65715d9a7fe5dd521f0e24d0e8988d864081a9edc9faed69c6bab7aa0169a8c3f513663554894a863fb6a84c3daebf2a16bea9cfd808d249204ab8f8f331b353f987b5cbfa99df64f941c934bbc36c9631b1ff9b91af7b7e4352f83d17d85d9d049e0e4e33d943b83e2265119a8948e32f3d627d2697fd1769c61e58a282eba55cb6635c0f043afa8d0a929c9df04660984816f051eff668cc01de8ef906beb29e4b88c9afe38508d11b0cad1d522b32220b8c16fdb5852424a62f33340971ae5a30f8997fb7402d5de5b3ff929ab978f30b1b382e11ae486cc30cd2cd7eda43142643f4929234cb1d21fd41cb9e3980f5f9136e22aa99e9ccebd928c3edc66f8feecfb85433617b5f7b2b9e0c215ff74626324eb2161526fc316b7f113b4b613b657f5c2c99a828c82b5ce3528ba6b92449af6f7ca0217c9ed4dab95c55e1225780498eabd64f154a2e1c0926326e86d44431ddab308dc1ffe6cec00b50c002d1e24c6bbc6f8e6a29cf4c4f42e54db8b0f6f9f9eeba0a51012d79c14aa504ee69f5ac0fde46d16fbf3ac992ff568479bd239020a296cd091678aef64420818f8ed7700cbc370271ad7656781a6b01483bba06e8b9a494680355b1e9594cb4a2a5105bf49843d8adcb6e920c7ed66786e49d59222cb9bd3a9cad79763c019ed014cd161746d7cc5dea5286e0ea5775da41e4aecfe8d46df72dc19be03d8d236a7d9f2c6fc55455d6891cbe6afe85f3b4395ba7f279793e80b1509dac2143a675c67e735b89680fabd93044aec5bad6564712bc82cfd52c52e8f9613609c1962ca7fc9e45532897694368c71a987e996c3e0c993cb1c38de96bfab64f64b85cc40821deb1b388829cd014c7b75898e710847bc01656a9d94524e1795da8eba932dc272c4e7329304a07a979b76ff9cf2b9d03c58418a08001ba6833ccc4b2ba7e0162ef9aba720bc64aefbd5ab9a0b6c3417e7301bc27b545c495b37e40680815e64a083ac20d5cd29a78775c62923fd3d0179d828c856b3273d9b7349f6a8bb43d47e9583667b44a352f4a1776727237282bcd78073d40985fb8d18ff7a90a0425cabe5ea37ddd4f023a6ea93258bf4575f9b61a155a787a8ca84fe26460344df531e517a9c9a69c7665503046eabca980d1b6a17d37b06c7ed613021da00dfa7c8b175f24f4904974e64b2cd433428c15cb5ab0efed1254552c818af86eee295afdc4ed70133eed548788b260b4afa2fa3a7080c7c8af8ede3b93e8e2a3fa227603d7ecaffec2916081c4dbd95f94dd7c8b96a8fea4a5cf1ed262c61d512c16abe692615a57c5da2fc6616a0f23498eb233409adb3843fbad19bfc8bb89a398a59dea3f713a91df1510d4f6538e20c91ce033f6f4cc5e6e001449b1f1777099d98c276bd96df52a7d4d6cb69b13e438d7dd789bfef360dac2d4159e480801f10e983879bf09aeee0ea630ebeb08f135ce3ca377f337e5e094c413b7f5e70b6465c1fe4e6dfe0833d91eb4cec8cbf718eb4e5411d166f43349ffeb8c41d5cad16696e8fd7949859abf05c70d59938a4fef2b4b002382fbce0b00c678b9f7adc02b423b201545c39b6103978010fc132784f2f04e66bea3f04df233b9f6073a66117d95f9f8d77478cf12da6993c90a3145328697c1dc51bb8ad1b7cead6f8c4cca0ac0e9c1860df937e5ecfb44b6cd5a2335134434e84121c4d605d6226bf751b080e4f4236dc5141064d11851a2aa281475a440d94a7fb6b09e6e8dd20cc10ce0393eb7102516661779cba9bbc0931d9d9f10301c596faf82a11a31695581e5abc768230dfab9bbca703edf3f0ecb537f81a9e4a1644f7383b2147153e32ed77fc6777575400a70591c20765a25caeb7bf3547ad3d9208c1d9053443944803460c4a68a7985b13962940761feb40ce2fd341ee03ac9d1e5539085beb65397a01a9d79fe7e00d20df879b9f8d1794d23b9d15c508a8db04033b0e5fbf0454a08596a0a9a180d4b2a559e227a94b2a0bb47c81f0331a933e35ed224f81991c376cc5c91bb9c6215c691c60e8c01effb921824cbb0d6e3da5315b960e55a22e01857e822936763c595b94d88669ac20ef19c2111bcbcc2eca35fb44db3bc4bc5103bec62544fabdbe038756a47ed76da3d8876d22d5bc5f425388a4fe90ad7e74ef430006a97e2239f65f41b1964a2e44418ec62435b51f666c57a48ea58e29760e169b11b2f3343649468b8780f84ac3bb7b3bd6c41d3be0a8492ce11edcabfa477a36f2de8c8f3adc98a46fe582d7d5811d950958dda60741d88225f6a00b51b8b35adcdf9e9a7d08b848c70b7a79955dcce056d3653e166c20c31afefecddb2f5a81fca4e92c1996ee88fbec7f75e2546bd8bec011c40951a411a74506f84175220c5984cb743f2f915ef8e9b93e1a2a2175cc54e982020d7584eb883bfa016d44354d0f6aa7f4b66ad4981e16d4a651b482689421b540397ecf78e6dc538106f222b0a84314babb63a2de18cb68d0a52c2842420915766c1f04407b769c3a4484960a3a369bf2c0b2575949fc8320a8417743542d903f8656bda3d756c04a4c50dd085a1207616dba6829a9cf31aabe695aa9a55aefa03f302f68a74c0819c64e66add815839c584504c79e280e85d3387d38b874868865ed3bbb043ea03292f89fc6e9047862af44c57615e2554349d252a4f32395d3b92a005d053d67f192c54338abd30d44a72e2828bc5bac859a64a22f3937f1edf39b23cb8f3482bbee9ed37f571b245a32921a309386d52814b6110f0521e9c97938ec495e22343fc301c05dac61096289a81512021d0d369e83093ef6ea6eab30c4ca939c72b7593df25e23e969d35b991ba679c311e707fe87e355cb3b8149a8deb323783403d5966f47e20964667e93cc08c55f7a30bdbc903fa47878dbcd4e57c1adfb77fe089e2b6aaeb99187ecd35fdd2650f745d90c5d6ba9d488dc3d5cb296a3ee65213469848e9ea36318f22896d4ad4015efe1a134703b6a3758d724fd4395751c9dfdc8d33f26b6daad7de8a69fd2063382e2c0581cd47c086ae5b953d36b043f596459e5e40498275adf1944b180565001226ccd9b0756e6b4b68dd41046056855f4ffd15680bbc971ce86970a084d670a04d984a82c5dfd236633b4b710d19ed78ddb6f93f0ad9f9ff282c1fff8c3d8b8920ba45893c3ea7875824cc31410d0f83c91207fae2723040499b8c0b71212540bc515b01f34ad7225ffaac3ec80bc525d2a0ae167213f7bb1da06d79cdcb64e2df60b3b9bcb8c6673f417b890005a7b9d02f1de4f0e1f6d913822f0dfc4d01e4fbd2194fed06fd1c06ba3d7c402a3794ccb2f0e13ece94298a0fe91ae6f5636c76092c7d1a8b9d984122cd64f23dc4f3366373eab71052a198a7c568d91f83c453e40179454471934d4a5497628c67dcf329e6076e78469d89f217c7c3a35ea17cdb48e8a5e87c79a0f48ad59cc5e69c871d37b731dda830dfb929cae6e13ed292c7d0a0ef54251d6bbc1520f47ee999cfc784b9130d55fd2aaf82acdf226e221602d1487144272581d821f05362ac94a574fdd0467d02e20a4aa747f6fbd5593a13350b9e51911f7a0bc844fec95ce43aa9895073b5908a4b71adb567255e467143b19e6890b09f4e9c74f35bf11f6122fb769e7fdd4eef01c0929bbae0d911a210c2fd43a7cca9d5603b68c517b2a5b411c457d68a4cb6bdc121d9bd5eaab77d3af85da4f6e33ea76532209e3732ccc36a774d0350e376c511af136ca549a0bc4a6dbb6244dd378714c2952049001db71a8efd125db33ed93b1cb9a6e6e9f892d9e4835fec3c1c68a35c56ae25c6a539b5c5332ed777aef30e3f6ed6ebc400afce10ee5ab75b1a80b3f2711cb0b10b6fd6ca4c0e9a2bf3a7c5a935842cad059f5184dc89a9abb19257e632f0d4c8b3c064431acae6f218c9dcf027555374d3618f25733eb1c86bcf4b5f17ae8c5b15465f7b40c8256e7978fabc5d1b6f699a7c753c4f2045ebf3b596f2aacf54ae2bfd7a82cc68629fe8bb6e8bf130d77a302b6884a2cd2754a713ce01d3a8ba64a223ba1ba57f73e81645616bac89fa587ef70f13b7a2bdac9cb169ffe9d572847d581b516a71acb200df04df0ffc032a022d771433f5d9c822c8409abf29046f19dfda2f5e9d691df0c9b612ced2222dfbffc05a7bf40f79b9e916b76ce3de7ba6bb93cb1351f415c61c51be435c11823cae5622dfbebc7fc8c1c07331acabdf0a6423a8d80ebd68e3c2561ccb90a08514ff71400f80803d793dfc6d1bc1ebf9903f8568e344c04725b3aa2fb9e64f76358f094cf9034760931d44a28ced4bfffbe099466740d6e2a824f9063608dd6efded16f06a94ed42ca358e1ba0dc04f93951f13e4f5c864306a34843d1dd3d76b42eceb2f4009f9821b0dd6edf53ed7c2fa51938cb2fc0095ef1cb1608df7e03aeb568b5a9f7008362121da66a65e6de9328805f876d3337f81e5f2f571f23c905c119a9ba0b223c009d54083af10b644d0d9405840144b8c9f35aec559ff216113a92d772f66a12f360f51ee7d694c7d21db41820f640c6377b0ae074cb8e95e8e1a3e1601a3522bd2b5e725c7a8eee459725933620a23344da70e3dfe6e65c9b44c1df1b1cebe4fff884eb4d0490ce3c2f7e6e526d33bf06b45ab603f2abe49c6a2408c8df80dcafd91000dddfbce4afeb444c6bd07ae663914cb38978a14cafba0187912e9be1735c177a22f6c9e8cec4a7530ef4c0e0ea9feec3afdd791a988ae6cdb7e8f837d56e998b34b695e1371871e97ddaf2b851feb0f4b432d8b0ddbeda8c677ce83bd89a40d2c4853a9359fe30a97ddf558a0c5cce7ac1d9df814b1854df8fdd4936fd9f1109feabbd5fb67043d6121c9b1ae76f294539126b3b9fb59246d2bb55fbdc97f53e850004a449cb463846f6ee706854dca1a8d23f03bee1217bbaeea2dd77917af4c5e7400bfe04331e530ccc3601c20a5e6e5f94910bccbb59990ff8d4fb8575200ce446002c6574107c843aecbea60b43cd6f329cce0c89fa6261d6eda81d6bb799e27e52a03025375abce546f90197535cff51e993061e23fb284033a834148e502557bba0c362e9964e978fb3c978d30ac37beed83014b6e38f323a2ee70cfa959bd7095a2df3ca1278202dfb8f9e4371742ccb7040656aecc54b95c5a6914de20032c4a176f541dd4e6f8050c1a086dba1e4288070ee9b3e6b122fbf8a787f46c6d308d33c46942c06105fda35d2f2e72c22717e852337e6a1a4bcdbc4cdf8a9168e9ae0b8ee5d66a2b4a4ed97be0e1e0303a359a280e02f578a4092760b37178fa0c22c4f40b8d8fe26aafbd6b0c203e9a055cd07bded198548ccd355da454f79c3d1aeafd24f6aedc8c2d85661cac00f0a673abf4ce716e6a73e4da3c4f32a523714aa7214bae0a3281e68b30dd07328886734442195419fefa2724783e3cdebdda780b8a95454ad5b851e1917e4653681e2f072a28e067233878838b4b5e7ab91a80e56ae7724174e38ee799d10fd418073737e26bca99354d0070b906c232e68dcb6c48cd14b67abbf27125a1ab6934cd28eb2fe9660793fd2dc683bc37", 0x1000, 0x6288}, {&(0x7f0000001280)="cbf9e5e284cbfe16b93ba0a0e8d244df5ce63c107a97d1d5999f06ea112e959f6bb8cb9823b71d76c59cb4555ca5ede9d4f2e7a728348966da19a4c0ecf84e186ad50f0cd00e700fbda711ec0962225143a0ce0af7dc14966d610edc009b4a0202bfcab0357baa5538730e6a4fac0d9955add84f6cad4a3442270f793edf5670f931a556dc56965f605cbeddf999380afafd3a7c3c7c334766b775284a20dd5e1648ca5f233627cd9643c1242544d82571a834914d8bb36ae5874832f02415ee", 0xc0, 0x2}, {&(0x7f0000001340)="85fa4984100d90b04e6565a2126f36b9420a3a8a581798eea4dd19e5eed5b8507fbd2d4e887f98bab53e34ba0aa400e4efda5f1ac84d507f8e3ac554b4696e98462f301eeb76cc2396ae3bc98f3c423c93b8987842c76bd5239755cb7328bc6488d99ff6b5b665e7f2fad5ccaab826e4688d34f0d129439df2f6eefa55614776116de80257a69d1a4910115d03793e3efe43821153ad6b6720f5a0d0fc7db9032c7ebf", 0xa3, 0x2}, {&(0x7f0000001400)="4f9f55419e655960c758e5d47bf75b73d18db92f9de880ce6b36126eb6845f9859e516cfd762b92355684c6ddb03e7c8660a5abbd7819017e19647c09eadab9473ec1e56c07441b89367b8d202d005aad8c5e0923d312616d956baa05b97fac95e286a6e46c3ed2d1c94331a401197d99642aa45f8bd2d864c53df72169215c8565722cd9292c88b48c293d355510b96cfb2015d0c1f14f70587fa2f7188f712c610b32e2289192b9a17902cebb0b17e470dd863544973ca9b0442dcfdb8", 0xbe, 0xffff}, {&(0x7f00000014c0)="f4226d0a6c3120da631f777814edf30c53bd1d57d8bd40cbb979ab312fbaf3a5e4ea27db579b5de643f6f4e2cf7754f7", 0x30, 0x8}, {&(0x7f0000001500)="c40731b14a934e8e9dcb85aaa5bbdcba52cf8ae8c20c5f152af5141db58ac164cb4e5a79b6eeb903c299732b220abdceee35a765b62440e62060344271ae902c468896700137cf6deef1", 0x4a, 0x5}, {&(0x7f0000001580)="6a5e24229a0115adb4c6feb664df9c26b38327328ddc71744e25529499f7cb902b6fb504c004a52349ecfa8dcc524b0b9514137f26783f23e4fc749d004f74a95d93b57b58f560280c4d6ce8d8ab7ac2b4cb61ff8c1177059b3f37781f4560abd14a8e3305d1a88362b0aa2521dd391616215a7d0f1c9653ad55f41cdbcaa196ee793f3145f68f085d43aaeda226e65f0e1d291b79f8ddce6b6e856ba7584b7b910e2e14a0c70123d503d59ea87a310c", 0xb0, 0x1}, {&(0x7f0000001640)="0d90b326ea65fa14e119", 0xa, 0x7}, {&(0x7f0000001680)="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", 0x1000, 0x2}], 0x140000, &(0x7f0000002780)='%-@)\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xc0000, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x818, 0x2, 0x5, 0x2}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) 08:53:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010010]}) 08:53:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfc00], [], @local}}, 0x1c) 08:53:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150001c0]}) 08:53:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2472.509369] binder: 3541:3603 got transaction to invalid handle [ 2472.568058] binder: 3541:3603 transaction failed 29201/-22, size 24-8 line 2855 08:53:39 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x80) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000140)={0x80, 0x80}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 2472.615022] binder: 3541:3603 ioctl c0306201 20000440 returned -14 08:53:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010015]}) [ 2472.663555] binder: undelivered TRANSACTION_ERROR: 29201 08:53:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfe80], [], @local}}, 0x1c) 08:53:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17000000]}) 08:53:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x12) lsetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=@random={'system.', '/dev/video37\x00'}, &(0x7f00000001c0)='cgroup\x00', 0x7, 0x3) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:39 executing program 0: syz_execute_func(&(0x7f0000000340)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c42f0f82822a00c4356af2178fdf2bbce000008020004f67c410dd6d68e948e948c1ea014739050000005bc4a131ebca651b363ff8f899aee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) 08:53:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001001b]}) 08:53:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfec0], [], @local}}, 0x1c) [ 2473.192719] binder: 4113:4140 got transaction to invalid handle [ 2473.229783] binder: 4113:4140 transaction failed 29201/-22, size 24-8 line 2855 [ 2473.251725] binder: 4113:4140 ioctl c0306201 20000440 returned -14 08:53:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x170101c0]}) [ 2473.293198] binder: undelivered TRANSACTION_ERROR: 29201 08:53:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x507100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x8001) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001001f]}) 08:53:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xff00], [], @local}}, 0x1c) [ 2473.693831] binder: 4595:4601 got transaction to invalid handle 08:53:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x80) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="8233cf94f0cedddb39673823793da836af39c1b69db37b8c4f986cedb10ce9d5910cd45f3d88868d43660a2ceb430816ca62ee41d431a31814228171206d13766915ad3fe747e940d3dea740ea1db95448b6dbbd273cbae0857f699df5db80aba0a3ddac7abadb42b1cb875a1eb9ce16398f147d6958864ef44858ce2638069efcc573ed939b6b8847d8fea57d3e5d4b307e64842e9106f5", 0x98}, {&(0x7f0000000340)="d45ab2c00cf1c268c78120e0698604aee6e9ce98964af6c70ad1d2eb81ac7976903e19a18070457cbf4c079d001a535a4ba7fe501ceff595fef404515b9013894a10da5e7e9dd4485e04df14a77646a7ea67614faa6e29bcd3f349b728219e7de17b7318ceacf5d866243509d6ee1db8d2bafaa43914", 0x76}, {&(0x7f00000003c0)="49f322fe7a3c85cd17e8fbdedb0954e3aeae2aec63d8db35bb969de9c71511c58af444620222ddc8337ce5d96c29b63235187fcf9a2d490b736689dd3e733726a5a4db95d8220eabf0defab2d9ac53c29cb8ab483a092452bce1e2ba34b8f45c1249bb850ccbd6d976065fcd8756cc507450dea909fd0b48be32064d7b30dec8fe1cf559d4f6b0cb03aea8451632b629ed3e58fa8628dd79ba5110ed892423ac881078c7ac48e575c2e8a82d0391af5281bdd3a9", 0xb4}, {&(0x7f0000000500)="614b4ce4011e63297c999c378c2c1d8a9717b54e0d09c1b97c4dc8991370ae5ee9741883ab28ae77b08c639cfe2876d7751a1801af7e96b8afd6ce2fc23e57130fedb2db0ad7b546515283918be634128ffe35b2237b7f606a6951ed7a082cb0", 0x60}, {&(0x7f0000000600)="eb858aa928e9fe0e9b57ce7b501f7efeaf5d027e8b355373b3418ae7a979b2d12b4c4575a8648b76c8718671c42e8d65ff0b110d0727f4828014fc104688e99814aaec9b62f0751745fbe1a6f6d55ea6b673c7091732e498d6feec16f8c21d7e1d29307597a0821769f3cb8a6e2bb6d2a97063296fc610e85dc9377b369ae8bc02f0fcf2efde66a71fde7aefc6d3543afdb19167d19e6664532a9333a2042f91ffe1bd180e19aa070cc8f2dac8869a51ebe1c79250bc1705257f652bc208d574017f8b6d45e70e54befce0e682b99c342575", 0xd2}, {&(0x7f0000000700)="f8d06dcd2203d75dc044b2ae4ba646a18a81c24fdb3cb4e852298e324b4f53759359f084abdf4180b98e4f52a119117d556fbaac7d8d9277c1410c508859d2082cc812b6129d7565b780cda81e86be527f7f0a9cd4df07c824edcba0d8421edbcd9a954db78e3e437e29329e149048c2511b1781fa51", 0x76}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x150, 0x8004}, 0x4040) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000580)={0x3, &(0x7f0000000480)=[{}, {}, {}]}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x13) 08:53:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000]}) [ 2473.774476] binder: 4595:4601 transaction failed 29201/-22, size 24-8 line 2855 [ 2473.812141] binder: 4595:4601 ioctl c0306201 20000440 returned -14 [ 2473.851359] binder: undelivered TRANSACTION_ERROR: 29201 08:53:40 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x6000) r1 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="6302b139f0e2f2be7a0bd176c908123b76b7d5bd7fbf2909341aaf304223970e81c07a8270502dc87696959162bd755886356f0011b1c417871308f7a5513d04939f9ec7acb42406861d37879b1a48b041f2cdb2df1017740e35d1657ce1d9675761e0db9cb8062bd637c7ffa3a64682d0d1406f584b342072460265fb670fd7c1963ea2f9a8e8b76dd5212d18f3466ccd447a8227be91daf4fb9913c966f5da5fc96a04ab7a6cea9af78fac0a6717c04c3c3a736cb6d71a3692fc7a4a77d10150dd75f5a68d20ee2e36", 0xca, 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='vmnet0cgroupprocem0vmnet1security(self.+-\x00', 0xfffffffffffffffc) keyctl$negate(0xd, r1, 0x6, r2) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x5, 0xd1, 0x3010, 0x0, 0x2, 0xf, 0x0, 0x5}}) 08:53:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010055]}) 08:53:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x1000000], [], @local}}, 0x1c) 08:53:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x50d000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2474.060572] kauditd_printk_skb: 105 callbacks suppressed [ 2474.060585] audit: type=1400 audit(32020.890:1552): avc: denied { associate } for pid=4760 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2474.252754] audit: type=1400 audit(32021.040:1553): avc: denied { map } for pid=4947 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0001c0]}) [ 2474.336651] binder: 4980:5079 got transaction to invalid handle 08:53:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0xff}, {&(0x7f0000000340)="8d2db2af498d88ef305c9e4292bbdbc8e5c8903902acb8636c56e6a6db08b73dde5c19e552fa23903ff4377e419bf611decaa885e28edb90e09cb9e833950b24e0d0789742a0541b6b2eefb10b74a49ce3ec81d89d923616bb190949f69de096d556b56bc2dc9cd229c2f1940c06bf2db810cb9e2c68766e45e96c39c73ad84e17c54cbc6932ba26f70a0f2f0426326ed9cbdb69", 0x94}, {&(0x7f0000000600)="25dc5124f100fc3e4f0ef5734f85f7d250282dc7880e2b61dae0036f212a6d62eaafc342add3b646abd49d36d7f2fd0206de1b122faa7a06781044576e60a6a547e54dd35bc39e9b124c5a9b86a06a4d04c93aed62df41badc642bb46cb10b97899dee4efa1c9558369957a1b4d5093309abdea580ef1ebe77e23cfa8cdb3ca43dc6f93215d01b2b091911eac424a37bfa1748ac0039ccbbe2e0e6eda30b54e2afc09b5e39181cc6733219c27ba9066a3640fbf54ce448a42d3abb3afe570de4e61ad67e8cb107c0d8df6560ee4d82", 0xcf}, {&(0x7f0000000100)="4d65c93ee260252ec0562eb1f5abac92b74f4c0c0c46e9d1951f9d9e0add1797b094287549f380cbd6e62232585fe5bd1fc39d2bd4501c08ad4859091884a97f3e6327828267a98645cb0ac431a7b1d2e19d7f92af4c60b52548395616", 0x5d}], 0x4, 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = add_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='cgroup\x00', r1) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2474.379141] audit: type=1400 audit(32021.060:1554): avc: denied { map } for pid=4947 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2474.411907] binder: 4980:5079 transaction failed 29201/-22, size 24-8 line 2855 08:53:41 executing program 0: rt_sigreturn() syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2474.436376] binder: 4980:5079 ioctl c0306201 20000440 returned -14 [ 2474.458050] audit: type=1400 audit(32021.070:1555): avc: denied { map } for pid=4970 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2474.475043] binder: undelivered TRANSACTION_ERROR: 29201 [ 2474.483454] audit: type=1400 audit(32021.080:1556): avc: denied { map } for pid=4968 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x4000000], [], @local}}, 0x1c) 08:53:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010058]}) [ 2474.637845] audit: type=1400 audit(32021.120:1557): avc: denied { map } for pid=4968 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:41 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x301200, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000100)=""/77, &(0x7f0000000180)=0x4d) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e010000]}) 08:53:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x70c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2474.797101] audit: type=1400 audit(32021.180:1558): avc: denied { map } for pid=4980 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 08:53:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x40) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000100)=[{&(0x7f0000000340)="45e7ad627fc6041bf083e581d00d57e0d437f528efe8eb3991fdd88c1ec41b2c4a12dec82f6c0cc0a9180c464180220eba25b903086556c333e2c75e9935d59c33dd325aec6a848bdffc1442b81810478dcfa5a0709e629b06e643b044f341d2f5203e8148a5a829d585eaa1c93690e8031e25b47a1a012c7a9abdb45198c7be806dd451436d28c38674cb14acd1ce12d07033098985e6eb402f3fc3888859c562183dff3bb08ee76103d073c376a98551dc057080c375a2cc8444ffcef0e8319c8dfdaf5aee7a314026e189c5b6edd62a04c3147fcd4711ea24a7a6f1623d267d12e2789bf1f074357d0529d9", 0xed, 0x3ff}, {&(0x7f0000001a00)="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", 0x1000, 0x9}], 0x2, &(0x7f0000000140)='wlan1-vmnet0/#securityGPL}*vboxnet1\x00') umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2474.984582] audit: type=1400 audit(32021.180:1559): avc: denied { set_context_mgr } for pid=4980 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:53:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x5000000], [], @local}}, 0x1c) 08:53:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010112]}) [ 2475.107784] binder: 5583:5624 got transaction to invalid handle [ 2475.113242] audit: type=1400 audit(32021.420:1560): avc: denied { map } for pid=5241 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2475.133016] binder: 5583:5624 transaction failed 29201/-22, size 24-8 line 2855 08:53:42 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/4096) 08:53:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0001c0]}) [ 2475.196617] binder: 5583:5624 ioctl c0306201 20000440 returned -14 [ 2475.201025] audit: type=1400 audit(32021.430:1561): avc: denied { map } for pid=5241 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2475.270206] binder: undelivered TRANSACTION_ERROR: 29201 08:53:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x715000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f00000001c0)=""/247, 0xf7, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x46030000], [], @local}}, 0x1c) 08:53:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010113]}) 08:53:42 executing program 0: syz_execute_func(&(0x7f00000000c0)="0c0a34b598cd80a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc4c402fd2225410ff21311edea7ec4c47d0f82822a00c4dce38f8f2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc46f11eb1745363ef80f9966030faee4282467e2f2c4217b2d7700ab000026400f0d18df646734676683660f11d1121411") 08:53:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x221001c0]}) [ 2475.742601] binder: 6071:6073 got transaction to invalid handle [ 2475.748844] binder: 6071:6073 transaction failed 29201/-22, size 24-8 line 2855 [ 2475.823104] binder: 6071:6073 ioctl c0306201 20000440 returned -14 08:53:42 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = gettid() ptrace$cont(0x3c, r0, 0x86, 0x4007e) [ 2475.866124] binder: undelivered TRANSACTION_ERROR: 29201 08:53:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x181}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040c2cbd7000fbdbdf250900000008000500000000001800020014000100e00000020000000000000000000000000800050009000000080004000000000014000200080006000001000008000700000000001800020014000100fe80fdffffff000000000000000000bb"], 0x70}}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) syz_mount_image$minix(&(0x7f0000000380)='minix\x00', &(0x7f00000003c0)='./file0\x00', 0x9, 0x0, &(0x7f0000000400), 0x40, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x47030000], [], @local}}, 0x1c) 08:53:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010117]}) 08:53:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a000000]}) 08:53:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x740000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:43 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xa, 0x1, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 08:53:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010140]}) [ 2476.332793] binder: 6546:6574 got transaction to invalid handle 08:53:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfc000000], [], @local}}, 0x1c) [ 2476.387173] binder: 6546:6574 transaction failed 29201/-22, size 24-8 line 2855 [ 2476.424364] binder: 6546:6574 ioctl c0306201 20000440 returned -14 08:53:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a1001c0]}) [ 2476.444598] binder: undelivered TRANSACTION_ERROR: 29201 08:53:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2b0000000600000008000000000000000500000000000000cd760e8995629e843ecc170963bf0500000000"], 0x2b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x940000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfe800000], [], @local}}, 0x1c) 08:53:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010141]}) 08:53:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x2, {0x0, 0x6, 0x6, 0x1}}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:43 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) 08:53:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}) [ 2476.915768] binder: 7018:7030 got transaction to invalid handle [ 2476.944584] binder: 7018:7030 transaction failed 29201/-22, size 24-8 line 2855 [ 2477.008835] binder: 7018:7030 ioctl c0306201 20000440 returned -14 [ 2477.072752] binder: undelivered TRANSACTION_ERROR: 29201 08:53:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfec00000], [], @local}}, 0x1c) 08:53:44 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x40) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xc07000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010200]}) 08:53:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c80)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000d80)=0xc) syz_mount_image$gfs2(&(0x7f0000000500)='gfs2\x00', &(0x7f0000000540)='./file0/file0\x00', 0x3f, 0x5, &(0x7f0000000c00)=[{&(0x7f0000000700)="db7e7bdb5ce54f4b0eea22ec2323fbde21d9adb5a60395337e7c3a787845630169165014d509e9efa216bb8c9a865280ccf2f08066a02fba2749febf74048b6b774b7cd41612acfc62451c09bf5750ec3993e484ecbcf8ac1706ab9d3a1ef1ed458167536fc10aea6f4fc8072c52d03d047d1c7cfda81836fef18b46c17d770518b7b71b7ccec1453c7d999da5cadbe0a444947ea03b3a79469e", 0x9a, 0x80}, {&(0x7f0000000840)="b8262cb530c699c4f49588206205c92c97e28cc850d1e175c46546574fedc81bb0d5771cd5feaac08f60a19be4d9140fde2b19eb1a8460721a89febd728ae6a9b1b881283e5125bb0b84f5be5ee245f37abd47100c4d4187da7d580f28f24e30800551f7b502a4fd18ccb32b18b40c52ef8ca071f8a56da6541207da092556a7cb2e2552b61624300aed59abbdeb6b42f0f05f713f616b0274df24e0ef79e2a4a2b425e297961dc6c28279d5673d8cf37a985230377df934e1576b239696b441da", 0xc1, 0x3f}, {&(0x7f0000000940)="06ba9e14fd7886e44dc8d2d196fb8616bf3b0c50527185a594b2af59381a4394afadf0c761933a298e38942f2fe038b03a5810a7a70ef0f077989e55a2ea404355416359cef97fa948f20223ea8b4c50ef700ed2597df15e13aa410894f6ea96f1b1688a9e9e3b0f4f0269f6441c426a5cc9d6ccee6eab9e5fd93cc8fea4a7c128517134e1b5af5dd88c9ff62505cccadff68d9d6173a5f52f5719c09ecaf59624e7b3d5593243b61bde1d7721ad8ec99d9f976698c3e8e781570a2fc979bc2d39dae454592c2649996aeeb14a", 0xcd, 0x3}, {&(0x7f0000000a80)="77ac8a1962b118bb85ffe14bd2caa91179ba461f71af249a13df65005f13b0e6b9674f5fe89d3e22a0e558045349446f4369e8de447a02ef316c7b55310723b464114d90cd3d6be98c22950d683f07fe40d2d725d54ed9f857f88e471f1a243c4336a94cd58b9bd94b38a090012791a38c2cfaade923afa40140245f344287e5c1226941b43261", 0x87, 0x80}, {&(0x7f0000000b40)="efd57b997649a83293dbb7670ef6c91f41ba1a09d1943fe68fe2c10c453c6e1a616c0ee6d9d920db2fbf397c53ca07dcf599dbdb13095338ba1a9b55ea41fb57caf85632be8028fb3563303bed74d57cf00a08bad3f0dcc838b10d30648179ac7676ef01d29bdc6ba1e303baebac64cafe0be4a871d7bb146c5540b4e1df1d6b7bf269d2296ffe59435f7d3a", 0x8c, 0x2}], 0x40, &(0x7f0000000dc0)={[{@nobarrier='nobarrier'}, {@commit={'commit', 0x3d, 0x24c1}}, {@noquota='noquota'}, {@nodiscard='nodiscard'}], [{@uid_lt={'uid<', r3}}, {@fsname={'fsname', 0x3d, '/dev/adsp#\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, 'bpf\x00'}}, {@audit='audit'}]}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0xa3) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x400) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) umount2(&(0x7f0000000240)='./file0\x00', 0x9) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000200)={0x18, 0x4, 0x4}) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) sendmsg(r5, &(0x7f0000000480)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x3, @dev={[], 0xb}, 'erspan0\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)="c73caa015a0c1ca8699cc54bc050d2e5a92dd43d8fc66e8b10daf70616c1fb2c0f5875ca17ed8c62e73b96ab73d9077328cf7bece22bf4a0eebf919294352e57459ecfcad295362649f5d4937c58c4e659cf7416d0f0170918b65486f5c7cc5620de2c56f1a695ad5f2b8a77648278c3984482debc465cdfc25e610112c8ae3636dd9be303cd5c613813e6d21264a94a66373a6e4ce89bf58deca755bf97", 0x9e}, {&(0x7f0000000600)="1169f02b44dffbed86cb0282624403f7bd1aebd8fb869910a21022c8ce0ff458c15563788fd0d0204fd29788c993c0fad4a598735401315302aabb35139db65b35af576c231ab8be2d5d2c6cdd4b78e009b819f709b9db71b5f8a5f4d2b1a1597eace7b6e731ac47c557f70c0774eb90315c075bd698e00dfc2a49b13b18bb1c0033eb6d879ffd5ebc60ba11b36e9f0c03e5e3e2ceea065f7e87d7b727ca101d3e311921c33bfe2e804f0f1fb8c2ef9c51d7b4f8434749e4e5ec6f6c032fb91f5160d5520536e80bcd04b633dde9280d52c60f228c8e3b958a678df9d4379efb", 0xe0}, {&(0x7f0000001a00)="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", 0x1000}], 0x3}, 0x20000000) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfeffffff], [], @local}}, 0x1c) 08:53:44 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0fe819822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2477.543824] binder: 7504:7548 got transaction to invalid handle [ 2477.575763] binder: 7504:7548 transaction failed 29201/-22, size 24-8 line 2855 [ 2477.594122] binder: 7504:7548 ioctl c0306201 20000440 returned -14 [ 2477.606812] binder: undelivered TRANSACTION_ERROR: 29201 08:53:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14, 0x80800) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000003c0)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bind(r0, &(0x7f0000000100)=@caif=@dgm={0x25, 0x7f, 0x20}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1001c0]}) 08:53:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001020b]}) 08:53:44 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfff, @null, @netrom={'nr', 0x0}, 0x2, [@bcast, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) 08:53:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xd05000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200, &(0x7f0000000000)="0ad070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x2000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001a00)="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", 0x1000) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) uselib(&(0x7f0000000240)='./file0/file0\x00') syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x3) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xff000000], [], @local}}, 0x1c) [ 2478.095964] binder: 7794:7828 got transaction to invalid handle [ 2478.113188] binder: 7794:7828 transaction failed 29201/-22, size 24-8 line 2855 08:53:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}) 08:53:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0011022]}) 08:53:45 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x3ffe, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x1d, &(0x7f0000000100)=0x1, 0x4) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2478.181324] binder: 7794:7828 ioctl c0306201 20000440 returned -14 [ 2478.241382] binder: undelivered TRANSACTION_ERROR: 29201 08:53:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfffffffe], [], @local}}, 0x1c) 08:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(r0, &(0x7f0000000080)="b8a46ed8f5562d36a58facf07a671eea235f56bd5ed1840349f418a4c7b2143cf9f10afc9815523d34cc6bba35418a91736513fb", 0x34) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000]}) 08:53:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001102a]}) 08:53:45 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2478.680244] binder: 8363:8415 got transaction to invalid handle [ 2478.703984] binder: 8363:8415 transaction failed 29201/-22, size 24-8 line 2855 [ 2478.738705] binder: 8363:8415 ioctl c0306201 20000440 returned -14 08:53:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x100000000000000], [], @local}}, 0x1c) [ 2478.782584] binder: undelivered TRANSACTION_ERROR: 29201 08:53:45 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 08:53:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b000000]}) 08:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001102c]}) [ 2479.155302] kauditd_printk_skb: 107 callbacks suppressed [ 2479.155316] audit: type=1400 audit(32026.000:1669): avc: denied { map } for pid=8732 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2479.263458] binder: 8746:8854 got transaction to invalid handle 08:53:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x400000000000000], [], @local}}, 0x1c) [ 2479.297642] audit: type=1400 audit(32026.040:1670): avc: denied { map } for pid=8732 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2479.329715] binder: 8746:8854 transaction failed 29201/-22, size 24-8 line 2855 [ 2479.350241] binder: 8746:8854 ioctl c0306201 20000440 returned -14 08:53:46 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) syz_execute_func(&(0x7f0000000340)="0c0a34b598cd80c4025596159bfd0000a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46171edca7ec4c47d0f82822a00c4356af2178ddf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5f75df646734676683660f114d6666450f17720d1411") setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'sed\x00', 0x20, 0x3, 0xe}, 0x2c) [ 2479.365366] audit: type=1400 audit(32026.060:1671): avc: denied { map } for pid=8732 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2479.367392] binder: undelivered TRANSACTION_ERROR: 29201 [ 2479.414266] audit: type=1400 audit(32026.080:1672): avc: denied { map } for pid=8848 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1000000]}) 08:53:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) [ 2479.572653] audit: type=1400 audit(32026.090:1673): avc: denied { map } for pid=8746 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 08:53:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) pipe2$9p(&(0x7f0000000480), 0x800) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0/file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="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", 0xfc, 0x5}], 0x1400, &(0x7f0000000500)={[{@ssd='ssd'}, {@ssd_spread='ssd_spread'}, {@noacl='noacl'}], [{@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'md5sumvmnet1]]'}}, {@euid_gt={'euid>', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'bpf\x00'}}, {@euid_eq={'euid', 0x3d, r2}}]}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0xfffffffffffffffd, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2479.639837] audit: type=1400 audit(32026.100:1674): avc: denied { set_context_mgr } for pid=8746 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:53:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x500000000000000], [], @local}}, 0x1c) 08:53:46 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = creat(&(0x7f0000000240)='./file0\x00', 0x5) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x100}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) [ 2479.822287] audit: type=1400 audit(32026.120:1675): avc: denied { map } for pid=8848 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2479.842588] binder: 9312:9315 got transaction to invalid handle [ 2479.866979] binder: 9312:9315 transaction failed 29201/-22, size 24-8 line 2855 [ 2479.932625] binder: 9312:9315 ioctl c0306201 20000440 returned -14 08:53:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2000000]}) 08:53:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2479.969831] audit: type=1400 audit(32026.380:1676): avc: denied { map } for pid=9014 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2480.004230] binder: undelivered TRANSACTION_ERROR: 29201 08:53:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000009f]}) [ 2480.055666] audit: type=1400 audit(32026.600:1677): avc: denied { map } for pid=9234 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2480.078598] audit: type=1400 audit(32026.610:1678): avc: denied { map } for pid=9234 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x4603000000000000], [], @local}}, 0x1c) 08:53:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:47 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001440)='/selinux/enforce\x00', 0x400000, 0x0) write$FUSE_INIT(r1, &(0x7f0000001480)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x1d, 0x0, 0x80000, 0x130f, 0x80, 0x9, 0x1}}, 0x50) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="52e83fc7b4061c567e2c7ef106d79063e5c99ae77cb82de2ceef80fb9f9277baa0619ae738d43b747fc9fd0ebdc43b8d69aee45f4e4290a3a7eb739cde352e7c63cf1f925b085fc0c5083039bac78faacf048e118e95ce8e834b0cfc1dfc7bb6eef49cf04f6848ab16fdd87861bcef961df7f5081c5a35cedd7129bfc39fcd8ead0119615c3ee168be7e2761843a97ae626ac0d8a29719882bcf7681868a49aad0d93dc907e7c1e09d9633754e5ce27810630dd9bcdc15a38e3eec4f18b0ca40804b0b39c46ee65e04f429347398f699596c256ac05061bbe11e40dfe89ae4913679674c78ab447a17b1ae13de94e8e39d1f56", 0xf3, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r2, 0xfffffffffffff74b, 0xa58c}, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d8e617720686173683d736861332d3531552d636500000000000000000000000000000000f25239ef2ebd9b4d0000000008000000000000000000008113871e13e7e37f5cdec7d5b66c"], &(0x7f0000000300)="767805377a64fe665b444786325a039141130df648e41e00594dea8760174593a95bc4d32016de2934f43270a7a4734b8771c7f23714a5b7c73e05b00cfd9ac021b3a02c6b1377209b506ff1e7e0badb0ecdda9a8f13d310a90235dd91905d71631631d9eba8dc1a50f1abaa6742d6ef546c0f85e9787bba4e92d612723bdceaf9cb28fcdef2bfcf22fb41d5e2fcccb374ab10faf6c275da242a03d828f8d714be1d287b4a33641d6c0af837109fd1f7b062620a", &(0x7f00000003c0)=""/4096) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 08:53:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd000000]}) 08:53:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000b0]}) [ 2480.474192] binder: 9651:9703 got transaction to invalid handle [ 2480.499781] binder: 9651:9703 transaction failed 29201/-22, size 24-8 line 2855 [ 2480.515461] binder: 9651:9703 ioctl c0306201 20000440 returned -14 [ 2480.552574] binder: undelivered TRANSACTION_ERROR: 29201 08:53:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x4703000000000000], [], @local}}, 0x1c) 08:53:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700)='bpf\x00', 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000080), 0x4, &(0x7f0000000840)=""/78, 0xffffffffffffff4a}, 0x60) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000680)=0x6, 0x4) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:47 executing program 0: syz_execute_func(&(0x7f0000000340)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111ed66430f6b3d6512e041c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948c461ff12a9663679b14739050000005bc4a131ebca45363ef80f9966030faee42c2467b8f2ab26f2a50000c4a1716cc3c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x82200) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x7, 0x1f, 0x61, 0xff, 0x3}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fanotify_init(0x20, 0x800) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000280)={0x10000, 0x7, 0x8}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x2, 0x3, 0x1}) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x85) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x4, 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) fsetxattr(r1, &(0x7f0000000200)=@random={'trusted.', '/dev/vcs#\x00'}, &(0x7f0000000240)='/dev/vcs#\x00', 0xa, 0x2) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000001c0)=0x101) 08:53:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce000000]}) 08:53:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000b7]}) 08:53:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfc00000000000000], [], @local}}, 0x1c) 08:53:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0x20000000044) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000009c0)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x52, 0x2, &(0x7f0000000140)=[{&(0x7f00000001c0)="cbdbdb32b08653163537383d2ce0bc5954fa671352cf0abfeb1c7f88078288903d63fc00fa48df2f990d54869ef95795a6c84c716036347bb9ef9ac3c2364a14bdd63123a38dc5652bd9853f9231eb27e2444513958d528d454f55d6b4f8f6e1a5c119b21f99304fc878a7b64d274e10615313a1a413be0471fade68154d9080e690047def21af8cd63939dd5f9d4506043ccbde81b4d69258a591edd6e0029e71dacaa9ecc4020f9d2c84d77f68abe1b9878c2cb7f6a8134f13cb7eb6dc79fa4483da44818a1a7092ed105a7682e769", 0xd0, 0x5}, {&(0x7f0000000340)="8b6302627ce1492399f41676b768575cd377952c88d06fa942bd2834cf8aae94e9f87120e46ccc67ca32b16dfbe4ab2b0f4fc804b7eff38c455357a0fb7302d0effcc746c47e6b52c1bd73f4d8e05292fe78588714cf57b3c632b2f69cf38c95662130fbde33634e1f35a2d5b674c25194ca67ed79fa39c7327547ed02ecf383f4673dfb746d49c4ee2968294df8cf7f2bb790f7930a18a27b9f47693cce9947f48175bd3c53441b14cb171ab3439e962ca2eb1ab24db0084da46ec337", 0xbd}], 0x80802a, &(0x7f0000000680)=ANY=[@ANYBLOB="726f6469722c696f636861727365743d63703836362c756e695f786c6174653d312c757466383d312c757466383d302c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c756e695f786c6174653d312c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303030362c66756e633d4d4d41505f434845434b2c6673757569643d63336535323735372d613377772d3d6475392d646366752d37667500633d647f2c6d6561737572652c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB=',obj_type=*ppt0(,uid<', @ANYRESDEC=r2, @ANYBLOB=',seclabel,euid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x410000, 0x20) mount$9p_tcp(&(0x7f0000000580)='127.0.0.1\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000840)='9p\x00', 0x2, &(0x7f0000000880)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@noextend='noextend'}, {@noextend='noextend'}, {@nodevmap='nodevmap'}, {@cache_mmap='cache=mmap'}], [{@audit='audit'}, {@euid_eq={'euid', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}}) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000940), 0x4) mount$bpf(0x0, &(0x7f0000000980)='./file1\x00', 0x0, 0x100043, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2481.012449] binder: 10080:10153 got transaction to invalid handle [ 2481.019692] binder: 10080:10153 transaction failed 29201/-22, size 24-8 line 2855 [ 2481.051102] binder: 10080:10153 ioctl c0306201 20000440 returned -14 [ 2481.102012] binder: undelivered TRANSACTION_ERROR: 29201 08:53:48 executing program 0: 08:53:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0040000]}) 08:53:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100]}) 08:53:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2806004, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=unix,privport,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',ap,df\btuid=', @ANYRESHEX=r1, @ANYBLOB=',mmap,fowner=', @ANYRESDEC=r1, @ANYBLOB=',fowner>', @ANYRESDEC=r1, @ANYBLOB=',uid>', @ANYRESDEC=r1, @ANYBLOB=',appraise,fsname={,pcr=00000000000000000041,euid>', @ANYRESDEC=r1, @ANYBLOB=',\x00']) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x400800, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000640)=0x1, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x1021000, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x8}}], [{@euid_lt={'euid<', r1}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000440)={0x4f, 0x1c, [0x3ff, 0x70, 0x100, 0x9, 0x7fffffff, 0x7fff, 0x5]}) 08:53:48 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e9484739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80200) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x2, 0x5, 0x40}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bcsf0\x00', 0x2}, 0x18) 08:53:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfe80000000000000], [], @local}}, 0x1c) [ 2481.516578] binder: 10557:10588 got transaction to invalid handle [ 2481.551371] binder: 10557:10588 transaction failed 29201/-22, size 24-8 line 2855 08:53:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000100)) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2481.618415] binder: 10557:10588 ioctl c0306201 20000440 returned -14 08:53:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9010000]}) 08:53:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000108]}) [ 2481.708809] binder: undelivered TRANSACTION_ERROR: 29201 08:53:48 executing program 0: syz_execute_func(&(0x7f0000000400)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7e81447d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948410f0d49f04739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d32181801fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfec0000000000000], [], @local}}, 0x1c) 08:53:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000840)='./file0\x00', 0x0, 0x588d, 0x0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x6, &(0x7f0000000500)=[{&(0x7f0000000140)="a56fcef627d98a063bd0976868f681e24f103573ac8590dc1088a1f91e6c6eae7625487a868c17d111a5389739bd8761ca27e47ec6451af6fd3520", 0x3b, 0x8}, {&(0x7f00000001c0)="ee9ffdb4846015f99c7dbde9e519d1d9f75b2cb1b27141facbe8e4082043d88b86af61be6302bd819f8076fb44f85fab7aa3511795eb00d1a6c3688d2fbb8640ff5c4dc554ce18bced38ff0dac43e5a81bba1c72d34ce48f65c023472f0b9e00c3b62e8d0827184e5e", 0x69, 0x80000000}, {&(0x7f0000000340)="3a70930feb3819c8ea9692d2e9d1653439bd7707c1fcfc1047e17fcb1dd2b5ad517d076a0a38b91ed08d21c075572bfb8ebbda5e22d9f854cc49ed2fda90bb2d2ed56c56927d527894349d07fe9d95e33e76ca85107e7f6c2f5f1a91593f717a3f99dfeac7df922d8c56f0fbd8f50fa5fdac035f1c6da7bb3b573ebcaaa888240d7fb6f24c56c1d207311b70311ea4a6768001ddd426ed4e52ebd6cd546dc6d41957160f1936ed94ca2c6e3c60459f6faeb57575707ac9cfbc9eab7e2d86d87450baee6a832ee69913", 0xc9, 0x2}, {&(0x7f0000000600)="7100189cafcf1c8f1a32e60a4d5b783b4d67d93ee016711df883d8bba8977618f8587eb703ed460fd7d3126a18b0d7420f771fea4c706f2f6d2ea190cd97a931cfba2a2d9eaf8a154ec53d3789e19a7cbf28d45df99dc55ee3c9ea0f5d5b04b0664e465a1fee73688915084cf1c5c01c8ace767c58950d99d805bb7c306cc99ddc40f5e67fec2fbb06f68fe123413031f7c9193a72935f6d267f586d90ec2a51d2dfda8f432c73f1c88b3f16105afe940486219255b7b339bb72420ad17f7db97e5471c2125b53689e89c0335b14861de46650dd13", 0xd5, 0x101}, {&(0x7f0000000240)="63edada35e51e0b19f568a4b0fbe4d96b84cf43e9186fe1274e73b2a4c22a376015f", 0x22, 0x5}, {&(0x7f0000000700)="1f579a80b1cc68badb1b8bf716d2cfa862cd4eadaf733bfb76efd1c8ef387d942f06dd9da995a0f2a3c9aacabfb2cfd52b18f716eaf69f5f39007379dd6cebf0e52bb127013c483bfb4865a62bff4572f2a37d80c477893ee84213f6ed19e7d5c56b8f0ccfb878152123399a2aea84af96afb821a74cb57beea993f68ecab6615cc44dd42cf14d35040e6f4fe11f99b4195199c978b388756aef6fd1db376fa3a74fa64a753f459a7cceda4ae5c7fd4a447eea4cb56e3c558c50dee4436c4e0b7f83a8a11d9a", 0xc6}], 0x2, &(0x7f0000000280)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'posix_acl_access,]system).'}}]}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010000]}) 08:53:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb010000]}) 08:53:49 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x101, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x207ffe, 0x0) [ 2482.204270] binder: 11010:11014 got transaction to invalid handle [ 2482.229724] binder: 11010:11014 transaction failed 29201/-22, size 24-8 line 2855 [ 2482.241558] binder: 11010:11014 ioctl c0306201 20000440 returned -14 [ 2482.263420] binder: undelivered TRANSACTION_ERROR: 29201 08:53:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xfeffffff00000000], [], @local}}, 0x1c) 08:53:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400101c0]}) 08:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde010000]}) 08:53:49 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x7) 08:53:49 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000280)=0x132c, &(0x7f0000000340)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x140000, &(0x7f0000000200)="3c123f319bd07000000000") r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, &(0x7f0000000140)=""/27, 0x1b) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x100000000, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2482.769418] binder: 11459:11482 got transaction to invalid handle [ 2482.809846] binder: 11459:11482 transaction failed 29201/-22, size 24-8 line 2855 08:53:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410101c0]}) 08:53:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0xff00000000000000], [], @local}}, 0x1c) [ 2482.854515] binder: 11459:11482 ioctl c0306201 20000440 returned -14 [ 2482.896825] binder: undelivered TRANSACTION_ERROR: 29201 08:53:49 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x22) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x5, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x3, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0060000]}) 08:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="dea2c49b7e05be399ded91a9ae03de8fd0525a4d043592c4ccca78fdcd877039b6a8d144f600ca153569d33b66d35987363d7a2e58e05ac65b3cd979e7e3853f24d189642a89ec84d12af16f1fdade2c1db4000022f08dade95ef4ba00cccdda0a1d6de500", 0x65, 0x8}], 0x2000, &(0x7f0000000240)=ANY=[@ANYBLOB='rodir,chortname=lower95,rodir,nonumtail=0,dont_measure,\x00'/70]) mount$bpf(0x20000000, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e21, 0x36c, @empty, 0xa5b19e8}, {0xa, 0x4e21, 0x5, @local}, 0xffffffff, [0x6, 0x8, 0x7, 0x1, 0x400, 0xed1, 0x0, 0x7f]}, 0x5c) 08:53:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 08:53:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x4], [], @local}}, 0x1c) 08:53:50 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10a) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) acct(&(0x7f0000000100)='./file1\x00') write$P9_RLCREATE(r0, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x2}, 0x81}}, 0x18) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 2483.362843] binder: 11871:11963 got transaction to invalid handle [ 2483.421143] binder: 11871:11963 transaction failed 29201/-22, size 24-8 line 2855 08:53:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000]}) [ 2483.517605] binder: 11871:11963 ioctl c0306201 20000440 returned -14 [ 2483.584436] binder: undelivered TRANSACTION_ERROR: 29201 08:53:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d00]}) 08:53:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x5], [], @local}}, 0x1c) 08:53:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x10000, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) getsockname(r0, &(0x7f0000000140)=@rc, &(0x7f0000000080)=0x80) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff020000]}) 08:53:50 executing program 0: syz_execute_func(&(0x7f0000000140)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x2000) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 2484.028032] binder: 12387:12415 got transaction to invalid handle 08:53:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d01]}) [ 2484.100591] binder: 12387:12415 transaction failed 29201/-22, size 24-8 line 2855 [ 2484.135749] binder: 12387:12415 ioctl c0306201 20000440 returned -14 [ 2484.164664] binder: undelivered TRANSACTION_ERROR: 29201 08:53:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfc], [], @local}}, 0x1c) 08:53:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 08:53:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0b0000]}) 08:53:51 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x800) write(r0, &(0x7f0000000180)="cbabc68c3b608e507e58262b826057bfeb5cfa1588c90b931d00c387333d6dcc4ea1d7a49dc9b819c31caa6acbcfce8f34e6f72b2a49ce6183f8fbf0b101741a2bd3bae74d7aabde8dca49b8acd7f1b8343b08498229fce1fbebd9841129ee05cf40e9f1e9ab7e5e89beeb937c835908c16b119b88619f467f445a9afbb6bdc5e7e9acaf2ed5260413daff00ee6c1f226f146773ccc29909df3f1885ed", 0x9d) timer_create(0x2, &(0x7f0000000000)={0x0, 0x1, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_delete(r1) [ 2484.387422] kauditd_printk_skb: 114 callbacks suppressed [ 2484.394097] audit: type=1400 audit(32031.230:1793): avc: denied { map } for pid=12797 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2484.494895] audit: type=1400 audit(32031.270:1794): avc: denied { map } for pid=12797 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d02]}) [ 2484.646965] audit: type=1400 audit(32031.280:1795): avc: denied { map } for pid=12797 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2484.659684] binder: 12878:12971 got transaction to invalid handle [ 2484.689725] binder: 12878:12971 transaction failed 29201/-22, size 24-8 line 2855 08:53:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x346], [], @local}}, 0x1c) 08:53:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 2484.747129] binder: 12878:12971 ioctl c0306201 20000440 returned -14 08:53:51 executing program 0: syz_execute_func(&(0x7f0000000180)="0c0a34b55bcd8052a05ce8e86962f569621cd9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82824700c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea01ca3905b21e7b005b5ba131ebca45363ef80f9966030faee42c2467e2f2c401905630ab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) 08:53:51 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x6, 0x1ffff) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000340)={0x7fff, 0x7fffffff}) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file1\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) r4 = getpgid(0x0) process_vm_writev(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)=""/25, 0x19}], 0x2, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001940)=""/81, 0x51}], 0x7, 0x0) openat$cgroup_procs(r1, &(0x7f0000000640)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380)=r4, 0xffffffffffffff54) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000280)={0x6, 0x5, 0xff, 0x401, 0x81}) perf_event_open(&(0x7f0000000180)={0x800000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000300)={0x0, 0x7530}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x9, &(0x7f0000000440)="0adc1fc6901208319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101000, 0x0) [ 2484.785718] audit: type=1400 audit(32031.290:1796): avc: denied { map } for pid=12797 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2484.868667] binder: undelivered TRANSACTION_ERROR: 29201 08:53:51 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x80000000) [ 2484.989859] audit: type=1400 audit(32031.330:1797): avc: denied { associate } for pid=12802 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:53:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d03]}) [ 2485.118302] audit: type=1400 audit(32031.430:1798): avc: denied { map } for pid=12886 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x347], [], @local}}, 0x1c) 08:53:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) 08:53:52 executing program 0: [ 2485.316563] audit: type=1400 audit(32031.450:1799): avc: denied { map } for pid=12871 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2485.470163] audit: type=1400 audit(32031.460:1800): avc: denied { map } for pid=12871 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2485.482938] binder: 13306:13341 got transaction to invalid handle 08:53:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0xff}, {&(0x7f0000000340)="8d2db2af498d88ef305c9e4292bbdbc8e5c8903902acb8636c56e6a6db08b73dde5c19e552fa23903ff4377e419bf611decaa885e28edb90e09cb9e833950b24e0d0789742a0541b6b2eefb10b74a49ce3ec81d89d923616bb190949f69de096d556b56bc2dc9cd229c2f1940c06bf2db810cb9e2c68766e45e96c39c73ad84e17c54cbc6932ba26f70a0f2f0426326ed9cbdb69", 0x94}, {&(0x7f0000000600)="25dc5124f100fc3e4f0ef5734f85f7d250282dc7880e2b61dae0036f212a6d62eaafc342add3b646abd49d36d7f2fd0206de1b122faa7a06781044576e60a6a547e54dd35bc39e9b124c5a9b86a06a4d04c93aed62df41badc642bb46cb10b97899dee4efa1c9558369957a1b4d5093309abdea580ef1ebe77e23cfa8cdb3ca43dc6f93215d01b2b091911eac424a37bfa1748ac0039ccbbe2e0e6eda30b54e2afc09b5e39181cc6733219c27ba9066a3640fbf54ce448a42d3abb3afe570de4e61ad67e8cb107c0d8df6560ee4d82", 0xcf}, {&(0x7f0000000100)="4d65c93ee260252ec0562eb1f5abac92b74f4c0c0c46e9d1951f9d9e0add1797b094287549f380cbd6e62232585fe5bd1fc39d2bd4501c08ad4859091884a97f3e6327828267a98645cb0ac431a7b1d2e19d7f92af4c60b52548395616", 0x5d}], 0x4, 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = add_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='cgroup\x00', r1) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2485.559847] binder: 13306:13341 transaction failed 29201/-22, size 24-8 line 2855 [ 2485.573038] binder: 13306:13341 ioctl c0306201 20000440 returned -14 08:53:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b564d04]}) 08:53:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x500], [], @local}}, 0x1c) [ 2485.636692] audit: type=1400 audit(32031.460:1801): avc: denied { map } for pid=12886 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:52 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x20, {0x2, 0x4e20, @loopback}, 'nr0\x00'}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)={0x8001, 0xb4, "a7ecdd1f60e9d0f6553b420771fde270d26837e140dbc4be3957597a5bbb5da9c2c5842d12ae539450a9ab29fa5c301c103b17ef1abdcad6aa8c2be268efe2ae8e0f50d86e0b2d64536b767361d96574970e729f75759a23915138521b5d340c962e1b4b2afa3cbb71bb229e29c652c4c87c1fbf68d6a71cf2484383a06d309a6ea1d3476a4bb91d74134d2d4e025f29e20c5ab85c0180525e8a5b154d00b145fa008f60fae7c729c6970fd9dc772e9863d266f1"}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111ed4a7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000240)=""/82) 08:53:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000000]}) [ 2485.685966] binder: undelivered TRANSACTION_ERROR: 29201 [ 2485.801028] audit: type=1400 audit(32031.490:1802): avc: denied { map } for pid=12871 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x4603], [], @local}}, 0x1c) 08:53:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550001c0]}) 08:53:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000000000]}) 08:53:53 executing program 0: syz_execute_func(&(0x7f0000000340)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc461c42279796ec8ca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f11210d6666450f1772474711") r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2486.211890] binder: 13738:13772 got transaction to invalid handle [ 2486.253388] binder: 13738:13772 transaction failed 29201/-22, size 24-8 line 2855 [ 2486.319135] binder: 13738:13772 ioctl c0306201 20000440 returned -14 [ 2486.357164] binder: undelivered TRANSACTION_ERROR: 29201 [ 2486.401506] binder: BINDER_SET_CONTEXT_MGR already set 08:53:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x4703], [], @local}}, 0x1c) [ 2486.449365] binder: 13810:13845 ioctl 40046207 0 returned -16 08:53:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x580001c0]}) 08:53:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c000000000]}) [ 2486.538611] binder: 13810:13845 got transaction to invalid handle 08:53:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2486.600350] binder: 13810:13845 transaction failed 29201/-22, size 24-8 line 2855 08:53:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x10400) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001880)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000018c0)={r1, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}}, 0xc) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x88240, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ffff25be588014bb0100000003000000ac1414aaffffffffe0000001"], 0x1c) [ 2486.647999] binder: 13810:13845 ioctl c0306201 20000440 returned -14 [ 2486.710693] binder: undelivered TRANSACTION_ERROR: 29201 08:53:53 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x20, {0x2, 0x4e20, @loopback}, 'nr0\x00'}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)={0x8001, 0xb4, "a7ecdd1f60e9d0f6553b420771fde270d26837e140dbc4be3957597a5bbb5da9c2c5842d12ae539450a9ab29fa5c301c103b17ef1abdcad6aa8c2be268efe2ae8e0f50d86e0b2d64536b767361d96574970e729f75759a23915138521b5d340c962e1b4b2afa3cbb71bb229e29c652c4c87c1fbf68d6a71cf2484383a06d309a6ea1d3476a4bb91d74134d2d4e025f29e20c5ab85c0180525e8a5b154d00b145fa008f60fae7c729c6970fd9dc772e9863d266f1"}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111ed4a7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000240)=""/82) [ 2486.840935] binder: 14099:14147 got transaction to invalid handle [ 2486.870690] binder: 14099:14147 transaction failed 29201/-22, size 24-8 line 2855 08:53:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74010000]}) [ 2486.890294] binder: 14099:14147 ioctl c0306201 20000440 returned -14 [ 2486.925329] binder: undelivered TRANSACTION_ERROR: 29201 08:53:53 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c0a34b598cd8052a05ce8e86962f5696200d9f4e0c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce0000080c4a28147b77b000000c44f65c6c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") 08:53:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 08:53:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x80fe], [], @local}}, 0x1c) 08:53:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000140)="0adc1f123cbdb6ddb8b20ad6192d5884404c") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x800000000000000, 0x100}]}, 0xc, 0x3) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x90) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x2000}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000180)="7b274d661ae64c670d4224d1bab95e5919fc47a3c1ee2ea5ed1b468fe59f82fe41218ecf71bd5a8f029b70d5acd2989c", 0x30, 0x20040005, &(0x7f00000001c0)=@l2={0x1f, 0x401, {0x421, 0x0, 0x3, 0x8, 0x1, 0x2}, 0xa16, 0x8c}, 0x80) getpeername$tipc(r0, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @local}}, 0x1, 0x4, 0x0, 0x9, 0x10}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1, 0x6}, &(0x7f0000000400)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffff9c, 0xc02c5341, &(0x7f0000000340)) 08:53:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75010000]}) [ 2487.334022] binder: 14315:14327 got transaction to invalid handle [ 2487.370065] binder: 14315:14327 transaction failed 29201/-22, size 24-8 line 2855 [ 2487.410194] binder: 14315:14327 ioctl c0306201 20000440 returned -14 08:53:54 executing program 0: syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2000) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x16) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) [ 2487.459944] binder: undelivered TRANSACTION_ERROR: 29201 08:53:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xc0fe], [], @local}}, 0x1c) 08:53:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201c000000000]}) 08:53:54 executing program 2 (fault-call:9 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76010000]}) [ 2487.901070] binder: 14551:14612 got transaction to invalid handle [ 2487.930724] binder: 14551:14612 transaction failed 29201/-22, size 24-8 line 2855 08:53:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfc00], [], @local}}, 0x1c) 08:53:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af03, &(0x7f0000000240)={0x0, 0xf7fffffffffffffe, 0x0, 0x0, 0x0}) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2487.961499] binder: 14551:14612 ioctl c0306201 20000440 returned -14 [ 2487.978611] FAULT_INJECTION: forcing a failure. [ 2487.978611] name failslab, interval 1, probability 0, space 0, times 0 08:53:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}) [ 2488.016132] binder: undelivered TRANSACTION_ERROR: 29201 [ 2488.061266] CPU: 1 PID: 14703 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2488.068438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2488.077881] Call Trace: [ 2488.080506] dump_stack+0x172/0x1f0 [ 2488.084179] should_fail.cold+0xa/0x1b [ 2488.088113] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2488.093258] ? lock_downgrade+0x810/0x810 [ 2488.097531] ? ___might_sleep+0x163/0x280 [ 2488.101712] __should_failslab+0x121/0x190 [ 2488.106005] should_failslab+0x9/0x14 [ 2488.109837] __kmalloc_track_caller+0x2e1/0x750 [ 2488.114534] ? __sb_end_write+0xd9/0x110 [ 2488.118644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2488.124225] ? strndup_user+0x77/0xd0 [ 2488.128065] memdup_user+0x26/0xb0 [ 2488.131635] strndup_user+0x77/0xd0 [ 2488.135294] ksys_mount+0x7b/0x150 [ 2488.138874] __x64_sys_mount+0xbe/0x150 [ 2488.142889] do_syscall_64+0x103/0x610 [ 2488.146818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2488.152029] RIP: 0033:0x458da9 [ 2488.155244] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2488.174174] RSP: 002b:00007ffb8c125c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2488.174192] RAX: ffffffffffffffda RBX: 00007ffb8c125c90 RCX: 0000000000458da9 [ 2488.174200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000020000000 [ 2488.174208] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2488.174216] R10: 000000000000588e R11: 0000000000000246 R12: 00007ffb8c1266d4 [ 2488.174223] R13: 00000000004c4df9 R14: 00000000004d8ab0 R15: 0000000000000004 08:53:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfe80], [], @local}}, 0x1c) 08:53:55 executing program 0: socket(0x0, 0x7, 0x3cde5f31) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40001, 0x0) write$ppp(r0, &(0x7f0000000100)="d6f5624ced3c6abae3d03a358d8aa17d5d818ba4cd70b52231af0864177631c07146e28e969003a99cf1d90fa79019140c8d", 0x32) syz_execute_func(&(0x7f0000000040)="0c0a34b598cd8052a05ce8e86962f5696200d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f82822a00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca45363ef80f9966030faee42c2467e2f2abab000026400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x2c, @broadcast, 0x4e23, 0x4, 'wrr\x00', 0x20, 0x9, 0x20}, 0x2c) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000140)=0x2) 08:53:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}) 08:53:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79010000]}) [ 2488.563205] binder: 15133:15158 got transaction to invalid handle [ 2488.574984] binder: 15133:15158 transaction failed 29201/-22, size 24-8 line 2855 [ 2488.632702] binder: 15133:15158 ioctl c0306201 20000440 returned -14 [ 2488.656604] binder: undelivered TRANSACTION_ERROR: 29201 08:53:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfec0], [], @local}}, 0x1c) 08:53:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d564b00000000]}) 08:53:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a010000]}) 08:53:55 executing program 0: syz_execute_func(&(0x7f00000001c0)="0c580a0ab598cd8052a0c7e8e86926f56962f5f5d9d9d0d260c6c7e4c753fbc46111edca7ec4c47d0f8282cc00c4356af2178fdf2bbce000008020004f67c4c7dd6d68e948e948c1ea014739050000005bc4a131ebca7d363ef80f9966030faee42c2467e2f2ababc4e29993246a26400f0d18c401fe5ff6df646734676683660f114d6666450f17720d1411") [ 2489.064366] binder: 15466:15479 got transaction to invalid handle [ 2489.119715] binder: 15466:15479 transaction failed 29201/-22, size 24-8 line 2855 [ 2489.145681] binder: 15466:15479 ioctl c0306201 20000440 returned -14 [ 2489.188990] binder: undelivered TRANSACTION_ERROR: 29201 08:53:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x1000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:56 executing program 0 (fault-call:11 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xff00], [], @local}}, 0x1c) 08:53:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 08:53:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b010000]}) [ 2489.519446] kauditd_printk_skb: 122 callbacks suppressed [ 2489.519460] audit: type=1400 audit(32036.360:1925): avc: denied { map } for pid=15693 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2489.585745] binder: 15695:15698 got transaction to invalid handle [ 2489.648276] binder: 15695:15698 transaction failed 29201/-22, size 24-8 line 2855 [ 2489.673066] audit: type=1400 audit(32036.390:1926): avc: denied { map } for pid=15693 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2489.710431] binder: 15695:15698 ioctl c0306201 20000440 returned -14 [ 2489.718983] FAULT_INJECTION: forcing a failure. [ 2489.718983] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.743413] binder: undelivered TRANSACTION_ERROR: 29201 [ 2489.761447] CPU: 0 PID: 15705 Comm: syz-executor.0 Not tainted 4.19.38 #6 [ 2489.768788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2489.778185] Call Trace: [ 2489.780805] dump_stack+0x172/0x1f0 [ 2489.784469] should_fail.cold+0xa/0x1b [ 2489.788394] ? mark_held_locks+0x100/0x100 [ 2489.792669] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2489.797826] ? security_compute_av+0x27b/0xb70 [ 2489.803865] __should_failslab+0x121/0x190 [ 2489.808127] should_failslab+0x9/0x14 [ 2489.811965] kmem_cache_alloc+0x47/0x700 [ 2489.816070] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2489.821203] ? avc_compute_av+0x225/0x690 [ 2489.825396] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2489.830538] avc_alloc_node+0x2a/0x630 [ 2489.834452] ? kasan_check_read+0x11/0x20 [ 2489.838760] avc_compute_av+0x22d/0x690 [ 2489.838785] avc_has_perm_noaudit+0x324/0x570 [ 2489.838806] ? avc_has_extended_perms+0x10f0/0x10f0 [ 2489.852442] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2489.858309] ? proc_fail_nth_write+0x9d/0x1e0 [ 2489.858333] cred_has_capability+0x179/0x320 [ 2489.867281] ? selinux_ipv4_output+0x50/0x50 [ 2489.867659] audit: type=1400 audit(32036.400:1927): avc: denied { map } for pid=15693 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2489.871703] ? __f_unlock_pos+0x19/0x20 [ 2489.871732] ? lock_downgrade+0x810/0x810 [ 2489.871756] selinux_capable+0x36/0x40 [ 2489.871788] security_capable+0x82/0xc0 [ 2489.871877] ns_capable_common+0x86/0x170 [ 2489.871897] ns_capable+0x23/0x30 [ 2489.919411] ksys_umount+0x11d/0xe70 [ 2489.923142] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2489.928701] ? fput+0x128/0x1a0 [ 2489.932078] ? ksys_write+0x166/0x1f0 [ 2489.935888] ? __detach_mounts+0x320/0x320 [ 2489.940135] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2489.944907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2489.949717] ? do_syscall_64+0x26/0x610 [ 2489.953799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2489.959202] ? do_syscall_64+0x26/0x610 [ 2489.963203] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2489.967818] __x64_sys_umount+0x54/0x80 [ 2489.971811] do_syscall_64+0x103/0x610 [ 2489.976169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2489.981384] RIP: 0033:0x458da9 [ 2489.984597] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2490.003628] RSP: 002b:00007f888dd70c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 08:53:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000002, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2490.011542] RAX: ffffffffffffffda RBX: 00007f888dd70c90 RCX: 0000000000458da9 [ 2490.018834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000800 [ 2490.026213] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2490.033534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f888dd716d4 [ 2490.041013] R13: 00000000004c7e35 R14: 00000000004de060 R15: 0000000000000004 08:53:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x1000000], [], @local}}, 0x1c) [ 2490.048512] audit: type=1400 audit(32036.410:1928): avc: denied { map } for pid=15694 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 2490.096945] audit: type=1400 audit(32036.410:1929): avc: denied { map } for pid=15695 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2490.140155] audit: type=1400 audit(32036.420:1930): avc: denied { set_context_mgr } for pid=15695 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2490.179762] audit: type=1400 audit(32036.460:1931): avc: denied { associate } for pid=15692 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2490.228400] audit: type=1400 audit(32036.470:1932): avc: denied { map } for pid=15700 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:57 executing program 0 (fault-call:11 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2490.398626] audit: type=1400 audit(32036.470:1933): avc: denied { map } for pid=15700 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:53:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x4000000], [], @local}}, 0x1c) 08:53:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f040000]}) [ 2490.524520] audit: type=1400 audit(32036.480:1934): avc: denied { map } for pid=15700 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2490.557750] binder: 16120:16131 got transaction to invalid handle [ 2490.590817] binder: 16120:16131 transaction failed 29201/-22, size 24-8 line 2855 [ 2490.617287] binder: 16120:16131 ioctl c0306201 20000440 returned -14 08:53:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100c000000000]}) [ 2490.672069] binder: undelivered TRANSACTION_ERROR: 29201 08:53:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000004, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000c0]}) 08:53:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x5000000], [], @local}}, 0x1c) 08:53:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d564b00000000]}) [ 2491.124766] binder: 16437:16446 got transaction with invalid handle, 0 [ 2491.180418] binder: 16437:16446 transaction failed 29201/-22, size 24-8 line 3061 [ 2491.205278] binder: 16437:16446 ioctl c0306201 20000440 returned -14 08:53:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000]}) [ 2491.239995] binder: undelivered TRANSACTION_ERROR: 29201 08:53:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'teql0\x00', {0x2, 0x4e23, @empty}}) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x8, 0xa91d, 0x2, 0x7fff, 0x1, [{0xff, 0x8, 0x53a, 0x0, 0x0, 0x1004}]}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7c36, 0x10000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3f) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0x4}, 0x4) 08:53:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000016, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x46030000], [], @local}}, 0x1c) 08:53:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x740000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000c0]}) 08:53:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 2491.718449] binder: 16865:16870 got transaction with invalid handle, 0 [ 2491.763480] binder: 16865:16870 transaction failed 29201/-22, size 24-8 line 3061 [ 2491.778170] binder: 16865:16870 ioctl c0306201 20000440 returned -14 08:53:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x3ffffc, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2491.856067] binder: undelivered TRANSACTION_ERROR: 29201 08:53:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x47030000], [], @local}}, 0x1c) 08:53:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x200000f0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820000c0]}) 08:53:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100c000000000]}) 08:53:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7fffffffefff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2492.302896] binder: 17306:17431 got transaction to invalid handle [ 2492.314903] binder: 17306:17431 transaction failed 29201/-22, size 24-8 line 2855 [ 2492.342181] binder: 17306:17431 ioctl c0306201 20000440 returned -14 08:53:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x100000000, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x20, 0x20000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000100)=0x7000) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:53:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfc000000], [], @local}}, 0x1c) [ 2492.380086] binder: undelivered TRANSACTION_ERROR: 29201 08:53:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x200003f2, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24d564b00000000]}) 08:53:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830000c0]}) 08:53:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x940000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:53:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfe800000], [], @local}}, 0x1c) [ 2492.884201] binder: 17788:17906 got transaction with invalid handle, 0 08:53:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840000c0]}) 08:53:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20001600, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:53:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000001c0)=0xffffffffffff707d, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2000000, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000080)) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2492.927230] binder: 17788:17906 transaction failed 29201/-22, size 24-8 line 3061 [ 2492.964563] binder: 17788:17906 ioctl c0306201 20000440 returned -14 08:53:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30100c000000000]}) [ 2493.005355] binder: undelivered TRANSACTION_ERROR: 29201 08:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x50710000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfec00000], [], @local}}, 0x1c) 08:54:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86010000]}) 08:54:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34d564b00000000]}) 08:54:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20004000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2493.421537] binder: 18340:18413 got transaction with invalid handle, 0 [ 2493.464104] binder: 18340:18413 transaction failed 29201/-22, size 24-8 line 3061 08:54:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) r5 = geteuid() syz_mount_image$erofs(&(0x7f0000000100)='erofs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0x5, &(0x7f0000000500)=[{&(0x7f00000001c0)="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", 0xfa, 0x4}, {&(0x7f0000000600)="e23e580f5d2668ada80c430e7685a4d83624b4d7ed59d1c38598a8c67fe11e2f4b7547a5e1e49adc99f76f71777ac9e0104e3e0765c25b165d35631b64492b1b6a2ffd9a9e18e7672555979fda3e81c2e9304fb54e97d360a9d61c1c3d1570763e1f4c84ac9cc612b9fe9de12a8716f33589f31760079e3b15dedb846bb02809848184c5de93456498994778cbdc79df4194b1b75ab2d3dd4ef26cd71ae3ddcce04e3e86fa4778352a369e12b6998f0fa3795efa97d18a5a731272190a5d6a29f6f627174300421785cf4315396cd9cb3eacfba98b11b03527cf125840e01d4e58d2", 0xe2, 0x6}, {&(0x7f0000000340)="d77da5ead994ee3916873be795f3447967bd562be8a37a481c9d49322d300ecdffad651e438acb2e0a57eab45489eb05bc", 0x31, 0x7}, {&(0x7f0000001a00)="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", 0x1000, 0x2}, {&(0x7f0000000400)="f1480d3b1d30278eee14a0914f098ca6a1fd44a36484e4ad91e83dc6fa2ee1480450524c3109884fe9ed0584200e264046115b50c04f948ef2f29f22159555de8c53f3", 0x43, 0x3}], 0x200080, &(0x7f0000000940)={[{@user_xattr='user_xattr'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/dmmidi#\x00'}}, {@uid_lt={'uid<', r3}}, {@appraise='appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'bpf\x00'}}, {@audit='audit'}, {@euid_gt={'euid>', r4}}, {@uid_gt={'uid>', r5}}]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7f, 0x24002) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2493.513852] binder: 18340:18413 ioctl c0306201 20000440 returned -14 [ 2493.542230] binder: undelivered TRANSACTION_ERROR: 29201 08:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xc0700000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfeffffff], [], @local}}, 0x1c) 08:54:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87010000]}) 08:54:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d564b00000000]}) 08:54:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2493.972058] binder: 18708:18727 got transaction with invalid handle, 0 [ 2493.999881] binder: 18708:18727 transaction failed 29201/-22, size 24-8 line 3061 [ 2494.018201] binder: 18708:18727 ioctl c0306201 20000440 returned -14 08:54:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b000000]}) [ 2494.113491] binder: undelivered TRANSACTION_ERROR: 29201 08:54:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x2000f000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xff000000], [], @local}}, 0x1c) 08:54:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70001c000000000]}) 08:54:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xd0500000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d0000]}) 08:54:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000001c0)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2494.547849] kauditd_printk_skb: 116 callbacks suppressed [ 2494.547863] audit: type=1400 audit(32041.390:2051): avc: denied { set_context_mgr } for pid=19060 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:54:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 08:54:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x2000f203, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfffffffe], [], @local}}, 0x1c) [ 2494.728209] audit: type=1400 audit(32041.570:2052): avc: denied { map } for pid=19405 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2494.887239] audit: type=1400 audit(32041.610:2053): avc: denied { map } for pid=19405 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91040000]}) [ 2495.020319] binder: 19451:19477 got transaction with invalid handle, 0 08:54:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa01000000000000]}) [ 2495.059947] audit: type=1400 audit(32041.700:2054): avc: denied { map } for pid=19440 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2495.092654] binder: 19451:19477 transaction failed 29201/-22, size 24-8 line 3061 08:54:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x100000000000000], [], @local}}, 0x1c) [ 2495.121092] binder: 19451:19477 ioctl c0306201 20000440 returned -14 [ 2495.136865] audit: type=1400 audit(32041.720:2055): avc: denied { map } for pid=19440 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2495.155599] binder: undelivered TRANSACTION_ERROR: 29201 [ 2495.169291] audit: type=1400 audit(32041.720:2056): avc: denied { map } for pid=19440 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x9ff6, 0x4, 0xd, 0x9, 0x22, 0x7, 0x8, 0x200000000000000, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x100000001, 0x3}, 0xc) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x7ffffffff000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2495.346655] audit: type=1400 audit(32041.740:2057): avc: denied { map } for pid=19440 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2495.435111] audit: type=1400 audit(32041.790:2058): avc: denied { map } for pid=19446 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0201c000000000]}) [ 2495.510198] audit: type=1400 audit(32041.800:2059): avc: denied { associate } for pid=19442 comm="syz-executor.0" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2495.540484] audit: type=1400 audit(32041.800:2060): avc: denied { map } for pid=19446 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x400000000000000], [], @local}}, 0x1c) 08:54:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@fat=@tz_utc='tz=UTC'}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2495.728719] binder: 19975:19982 got transaction with invalid handle, 0 [ 2495.797131] binder: 19975:19982 transaction failed 29201/-22, size 24-8 line 3061 08:54:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x3) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f0000001a00)="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", 0x1000, 0x2}], 0x1, &(0x7f0000000340)={[{@barrier_none='barrier=none'}, {@usrjquota_file='usrjquota=syz'}, {@resize={'resize', 0x3d, 0x7a}}], [{@uid_lt={'uid<', r1}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000440)=0x10) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98010000]}) [ 2495.845938] binder: 19975:19982 ioctl c0306201 20000440 returned -14 [ 2495.879203] binder: undelivered TRANSACTION_ERROR: 29201 08:54:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 08:54:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x500000000000000], [], @local}}, 0x1c) 08:54:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x80, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip6_mr_cache\x00') ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000640)=r2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) execveat(r3, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000440)=[&(0x7f0000000140)='&!eth1\x00', &(0x7f0000000200)='bpf\x00', &(0x7f0000000240)='wlan0vboxnet0em1D$system*\x00', &(0x7f0000000280)='vboxnet1\x05userppp1bdevwlan1\x00', &(0x7f0000000340)='bpf\x00', &(0x7f0000000380)='eth0vmnet0^[*posix_acl_accessproc\x00', &(0x7f0000000400)='bpf\x00'], &(0x7f0000000540)=[&(0x7f0000000480)='^($\x00', &(0x7f0000000500)='vboxnet1posix_acl_access\xa0vmnet1vboxnet0user\x00'], 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x2000000000008002) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99010000]}) 08:54:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x101, @empty, 0x7}, @in6={0xa, 0x4e24, 0xa, @ipv4={[], [], @local}, 0xfffffffffffffffc}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xfffffffffffffffd, @remote, 0x6}, @in6={0xa, 0x4e23, 0x100000001, @loopback, 0x593}], 0x80) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)={0x0, 0xfada69ea20786aed, {0x0, 0x0, 0x7f, 0x3, 0x7}}) 08:54:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001c000000000]}) [ 2496.370759] binder: 20380:20401 got transaction with invalid handle, 0 [ 2496.396285] binder: 20380:20401 transaction failed 29201/-22, size 24-8 line 3061 [ 2496.439747] binder: 20380:20401 ioctl c0306201 20000440 returned -14 [ 2496.525628] binder: undelivered TRANSACTION_ERROR: 29201 08:54:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x4603000000000000], [], @local}}, 0x1c) 08:54:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000019c0)='bpf\x00', 0x200000000000400, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x0, 0x0, 0x8000, 0x0) 08:54:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 08:54:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000000]}) 08:54:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f000040]}) 08:54:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x4703000000000000], [], @local}}, 0x1c) [ 2497.057234] binder: 20877:20916 got transaction with invalid handle, 0 [ 2497.079844] binder: 20877:20916 transaction failed 29201/-22, size 24-8 line 3061 08:54:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) [ 2497.114270] binder: 20877:20916 ioctl c0306201 20000440 returned -14 [ 2497.145636] binder: undelivered TRANSACTION_ERROR: 29201 08:54:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000380)='./file0\x00', 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x100004, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fff, 0x8080) lgetxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)=@random={'os2.', '/dev/dsp#\x00'}, &(0x7f0000000240)=""/5, 0x5) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000100), 0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x40) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}) 08:54:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfc00000000000000], [], @local}}, 0x1c) 08:54:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x100000000005004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120101c000000000]}) [ 2497.626047] binder: 21347:21367 got transaction with invalid handle, 0 [ 2497.651868] binder: 21347:21367 transaction failed 29201/-22, size 24-8 line 3061 08:54:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000100)={0xfffffffffffffff8, 0xc2c}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001780)=[{{&(0x7f0000000200)=@ax25={{0x3, @netrom}, [@bcast, @remote, @bcast, @rose, @bcast, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f0000000280)=""/15, 0xf}], 0x4, &(0x7f0000000600)=""/238, 0xee}, 0x8}, {{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/118, 0x76}], 0x2, &(0x7f00000007c0)=""/54, 0x36}, 0x6}, {{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=""/209, 0xd1}, 0x4}, {{&(0x7f00000009c0)=@ipx, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000000ac0)=""/170, 0xaa}, {&(0x7f0000000b80)=""/134, 0x86}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000d40)=""/183, 0xb7}], 0x6, &(0x7f0000003a00)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000e80)=""/48, 0x30}, {&(0x7f0000000ec0)=""/240, 0xf0}, {&(0x7f0000000fc0)=""/246, 0xf6}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/121, 0x79}], 0x5}, 0x6}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)=""/211, 0xd3}, {&(0x7f00000012c0)=""/254, 0xfe}, {&(0x7f00000013c0)=""/94, 0x5e}, {&(0x7f0000001440)=""/175, 0xaf}, {&(0x7f0000001500)=""/87, 0x57}, {&(0x7f0000001580)=""/12, 0xc}, {&(0x7f00000015c0)=""/138, 0x8a}, {&(0x7f0000001680)=""/2, 0x2}], 0x8, &(0x7f0000001740)=""/15, 0xf}, 0xbf}], 0x6, 0x20, &(0x7f0000001940)={r2, r3+30000000}) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x44, 0x0, 0x8000, 0x0) [ 2497.765997] binder: 21347:21367 ioctl c0306201 20000440 returned -14 [ 2497.816842] binder: undelivered TRANSACTION_ERROR: 29201 08:54:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00d0000]}) 08:54:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfe80000000000000], [], @local}}, 0x1c) 08:54:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130101c000000000]}) 08:54:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x304c002, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x1000000000020001, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/214) 08:54:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0000040]}) [ 2498.288153] binder: 21829:21849 got transaction with invalid handle, 0 [ 2498.324214] binder: 21829:21849 transaction failed 29201/-22, size 24-8 line 3061 08:54:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150001c000000000]}) [ 2498.393512] binder: 21829:21849 ioctl c0306201 20000440 returned -14 08:54:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfec0000000000000], [], @local}}, 0x1c) [ 2498.445562] binder: undelivered TRANSACTION_ERROR: 29201 08:54:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f0000000200)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x400, 0x26000) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x12, "d64e5f722ba54e9b4b1c65cf987613f54748"}, &(0x7f0000000280)=0x1a) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={r4, 0x5b20fe40}, 0x8) 08:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7000040]}) 08:54:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x240802, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = getuid() syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0/file0\x00', 0x3, 0x5, &(0x7f0000000700)=[{&(0x7f00000001c0)="fe79bc1f1b856ab321f95d0d1110dabbf8e0a4da9e866d12b8b153afab4a84a144440a8e8d8e4fa5024f1b4c22cfeae87b747e63126903a4f9e97d340af9bb16eef112e9b0510b50e5f0d4d9784b111edce1d655c0f3b76eae53888eee79118ec2e517a9c5021d8ba488847e29a02284797af2c9795e34642e0cde9e84999a9d196811911f01d7", 0x87, 0xfed}, {&(0x7f0000000400)="50e4e3281b19febd3caf439960bc45709c7ae49cb63fb727349d4df0b04a0a6e46bcea106e5cd1e70fbe0d20a63682575673a3c8bbbc64b8dfaa45150021af41e7f7ad749a2beae5f48373c7e72d4cd25b6db1e46010ae92158da50347f63f2c4387e0e8dc63412aabc8f8078563401274501799d4d34adf3f238a1d913804dd3cde94037ba9094c5462047f3c", 0x8d, 0x1c}, {&(0x7f0000000600)="7d491396d276f120546bdb88428b88a7cfc1239942cdacbbde087b1a18ffcaceedff054fc3458cb7b6b378bc721d8129b182aa13b333862df84b06d5764deaa12c49db9be85a81219bca7d724309378153f14e022893aa197fc5fab05d459bf7edd88a20867974a751aa6da2055bbb3932d1b510ef0882366537cc8b55851f2417d0980ce2f3aaa3f1637dd9354ece2b9b2b0694d98bd117c3892de2c3ece06933c1cf17f0daf0537668b13e2be0c284a446cca3981f9f232e375a0ff3a40ae01c15ec38e0280754b8", 0xc9}, {&(0x7f0000000500)="d953936ce5b2ac27c78403989bf718e6f8740cf905930805b5a9092a80b115a7d0504f1a53eb75c3804e7d083853e3687f7051ee3af7b534c78dcce15459d871dd926dc2f0930a95b7582a8406376027ad59fa8197f73e4797fde4c0d4e530d9b4d20c26b8116f13b62f6f97d7f887344aabe0b825c30d4225d9efe073fdbbfd59de9c8a4732df2365dfd50c00d259dc84a3", 0x92, 0x7ff}, {&(0x7f0000000340)="5ec2c74940f1d656bf2a80358a9543bd575257660c1f23a68e893a19a113470d214b493d8ed26a5827fa5b043865d67b279f376c59cf23b085be7aad55913e7bf75c2121", 0x44, 0x165}], 0x884008, &(0x7f0000000780)={[{@shortname_win95='shortname=win95'}, {@utf8='utf8=1'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r1}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000]}) [ 2498.910683] binder: 22245:22260 got transaction with invalid handle, 0 [ 2498.957541] binder: 22245:22260 transaction failed 29201/-22, size 24-8 line 3061 08:54:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xfeffffff00000000], [], @local}}, 0x1c) [ 2499.007642] binder: 22245:22260 ioctl c0306201 20000440 returned -14 08:54:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000028912, &(0x7f0000000200)="0adc1f560f959eaa0d6df4e60cb1c4e02c49a20802e0157e503dcfd667d3a42df8624964547d2395137f7be200f47b517b84d1ea42952f1632ab929f69ad5910a750c5fa7b8454e680d3cb2fa82049800f2756176b4fee92da5e55694ea94abe09415dbbcd6fd6383e67b18bec6b37af5e6f0cd83dae147a6a13c8e2d50d987232e142fccd1f5bcc01b2533c54c2ccf3bb91c42bc7f3d30205fb4a3b1a10b9315231b6ae9633a90965adfd3aaed08391d55049459287eae0f1098e9fc938de47") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r4 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000c80)=0x0) getresuid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) r7 = getegid() sendmmsg$unix(r1, &(0x7f00000017c0)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000600)="8dde58fec12bc6677cba3230480ab7dd8b9cc3c4d4dc8f5d2b27eefc737d56a28cc58dacea91a0792ed1390c571fb16d7010bb402a5f99de205082beac0ca55ffbe9ba7369d9cd30f6e78f044b2bed71cfb52b6b412b74738254141f3d33593f1718ce116d8d22e178d66d7bf221500c0627cc2666704c2d9da3dbf64f5b222d7186b6782e91f66fd91ff8c7b44510fd5b1dca4fae0bf60ef831ca5d875dcf455e149e3c454032048866cc021400d835bc6f75bc71a0ceff0f8b20954eb3bab3d08a309b82c555520fdc2749a9bcc0d1b97d717cb89297a4234115b7b06bfe2c30120317ba2a615f33bed49f0cb047ff68a1baf4a1bddc", 0xf7}], 0x1, &(0x7f0000000500)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x48, 0x20000001}, {&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000780)="8d37151c41647f7c2092d6a9e11d4750d48aef079c9494fb6c188aa13856bf853f9cc96cfa854c9403a1602ff0bd16db8e99640d31a8c9458d22042d6aa3cc78089a8b1db82453008e45f312d89006a26c6b80", 0x53}, {&(0x7f0000000800)="384b6e2b30529c34c86b60ccd6acc425c0178e7551d8405f632d87d80eecad1cd80b2eb987f443b56ff0d2d26d35bfdca964c5d3b140c35b3c456cfda82fd4a1a4760ad11e2078c376e01bbea1b827e553ea1a7c9e2954aabb204323918e79c4162077d66adf277e82cef24335405647d1eef243cc88fc87f5541118515d11952dad1a652644b5abb9d8c4f42d2fc46587848702d0e59c6e61c29c", 0x9b}, {&(0x7f00000008c0)="4edbfdfeee359aa85a43caf1af0553826f0f50f63dd673e9b98f2025980caf3ba2d21efb9d211d28277dcb84720b40ef5b83841af2faf6e39ffa8186ecbb57fb9d438f03718f3e24f3c599a539b9c0530aa5261fe719", 0x56}, {&(0x7f0000000940)="54356df2366bc5291043046dff55ae5302efa0808dbb020216a8deaa6a14ebc5050e959c56b466b11051ae895e2a7d44828bd7a1092d220cea50324a46d15605b04291d14ba8dab1b1fefa71cbfa7e672acc897309a0842524fcc7a37c57d499a6546d4ff4de9980dc2b64e7769a687902b5b12e3c545bec0021e665d6eb081b6dbeb5d27ba901426b47aa24aeb342446e27c45420a371f26049e760ebef56e037710e2bd3d155796e214855418042615400f867c099670eff47fb2b1f489dc0146e2b50e3c328227cbf97f5a6782ede5b4cfc22335251adbe28", 0xda}, {&(0x7f0000000a80)="04c6dc04f7849792167323af55d854a4ed5bdfb4999f2a7387a1224be97f0b93ffa1fcdbe6fe30834a88db7dd8a8c9983cf5a1faa7c2a40753ac29a98c639744a837cc9a53c42a70945796971114f6340c4c41858b4e3265c2afebfda4544fe98d1b3b5a5e197005175ecbd630dd554f743cfad2294a2b5d6961fe05b28c3f64ded30f6ecd39f5f44d0b1f5e6f6bf2d4cef4096212b43a25a0a2bf41f4b9d9394fdbc8dc303c8a3d290278c50c509fedca2fbd8b5e918740b069deeccf0d7dd6ef779e81b494c2fc4f781397d653b87e0b681956188ccdcc8cf93acc583bc4f36ad4ec1c75441bf84f122c2420bfd2", 0xef}, {&(0x7f0000000b80)="1b43e3606f86241a6ff46ab2dac22f75b6d4af5e15739063e7da6b43bc8033b97196ddbc79c5c1dbd8aa34dddb248a89c9407735f77cc9d67d1f49d8b5a53c59e4c6cd96048306ba982b73167f3d81f684c12040ce5443f57f47a52a85b46cd0b4981fc6d06a5ff0db1bb1040fed18ac", 0x70}, {&(0x7f0000000580)="78098a6060f27a0115e38d", 0xb}], 0x7, &(0x7f0000000d80)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x58, 0x4040004}, {&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001a00)="d146b76036ecc8f857977144d0df001c2fdc301a621bdce640d8785456a16b0a289d6380759c0f5f7acf1053a50e6dc46781ab660dd5653140b25f5ce4d7a2cea38070543c134d0b8595bd9d1addd9f8b6dc19876785b79e8e618e0573e3de98037eb9e483c430c1cc2eabd713f1e3a408904b1a3b49faf2891e5b66ecdeca38dff691e3d7d6c41a74f7fd43fc6e52f21d7ac7ac283658c268bdf76c6052d0be427420a6f1b3a89fff19897a49d5ac1db758e6de839f31f305a9fc48f760df6235eb912b83abdbfa0da9e32f0a5cc7d3301b1eba349fdc99c0b03332834938f2e423d3434c3cfda6a16434ccdfcc2ac338be5a088ee733dc334ee153001985652a14cd9d764f56653f67a520f2eebb6d24d75e162b0c1da54da70bad3fa3094a488d46911967cd6926a5b74b63c46ea4ff1cea6ea0d30b7a514e9e045c072122fe8d224e254fc91f0a7a013a24c007de58e1aa72cd01209eaa7360ec5ba53b6a80f68c82665355c41b645105a4f598725a00ce31f71b9b847a4a3a13f06a096f72d51c445508a236b77d892f5309530e54d746a30ffcf684ed0af66d5e4051b362a39ee11b1ca10a9d2bec6c2234022ed4b504848dcb1feb5b804c43ecdfb268967c1ac1b72dd40ece2a33861237d8155ab1b467a9a2f5b3afb3e53c14d1295ed7b421d9526012f318fd322ab7456979c13967c9c294e1282b55d0058177ebf093a31e4ae4a99838eb20668d9ac324fe6fb4752d90f1516c49cd752601c7ef53415530801a1c03359c8b895b3e6fe325cbdeb0da025c71edf6bbb8e82262d2bd6ab0133a9068102550580d32ff7400d02dec187401363e47370f3195977874d8251041e05f96f977351cb731cc5cc26b47b111ef9e433a969d94b9a7a70f00c00fbe8143cd077a15548a9edf225e2e71f11e3b2a19bb39e3e816da6d06f5d7f78fc42c82b75d077b19aaa8104b383908907b2b0566d2bb2f6c2c305f5000cd06ad8d9a8849bd8deb1907586034cf84bbf8e197550bb1205d2c2a901f64dc70b70ceb958c3d6ebd6aabacf6e2aa67c447d89f604a0faa237bb00f6a927c8703abede2df587c6a33e141b4d01ada2d94a2497a82a1ea159d9ee1e8695eee7a265ae900e0f8d96ceb5e152cfc8083c99b1f6e5f0f6420f7b6c3e6d0be0ca47761c7499e22fc16000212512a8797b54c260b7bc5b9a121c344437332ac0d4b85da2be5fa8a8fc3589b7eaedc2f248353e598af83266ded7c3b471e41caf7d4d6a60af88d422b566bac603b54e01c6c16b300ddfa2c2116d981cb64f28ffae744802dfe136c6179e3da445dea51ff2d0dd42fd83a37f984d7fcb2ef7a9704b686a2bafe1cfe9258bc97d694bd31d455e97328067bbe92a3e4420736541a48cb3e3ff6911526ed5dade7d8dbb659e329b7ebc48e528fa58933f2aa74a11a5522fc1b26eb76807c67b0b5c0a79c7c8cc77fb6d761f1676d249c568f628df7bcfa8c952b1f633c39cfbe236cc8156e7b95c690800c9e688a9bce209b11fa681051ad2773d4903962c533eacec118fb75510ef02301b067e491f8292d682230080fa13cbaaf990f9d4bbafb3064dac047d16f8349e05b281a8114c5e54b230231eb73a626eee0044189f0b1d8d2a79d0866b7fb72e8a8674587c858a21bf33c027f3fd31eb0f035bc8926fed22472248e6fe714ad1a17876e97b82a11538f7fe977a2e6f93f1a1a968f7d4f32cfa6ab646078f2ea6b100c9cd59352346b4d65d8e355a983e687be8c991efa9692d4343da7fab03014cc3f3fa89791d0efb62360d900af7b89bbd4470391af0c551cb2668d5b04aba2177ce74f22e022edd7fccd8d95856465fb7ab02bb1876f96baee2c8b7e488e0db7b947eaf01c50965934d258057d9d6ca22ba5f85939cb4807dd137815f4001235da480de8ae9ade2bab77fd55b9dd05e108e44fc5da6ae2383c0a36a4448634313afab3e858dd18cd38aec2f7ca6c4ac05402876c73da1148a486fa86931586fe44243840b497a990b44180c77f45100aa57e4689dba9cda28bf24ea54a4ee36a925680ce6a7204d17f6f144912faa8a4a74bc63337d9ed83b3033c5c3b967d66870712cbc56d74999d7f3a0782eb78ae3b630881f38d884b6ad1ef9755867d12a9d5651bea5f8822cf1b812727af43812db92383dbeeba40b5516ead3087b5c0b5581eff449e86ed2068ed2f1603c8a1a9d5a3e6f975df1eac51b600bd8bdf238d1e956db9bdc4b103ba6bcb75d9a333a417f5d2c8f806ef3d5e8a43ca0ceffb47b5d9ea03ad6d635cff0f933be07793b141f9c2a856365bb873f7b42d1acf6c4e2c80a5543df8daf53697cbd063ea706a0ab9d75421f28649ce755378d60bb24aefd0a70884d57a59f53322f967a5bf600957220f75b0a405054f70eb80f578ef36776fb744cbfdab9b938b5ffae8f308de117bfece4dc41851df9793f255d1bf28608b1882fdf0b59f76e383297682a711f8c3a4971511a2043736796b93e0f4c22b60240f81c54de910c2b50677b2cf33fc63ed0ed1adb13e0396d541c6cbefc5724e942f7d39292cf354a670a1d05644d66e321345325181e0df1a8113d43e7e68f51a64c344f790a65f83a4139eaf273c90034c92f8efaab41bfb89a6e3734dae86a2b8ae2a50165e39bf53c7c4424b4688f659ca1fc9ea5b143edef7f37a0064dae4952d322846087c189216491d79de0715eaf7e60781b5df59dd1ba4b854fad527ea7b2759a2d4f3f0e478365843490972508cb38dd10a27220c9c7f086df106bdeda15c1c025a094df061fe5d3ffb51da9a7c0808e13fd812942b22edbbc66a58169c8673db49a904ddb3aad34694d36629caa176af2509f80a27bba6e051ac5b4d28c95222cbb67b8a76395e3a4c070af2b20cb79c8f5b1199700a094f0266d5f2e0511cc58816917de66d16b5f8a92882b3313d66892eeb23d628d768109cdba6ace3b28c8863ca92304f3746005c83a2af2d16e627fbe601b6bc73144226ef8c6e611471d2dbca3f0ad49c97d08a755cf8637bbec38ec174137d1d614b8b277d46ea87b61a7117067fa1c81ee65d50c4b4d983de46c507f7b5a367b3e798c5d99cfba0724c2ab9fd10bfbbae27c2ce2edab885e3e69e00e0e0c0ec312d4db7dfb4e9b29d6446089a9f4dc102309a5cf3495acf13b687241c5db02bdde4508ed274723f9fad0f3cfc05962ca6921b8b4a9de654e92ec1800f90fe99a4ed9d583ca32497a9d11f719dca88c5fe0360210cf12ecea292b73671026670d6aa044bd6f05da74b28ef55f98c78e81acb003523b7f8a2fc5c1b08e74fa5957740102b257368d0b3490d5861a57e3acf2cb434f1b74ee7e9c201ce5e72241163a7256b0468fd1726a9dd015eb486f06f783035c1391fa01708a71d910afa990fe564b9f39622906f136afe63456ac1f4cf7d9e6caf986c689634f32bdabd20311401c11309ac6a293eca6a1b9565cba444eae457d28ba5558d48b35fe0840c6a35c97a7c582bcfe31da5f2c8a5220b32b924a681ff7dd30eb2a224ff8d1a4e25dd15308a2671a0d78fcf193a667b2a09e5fa3b86b97bf3f47f07ed57a0bdeb277cb9060772f68828dc1fa5f846e841e2ad60eee4ef31f5a1d1f42c0d1dd2f5b705c04ec3680d3129abe0a7986f5fa56b28849ec8def83fe7233a83811c7933af842317d2a92bd3eba561f9bc9122ec2a4ba73af6c7e918f6bd42177f1d4c5f8b7c88025cbb0a71b39f3e8b4498d15f5e6ab2171d111f99a681ba767269bdd5f2d64e23151256e4282e992503fe21af92b80de66d24d488199eff8ed58b1cd3d290ab234b4f6124f4cb61c6237a1204218d98a371401f92912524cb20d7097a0dcb347753b8e6fc77305787be337d1bddf5aa2673e0d4ea9272de1a0545c38457bde0a2ed6c8734ed80caa9a4a1563934832dd9e564a94fe79d96c6cfdece2e11a2aad4d7815aed401e3804fd175c6c12e94ae8e1c0f7da6ec7ddff86b832196f306540a2cda2cf59e8d98ecb5bded5255261b4971d3720e8b0d0fd05489a3d8abbb757133a1e98ecf75f3688174920c6cb106eb5b8fd1402ad267189ba2bc6dac8a3e3de1a5e93ea162edfe108e24b62ec9e94f38b8aac036ad6b08eab08a70a62b688087bb96bc195d7b303ea52d8a0f30b71da0eb5524144368174a99499f0a3e4335ad5f487d227f6613453c6ecff87c49ddb99364be7f59ac038488c76ab46f99c0c6e58463b6f278380a7c879f33e00f5b07259fe041f4ee892b8cc8c0041af9dbd957144fefc71415f7006b753d45c4d5285d8f0cb2173f58362c1884d354440e391ced38db107b15c35a97272fc8702a76327af7b88d298e58224c6a1db64c7400d8fdaf813b9a5a5a8c465d394d6e63f1fa1b081fc0dd91ce5a904b23a83ecda08be0fafb7ca0a638073a42284f63d108e2e1218f3e4b7d74602709d80d217e0ab4026f121531eb772fc0e743ab687d20f10ff65de423cfcb4fd9a50233a61fc00bcb358e3116e1fee5073cf8f017e6701baa08ffc1958cf7c1e025cc40add1a05e2a0f8a33df3129796bfe497dddbfa43edeb45143e767e80b2516888892158e50be9ea2681df5809a7eae05d5e16ad2b08fec8f5e699ec3d7cba4f416116070757812c9e4551e7b3685f440e281cc2911e8ae2fd8a46cd7c43d948fff8a79cb4aaccbb2ce897709666e215e5d9b681032460f9b27d288966b0b73da673dabb8d609fe0d30f90cb629d01bc4c01d7a715f7224dd62ebfea682d1b23b336c353c6548e304ba5b27b731fdd87e01468508458a5ac467e9ae831ae8447cd59cebf6a7c6e3050f8e2ce33b21459e768b3d7d886afeece20d9d7ea8b6c3eda7b585575df69e83f6d0d97db8923ecb2d7d17f3421a46428e016b7ba2bda2f86e614b98599a697ee33a270189de4cd6d33c096181ae44d1e14c7ae3e5e7087877bbcf658d7d70173f41f7e61cc153d071c7cace2920e53c1d60f8a60b0b14d97e667916697ca949fa9e9833e151cad5bb33c25bc5999c5631fb9fb7c4c5802294182f1b619f0b2d85ebe9a936943600c9cd341d3ff92c256ec20dffc0c12290f82e524d94960cf2035fdcf52dfa3f53e9b244d148c64be2ebba14998ee9e426be9bf6d1859f51fbe188e2ff11f80f07f0188492bb61fb0a34129143dfb6d13cc20f8fa1f58e556b4f8dbcf91a32180ced00031e619f8f603e8dd64f2fa54f0beaea9c167b27ec3a773c6819b4f5e0015c0ba77f6256065f61989f340e03c5e6f9eb2da3d43d05c2e3344962a5f4e5f26c4f6a3e798b19a7ba50ae872883a659f84146cd63f0c05a03dcb39aa4cd2ab3d0f4ecb06583db643aff1d47cfb1c387768197d6895ebf26530f6fedad480404f154e684c0726c6aef87866a24072e1b839ce41075d523c03573251913b30f0df043bc6dea15e05f04fdd3f4de5d2cbe92ef4b94cbceab84435452a86e7ed70882530112cd81156b5b9223b4c0c2ee55754a32ba595b903037fa355b1f733ac6b87ab508ba33bf3aa04e60a73ca6780e8279d3cf4f8724b993bb1bf7a201153ec82a2fb1e7f5298d4dd82417f49e1c8f3a98b8e9185f9cb0694b43f01f3b6a0f19556bfb88a0055f1665e2eaeb7731237d91481cc8555ab0ba894fc131e671d73d7ef3732e2f017dac81b7645afa71cb9f583602056c902925d743d9b87e222cd535cecf2862ddb267a14b6c5168bac269565c3ab6f407c235147cc5ea0e7cf1049e84d9e0dfa13d37ce7b129b504062663cfd401f29e15f9506891", 0x1000}, {&(0x7f0000000e80)="df1479cfe75cebab7050ca0570af", 0xe}, {&(0x7f0000000ec0)="6b9bfa939eb6a3d2f910ce3e0b6223d9e866dad64c5b10ab8f54c0a5db38358457efb796a8f66cb1ff9f3d605069ba8a98937a60853f5b1d22bd7a1fa20af95deeee7862697c551452699e7a74b62a741cbc68703c86bbc938b91aaecc8d4920d5d2a77b447e4f72cdd1add420233e1f6317f6a01bf6442787a8dd4d2e9f36218ab0036f18aea9be6e7f964f4d2fa7f213bf224038eb36f9ed34bcd2f88032343e6bd10e901839a50fb598ad1a662f75edb9266a7a184dcc", 0xb8}, {&(0x7f0000000f80)="6637f077a0d17714c49f7149d44eecfbb0052417a06de00d5be80bd53696ad4587ac9bfe566ec32425916f6928461713121078152acb1d06b76cb38d1abb0338db193eecae6428e5a62668f14cae1c04b0bd82ac00c7ba6701ecdb6ce782eae44a39289b9b4201e4436c374d76db85529b795b79849aa557039ecfbd1aaa7805e0a1c34a73c366d581bdd77b5e74540e0b5bd3fbd9612ab45704c88246642fa9eb60468214a21176b52d263fffff7de4a196b9fdd24505e3d45356d5052cef0cf9e0", 0xc2}, {&(0x7f0000001080)="7407439c36d4fa48a72afe8f44624ca1a835018e1354a253c2548a0919b5af901ab1fc1738ab37cf349ef437f209d31fb7e067f08ee2b00d8291f717f6fb2e231e7848b8f073e35360a0b0c359ee9069362836cd4e9fc63a3bac1aaa6879364e798162d9e13eb7e1df2baa58a614b8722e5dfa5608818644f1628d58c2b795ce1f4e7d260d35b61f782f41d462fb61ba02c115d72c53", 0x96}, {&(0x7f0000001140)="c2d2cac7482ed3962c7d12712c589038c9b742ea21f7abe42a4f8250664b20f2c3367b507d629fe7697959f63de5b66b13090967afa35fec924e316d6848cc2979c5bd0d1e8b67755cbd520ea89a7c56326eb44e83206a7b7de8c2103dd1ce53bf23bfd9cb3e54c1fd9c8ccbc008d4a46a505d629bd9a129ee67c8db91f11c05224aa09a3ec03a8f21986b0b6969f4bd61cffec0442acc4c8322399df4746f894f4dc1c43c29a8f15f5cac6fdd557edf2f65173a351a923b151963af359b6afc3deddf639010", 0xc6}, {&(0x7f0000001240)="974f7bf75d34bad1fc68da0f6c4a0e9cc19ac51737a4169cfda2d9d849f6dd006c8a6e412696fa890fa7bff12d828846b9f83f5a02a28f3a95", 0x39}], 0x7, &(0x7f0000001300)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x60, 0x80}, {&(0x7f0000001380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001400)="2248535e0787d139749a5eb5f6e92e2a823fba1f5321dd5ea92e7a8f1c673b7ca8dde91e626b5fc054fa5eb3ad53a55b9c1b5250d9f918013a5c88dbb24ca94af221ad0e9c08ff6f259f57f06671142ea6749518226444799d338eafcd24664c2f454259cdddc3384f5fddf373ed6df0e37bc10e6faed533af0244e2826eec29466643cc8f9a7eb24f38a97d4395facd3241af31b8501bc8aaa31e4b208945db151e8a9f86fc0bb4fa45fce76c430ad3efabacf700d644f1fa6d1f4ea927f1a106a3ed154cfbd0ffaa6b22ae62423ffeef675542d25b68e4d3540fb0643f1f6ddb51252c631e167d6aa4d5284219", 0xee}, {&(0x7f0000001500)="78965ba6c3695f576279fe80f4c65d98ff8934c87c3b152e1cc3a3d0d0fb78511ea90e60c89da965c8de767bb9bcf8f1cb6e8db5809ff0cfd6860ac8e51e7d67c9d495038cbbe211bb457ea6708a21ab1a7ef238427372f778413e46c656b2b2a1c40cfb2f5631dd8ee72419e037d23bc4fffc8e7f22978745ce0a05ff931b9bb265acd44ac585498d31ab4733102dcaafb916cf6d4a62fe700b1986edbe498be23fe4f57d02478ee029c68265e09b677102e9c1dae986d3140d12088158439c5a4856ec091e4451eeba6c70bc90cc982cd554e95f32f060d7c29e2dd98d08db3cbe8050621433afdf078daaa02f1e617f77705c0bf3b7", 0xf7}, {&(0x7f0000001600)="446a363b8847ebbd6f3b00e0b14382dc7a3ede178ab0d0c18c39a72ff3ce98890ff909046e1c8a2d0bbc0f363354881e65320b66743d2abadc3f774e51f2daf1707b3d2c95e6cfb50b415908050e163a75484636825b50413a030cdc9bd4cb4bd7b7ab46d21612c3abaf27635a7f7acfe2f8eab478fa0600cb93cc68cacb3b43de0e480aba12f6e3531e6bddccc502d4eb71407c3bf884d1c818340a1a80a741deffed8ead491dff9210e86e85be864bbe66", 0xb2}, {&(0x7f00000016c0)="6b38f0dcecf5ed27e6e6d090389794860ffd89244e065486ba62c3da376ece8889deb31634af426da42fe22e59deac74475a3a4403be93e2f3a4b9450c1902d46f1f084d1acf15636b595c4a22a46e626011b130c177d39d5b7e17d2cdb01251a7d28a446b46b4daf73f6949bd49b207365cc8c2637d982a61ede73237eaaa0a110a9f79068d0ee09e773681a7720955db926d8c37a75c22a6028b55b09baa07e60bfc182957d773aae43e7d8e301e2efb", 0xb1}], 0x4, 0x0, 0x0, 0x4004040}], 0x4, 0xc040) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2499.069763] binder: undelivered TRANSACTION_ERROR: 29201 08:54:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x170101c000000000]}) 08:54:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000080]}) 08:54:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x82, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x6, 0x7}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x10000, 0x30}, &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x7) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x0, 0x3, 0x81}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0/file0\x00', 0x10000000) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2499.550902] kauditd_printk_skb: 114 callbacks suppressed [ 2499.550917] audit: type=1400 audit(32046.390:2175): avc: denied { set_context_mgr } for pid=22599 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2499.553220] binder: 22599:22629 got transaction with invalid handle, 0 [ 2499.557911] audit: type=1400 audit(32046.400:2176): avc: denied { call } for pid=22599 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2499.618656] binder: 22599:22629 transaction failed 29201/-22, size 24-8 line 3061 [ 2499.643196] binder: 22599:22629 ioctl c0306201 20000440 returned -14 08:54:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0xff00000000000000], [], @local}}, 0x1c) 08:54:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000081]}) [ 2499.673719] binder: undelivered TRANSACTION_ERROR: 29201 08:54:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000]}) [ 2499.737609] audit: type=1400 audit(32046.440:2177): avc: denied { map } for pid=22602 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2499.835419] audit: type=1400 audit(32046.670:2179): avc: denied { associate } for pid=22655 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:54:06 executing program 0: r0 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="515921f3881c5a7e590b4dfc59a8b97bb8f3f596434a4a73f1f20d049b53a191819f0ee438624fedf9cd60df9abfc739466d746f013853338e416817988879289ea83c4e69d2b25d9c100d5c5d8d95363ff6261904b638ec3e0d002f74d480188fca3659c10f6812ec191c846f35ea6ad7ae0641827c7da003e349be31d6b9bf4a1e26d81969932c1b8beed93df7190e1d225f26e70f32c639da807f9e1967eab301", 0xa2, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000140)='bpf\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000201b", @ANYRES16=r3, @ANYBLOB="080427bd7000fbdbdf250100000008000300ff00000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) ioctl(r1, 0x2, &(0x7f0000000340)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x5892, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2500.005280] audit: type=1400 audit(32046.670:2178): avc: denied { map } for pid=22649 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2500.058112] audit: type=1400 audit(32046.720:2180): avc: denied { map } for pid=22649 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x4], [], @local}}, 0x1c) [ 2500.090165] audit: type=1400 audit(32046.720:2181): avc: denied { map } for pid=22649 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2500.129275] audit: type=1400 audit(32046.720:2182): avc: denied { map } for pid=22649 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2500.292397] audit: type=1400 audit(32046.730:2183): avc: denied { map } for pid=22649 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2500.300680] binder: 22957:22959 got transaction with invalid handle, 0 [ 2500.350707] binder: 22957:22959 transaction failed 29201/-22, size 24-8 line 3061 [ 2500.364133] binder: 22957:22959 ioctl c0306201 20000440 returned -14 08:54:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000082]}) 08:54:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0001c000000000]}) [ 2500.438301] audit: type=1400 audit(32046.740:2184): avc: denied { map } for pid=22649 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2500.446043] binder: undelivered TRANSACTION_ERROR: 29201 08:54:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x218000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) 08:54:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x5], [], @local}}, 0x1c) 08:54:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400400, 0x0) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e01000000000000]}) 08:54:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000083]}) [ 2500.987194] binder: 23383:23435 got transaction with invalid handle, 0 [ 2501.031917] binder: 23383:23435 transaction failed 29201/-22, size 24-8 line 3061 [ 2501.069760] binder: 23383:23435 ioctl c0306201 20000440 returned -14 08:54:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfc], [], @local}}, 0x1c) 08:54:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x50, "f3a76a7e15d20a3a33c2e6df294083014fcb79bd9bc329f55f0eb23c84576f979b4a786cd3511c7f1b4410270a1ce9b13ac59d3e9c90df1333079a7918d54c0a95f498446a02ee9d3a75457669a1f935"}, &(0x7f0000000400)=0x58) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={r2, 0x7}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='[-&\x00', 0x4, 0x1) rmdir(&(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) mknod(&(0x7f0000000280)='./file0/file0\x00', 0x8, 0x176) [ 2501.128559] binder: undelivered TRANSACTION_ERROR: 29201 08:54:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000084]}) 08:54:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0001c000000000]}) 08:54:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x800005890, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x2001, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) accept(r1, &(0x7f00000001c0)=@hci={0x1f, 0x0}, &(0x7f0000000240)=0x80) sendmsg$can_bcm(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000400)={&(0x7f0000000340)={0x7, 0x28, 0x0, {0x0, 0x7530}, {0x77359400}, {0x0, 0x7fffffff, 0x1f, 0x8}, 0x1, @canfd={{0x2, 0x5, 0x1, 0x9}, 0xb, 0x3, 0x0, 0x0, "69b84f138cc6f7de1a34bb6e6d76d391108e658d9edcca2ea9dd8e58520e14cc3c72ab406901ca702f4441c98501e0e013a16d2c04bfb1e3d4cdf7f08b69fddd"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040) 08:54:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x346], [], @local}}, 0x1c) 08:54:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000100]}) [ 2501.582129] binder: 23899:23906 got transaction with invalid handle, 0 [ 2501.596437] binder: 23899:23906 transaction failed 29201/-22, size 24-8 line 3061 [ 2501.607719] binder: 23899:23906 ioctl c0306201 20000440 returned -14 [ 2501.661989] binder: undelivered TRANSACTION_ERROR: 29201 08:54:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x221001c000000000]}) 08:54:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x347], [], @local}}, 0x1c) 08:54:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000101]}) 08:54:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2502.073635] binder: 24296:24327 got transaction with invalid handle, 0 [ 2502.146218] binder: 24296:24327 transaction failed 29201/-22, size 24-8 line 3061 [ 2502.169876] binder: 24296:24327 ioctl c0306201 20000440 returned -14 08:54:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00000000000000]}) [ 2502.192615] binder: undelivered TRANSACTION_ERROR: 29201 08:54:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000102]}) 08:54:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x500], [], @local}}, 0x1c) 08:54:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xff, 0x10000) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000200)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000540)={0x38, 0x6, 0x0, {0x4, 0x4, 0xf, 0x0, '/dev/dlm_plock\x00'}}, 0x38) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = gettid() migrate_pages(r2, 0x53, &(0x7f0000000080)=0x5, &(0x7f0000000100)=0x100000) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x588e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000400)={{0x10000, 0x100000, 0xf, 0xdaa, 0x6, 0x8000, 0x1ff, 0x3f, 0x2, 0x7f, 0x1, 0x7fffffff}, {0x6c0109a102e55bb3, 0x10f001, 0x3, 0x4, 0x2, 0x3, 0x5, 0x7fffffff, 0x53e, 0xa6bc, 0xace, 0x4}, {0x1000, 0x100001, 0xf, 0x6, 0x40, 0x1ff, 0x3, 0x3f, 0x3ea9, 0xffffffff80000000, 0x0, 0x1}, {0xf000, 0x1, 0xf, 0x9, 0x5f, 0x101, 0x8001, 0x6, 0x1f, 0x101, 0x7c7441a2, 0x6d5c}, {0x7000, 0x3000, 0xf, 0x4, 0x1, 0x100000001, 0x3, 0x3, 0x8, 0x5, 0x1, 0x588}, {0x10f000, 0x2000, 0x0, 0x2, 0x7, 0x0, 0xffffffffffff7fff, 0x3, 0x8001, 0x4, 0xfc9, 0x8}, {0x2, 0x0, 0xb, 0xffe0000000000000, 0xff6, 0x6, 0x1ff, 0x40, 0x9, 0x7ff, 0x7, 0x80000000}, {0x7001, 0x4, 0x0, 0x80000001, 0x3, 0x8, 0xfff, 0x8, 0x3, 0x0, 0xffff, 0x503a}, {0x10000, 0x1000}, {0x4, 0x6000}, 0x10000, 0x0, 0x16000, 0x2102, 0x2, 0xd001, 0x0, [0x8, 0x10000, 0x101, 0x100000000]}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) 08:54:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a1001c000000000]}) [ 2502.596480] binder: 24672:24708 got transaction with invalid handle, 0 [ 2502.616965] binder: 24672:24708 transaction failed 29201/-22, size 24-8 line 3061 [ 2502.639284] binder: 24672:24708 ioctl c0306201 20000440 returned -14 08:54:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x5, 0x800) read$eventfd(r1, &(0x7f0000000240), 0x8) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r2 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x12, 0x80000) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000140)={0xffffffff8fb932ca, 0x3f}) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000440)=0xffff) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$isdn(r0, &(0x7f0000000400)={0x22, 0x1, 0x4, 0x2, 0x1}, 0x6) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000280)='./file0/file0\x00', r1}, 0x10) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) signalfd(r1, &(0x7f0000000380)={0x401}, 0x8) umount2(0x0, 0x0) sendto(r2, &(0x7f0000000500)="803d63dda073de09560682ee0cb7a4bc6b13b6333cb4da17f0185594239380f220d4df189ebd236f6a7ccec7a78aeff3b844fd891525587645884fd25d87497a5f31b8097542c88e22ae7d8c5e065d2790f72f35ace006b9b2c25da46d50b570b579629dbb69982f0e9962a54f1ca5c0f17e2c171bf126859039f27c8783c4426bc8ba3b", 0x84, 0x1, &(0x7f0000000600)=@llc={0x1a, 0x33f, 0x9, 0xfffffffffffffffb, 0x2, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2502.664364] binder: undelivered TRANSACTION_ERROR: 29201 08:54:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x4603], [], @local}}, 0x1c) 08:54:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000103]}) 08:54:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}) 08:54:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r0, r0, 0x0, 0xf5) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x4000002003fff, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2503.153732] binder: 25129:25161 got transaction with invalid handle, 0 [ 2503.172972] binder: 25129:25161 transaction failed 29201/-22, size 24-8 line 3061 08:54:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x3, 0x20800) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000440)={0x10001, [0x3, 0x100, 0x401, 0x1, 0x1, 0x8000, 0xb6, 0x81, 0x9, 0x1, 0x5, 0x5, 0x8, 0x0, 0x5, 0x2, 0xffffffffffff358b, 0x3e, 0x3, 0x2, 0x4, 0x2, 0x1000, 0x8, 0x5, 0xfffffffffffffffe, 0x6, 0xfffffffffffffff7, 0x7fffffff, 0x0, 0x7f, 0x3, 0x10001, 0x800, 0xc7, 0xaedd, 0x7ff, 0x4, 0x9, 0x10000, 0x401, 0x0, 0x80000000, 0x2b, 0xf53, 0x8000, 0x2, 0x7], 0x4}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000140)=[{&(0x7f0000000600)="b8fc3404296b34dacbc9a6cb4632c753b51cc94f6e4f015a508401360d0cdf2d05894b646e39b1ec685b9c722ec593179baa9bcb551dfe6e95b1e03ecc8105b38f0a2f43a09cb8b744e37375b0fc4ac836d6e02ce0b0ea3c446dc8390a4f07e00b78d287e97b5a230264262ae01da45b69044c85d2e0de3141df5155cffe0c9296321a82facb94ff96c8e015d35fcc752aba183afd40753e1c93188ce96c18e666565d1df2040fd64270c529e65e147702039247cc615afa9c63929d4f10a94de7c2d695c3c236fba229c6660c5577fb8f6f40127a22cc247e3b9a4ce8ba", 0xde, 0x5}, {&(0x7f0000000200)="b10639d66bdd59e1fcdd79a278d12059e5b3c9c659a10721cdbcf855cd5167fd630d31392755204497366876e35bf0f281b22a66b7ed98beebaeff6cbe25e445f5ad7eb7f63fcf35ca8ac4bc32ea8531f59675c23747c2db2e7197b1f9c82de5ebc54f19ae19806f1e01598b718d98ec25b7e7b307439a41eb880fba12994aefbe713f1f4d80e26d505624c03ce8bd6e0a1838b697c14c776c9063baa2e227669fc29bad7b152e4622f9e54b0b", 0xad, 0x1}], 0x100000, &(0x7f0000000340)={[{@enospc_debug='enospc_debug'}, {@compress='compress'}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@nossd_spread='nossd_spread'}, {@fragment_data='fragment=data'}, {@treelog='treelog'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@check_int='check_int'}], [{@appraise_type='appraise_type=imasig'}]}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2503.212195] binder: 25129:25161 ioctl c0306201 20000440 returned -14 [ 2503.280469] binder: undelivered TRANSACTION_ERROR: 29201 08:54:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x4703], [], @local}}, 0x1c) 08:54:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010000]}) 08:54:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1001c000000000]}) 08:54:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x7d, 0x7, 0x40000, "f04349e08ffb77bec8bdc942f0660708", "61f0095206404eb191f0ff9397e49db8e348238ae7824590c850d9cca77cc2a2407e2bfcefc1eb5858546f0b5358843a8c31e73f1a6de40aba349025b332360f7941b6b248a6c65ae8fbd691c5778dffba3253f608cea438138263f14c5f0084d8e448319ad2f3f1"}, 0x7d, 0x3) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x80fe], [], @local}}, 0x1c) 08:54:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010007]}) [ 2503.751157] binder: 25590:25650 got transaction with invalid handle, 0 [ 2503.759693] binder: 25590:25650 transaction failed 29201/-22, size 24-8 line 3061 [ 2503.767401] binder: 25590:25650 ioctl c0306201 20000440 returned -14 08:54:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) read(r0, &(0x7f0000000100)=""/96, 0x60) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2503.866599] binder: undelivered TRANSACTION_ERROR: 29201 08:54:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}) 08:54:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010010]}) 08:54:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xc0fe], [], @local}}, 0x1c) 08:54:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x70200) bind$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000]}) [ 2504.306931] binder: 26043:26094 got transaction with invalid handle, 0 [ 2504.337942] binder: 26043:26094 transaction failed 29201/-22, size 24-8 line 3061 08:54:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000740)=@req={0x28, &(0x7f0000000700)={'ip6tnl0\x00', @ifru_settings={0x3f, 0x6, @sync=&(0x7f00000004c0)={0x6, 0x6, 0x4}}}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000240)='./file0/file0\x00', 0x1ff, 0x2, &(0x7f0000000400)=[{&(0x7f0000000280)="231f852cd775ece5f804e39160ae7783c54a3312afdbfdf17ac236e843683d3d69ef61f4ea75749eb0b16838b64b65399ef391757b", 0x35, 0x81}, {&(0x7f0000000340)="d0b803f0b85879123b8e9992d14c8d95b9b8da15e51e83a33525d68353230ab42706670e2900b1a562fa7d123b0560295ec4d33fc78fe135860a5424c6969d42fa4642f21af440a6976b1d33c75da7e309520f61d5d6c9c61efd7bdd0e4915da49db73eaa3d25956d43e0b68acf518", 0x6f, 0x5}], 0x40800, &(0x7f0000000500)={[{@tails_small='tails=small'}, {@barrier_flush='barrier=flush'}, {@usrquota='usrquota'}, {@tails_off='tails=off'}, {@resize={'resize', 0x3d, 0x5}}, {@noquota='noquota'}, {@grpquota='grpquota'}, {@nolargeio='nolargeio'}, {@acl='acl'}], [{@audit='audit'}, {@fsname={'fsname', 0x3d, '^-\''}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) fcntl$getown(r0, 0x9) mount$bpf(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='bpf\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030342c6d6f6465303030303030303030303027303337372c7375626a5f757325733d62217b07ba000000000000000000"]) mount$bpf(0x20000000, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2504.392612] binder: 26043:26094 ioctl c0306201 20000440 returned -14 [ 2504.445503] binder: undelivered TRANSACTION_ERROR: 29201 08:54:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010015]}) 08:54:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfc00], [], @local}}, 0x1c) 08:54:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b00000000000000]}) 08:54:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2504.682888] kauditd_printk_skb: 136 callbacks suppressed [ 2504.682903] audit: type=1400 audit(32051.530:2321): avc: denied { associate } for pid=26266 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:54:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="00081b3112e167739c3ea4955599efa8e2464f8deb11eea0d5f0b015ee07ff542fa5b3884b364316e7a6869f665029a0d8e245525e1ce1ddb15033646f0cd282e441e61a1640") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200800, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2504.853600] audit: type=1400 audit(32051.700:2322): avc: denied { map } for pid=26413 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2504.961677] audit: type=1400 audit(32051.730:2323): avc: denied { map } for pid=26408 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001001b]}) [ 2505.002308] binder: 26429:26445 got transaction with invalid handle, 0 [ 2505.009100] binder: 26429:26445 transaction failed 29201/-22, size 24-8 line 3061 [ 2505.040039] audit: type=1400 audit(32051.730:2324): avc: denied { map } for pid=26408 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2505.069581] binder: 26429:26445 ioctl c0306201 20000440 returned -14 08:54:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001000000000000]}) [ 2505.088490] audit: type=1400 audit(32051.830:2325): avc: denied { map } for pid=26429 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2505.123420] binder: undelivered TRANSACTION_ERROR: 29201 08:54:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfe80], [], @local}}, 0x1c) [ 2505.201503] audit: type=1400 audit(32051.850:2326): avc: denied { set_context_mgr } for pid=26429 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:54:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2505.387807] audit: type=1400 audit(32051.850:2327): avc: denied { call } for pid=26429 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:54:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001001f]}) [ 2505.554768] audit: type=1400 audit(32052.070:2328): avc: denied { map } for pid=26612 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400101c000000000]}) [ 2505.655927] binder: 26919:26954 got transaction with invalid handle, 0 [ 2505.672163] audit: type=1400 audit(32052.090:2329): avc: denied { map } for pid=26612 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2505.681460] binder: 26919:26954 transaction failed 29201/-22, size 24-8 line 3061 08:54:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfec0], [], @local}}, 0x1c) [ 2505.711372] audit: type=1400 audit(32052.100:2330): avc: denied { map } for pid=26612 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2505.772113] binder: 26919:26954 ioctl c0306201 20000440 returned -14 [ 2505.799782] binder: undelivered TRANSACTION_ERROR: 29201 08:54:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="8fcc3324fbd7a065733b7e47fd31b8a4c29846539443fdf3635e31e684b9adac730aacd4da6ccda86a1d78", 0x2b, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="df5172421df6848e1aaaf8bfd72b28", 0xf, 0xfffffffffffffffc) keyctl$reject(0x13, r1, 0x8001, 0x10001, r2) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r4 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xfffffffffffffffc) keyctl$reject(0x13, r3, 0x7b15, 0x0, r4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/validatetrans\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000600)="681ef211a69e9622c7c441221b0ecc36e888b51e40589133c4d302e40a85bb107800a18ab1c921554155ef55f330f944d45c47947fd8c93b6ccae5bd75707fbfeb2196ef8f3e634062851c37633cec12e432a0e5cb7631525aed5a8a99634ade6c0de42eff314c2987ce099cb93df987aa36d3b6d92d8ad4a35fe6f2b84c0dc0b0483ea22dca3807d74094e38075136bfde373b2c993cbca5472b139524cc5d44bcffdf61c996061be2a1a602018da15743df838cc41b4ce42337695bc6f360ca9707b0be39d501f7905b24afe4cf1769653a9f554b6902e4ef77925f556f1b83021fdae4c0a95e4a756970591338c2c", 0xf0, r5}, 0x68) 08:54:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xff00], [], @local}}, 0x1c) 08:54:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410101c000000000]}) 08:54:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010055]}) 08:54:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)=""/227, 0xe3) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1020008}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 2506.346025] binder: 27380:27439 got transaction with invalid handle, 0 [ 2506.374787] binder: 27380:27439 transaction failed 29201/-22, size 24-8 line 3061 08:54:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8000008000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) socket$tipc(0x1e, 0x5, 0x0) [ 2506.425957] binder: 27380:27439 ioctl c0306201 20000440 returned -14 [ 2506.477317] binder: undelivered TRANSACTION_ERROR: 29201 08:54:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x1000000], [], @local}}, 0x1c) 08:54:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 08:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010058]}) 08:54:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x402) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000100)) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x4000000], [], @local}}, 0x1c) [ 2506.910881] binder: 27821:27911 got transaction with invalid handle, 0 [ 2506.949789] binder: 27821:27911 transaction failed 29201/-22, size 24-8 line 3061 08:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010112]}) 08:54:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550001c000000000]}) [ 2506.993988] binder: 27821:27911 ioctl c0306201 20000440 returned -14 08:54:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x14440, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x13a) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x1c0, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab2f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffa987}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde73}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x700000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x445}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$KDADDIO(r1, 0x4b34, 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2507.050492] binder: undelivered TRANSACTION_ERROR: 29201 08:54:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffefffffff7f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x5000000], [], @local}}, 0x1c) 08:54:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x580001c000000000]}) 08:54:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010113]}) 08:54:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x41) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100)=0x1, 0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2507.507229] binder: 28291:28329 got transaction to invalid handle [ 2507.554474] binder: 28291:28329 transaction failed 29201/-22, size 24-8 line 2855 [ 2507.602696] binder: 28291:28329 ioctl c0306201 20000440 returned -14 [ 2507.639616] binder: undelivered TRANSACTION_ERROR: 29201 08:54:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x46030000], [], @local}}, 0x1c) 08:54:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000600)={0xf, @raw_data="4f101ee829e672731cd2b60627c0d332b2aef5504b9a4689c3f0cab42c74fe30b0609cee4d5e1cc059475db7aecd25763a68b907f3b39fc19e9a9f3a7abae36ad7a1857f31524eb4108411583916cf148c080dbf3f1e2083c26c21d35c0b41c9fc29081dce9549591d9b228175028b8be4f69d612c45755a487494d7428e98e0580aed66743d9dd95de305aecd77713445e15175095947dca3dc63ea9ee52447c0ce10f7ca331d3bc37821962d54bfd0f40828c42813f2691057e8a1fbb6a820538e4d53d3eb42cd"}) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x8, 0x2) 08:54:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7401000000000000]}) 08:54:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010117]}) 08:54:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) accept4(r0, 0x0, &(0x7f0000000080), 0x800) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) sendto(r0, &(0x7f00000001c0)="01ff5087edba0825d34c29803759398b88624804e0a78a008abb32e88bd974452505786179856eb196a927a4d1e7ad89c7147df8df88ff499076422c76136cc825d6d7689f51227a37c92135c8a29cdb3ce01bf0ca4374772335bbdace7266b92f98d5ee719831335e4e3dbf8692c546cf238a9ee3cb747bafc146f7d3132efc808196ea", 0x84, 0x8040, &(0x7f0000000100)=@isdn={0x22, 0xffffffffc4176400, 0x81, 0x1, 0xffffffff}, 0x80) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2508.048837] binder: 28768:28803 got transaction with invalid handle, 0 [ 2508.088033] binder: 28768:28803 transaction failed 29201/-22, size 24-8 line 3061 08:54:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x47030000], [], @local}}, 0x1c) [ 2508.150014] binder: 28768:28803 ioctl c0306201 20000440 returned -14 08:54:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7501000000000000]}) [ 2508.208810] binder: undelivered TRANSACTION_ERROR: 29201 [ 2508.216521] binder: BINDER_SET_CONTEXT_MGR already set [ 2508.245610] binder: 28768:28803 ioctl 40046207 0 returned -16 08:54:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010140]}) 08:54:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getresuid(&(0x7f0000000380), &(0x7f0000000580)=0x0, &(0x7f0000000780)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000340)='./file0\x00', 0x86, 0x3, &(0x7f0000000700)=[{&(0x7f0000000600)="418dec6012b0bec89a58ee34dca4926ae4d3585341479f8f5bbb030a74be19a390361d9ab0b8ed5a4157975e914990b72aef24c388e2ab15e0441f21ea1aa3123af60dcb5fc6af85728657cf3eb3019b03079d640056fbe5714fbe86ac2ba40de91d2a634a5a3f9dbcbdcee0a3022ae1edad8797c8961e393da8a7d9c05135c8fe356730e410e4c17e78f6b18689e1ffc9a38ca0ab851ad9e8b80961251c932f5a6f479de8b5a33a714d320e07192e2825175e9a3c389d6fc4861f0895dce31fbd295f21a39024e8d8043cb57f16091302c711cf671166716349b4e25dc6", 0xde, 0x400}, {&(0x7f0000000400)="0ab94ac48ff1a93ebb9bfe2fd3df4164e80e4792943afd2bd30842bd1dc2a44360be78d0fe18db1044a8f5b9615f43601f6589a54c519dfddac89b812579b782084862afb7a9355db342cab1d87e1a8f8edfc189eaac465a15c883283b929c6eb3239f833d416edd0f330d52180d29c3d98e9054ed1898d09cbe857d9fef8c3af183d37c04fb067319a1c15fb9fc2ab24a8a22320c7d7c600ee79b7bff08fcdbff8ab2b200219cf5122ce8d34c552bd1b2d1754329cf", 0xb6, 0xfffffffffffffffa}, {&(0x7f0000000500)="7c7a2202ade01d548f2cea18fc6afd4508083187c5211d51d4854fe82afa7901adada365f5dc9f949e72a74a0d2ec84eb8328201f059269fe8af345a0f1181928b2fb53d628d8b17af5996b004ebe9611bc22b65888e6d6b10e455d6fcdff3ea", 0x60, 0x101}], 0x4000, &(0x7f00000007c0)={[{@uid={'uid', 0x3d, r1}}], [{@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, '*+\'vmnet0[&'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x1a4, 0x35, &(0x7f0000000100)="5192397f6f0371b23ae6745bcf43a8dc1e3a171b60e0c417d5fa4483cf577e96ec79a65416b9f21771ee160b03383dd8509fbe2074", 0xffffffffffff7fff, 0x0, 0x8001, 0x81, 0x3ff, 0x0, 0x2, 'syz1\x00'}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000840)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 08:54:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfc000000], [], @local}}, 0x1c) 08:54:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x4828, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = getgid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) mount$9p_xen(&(0x7f0000000080)='bpf\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='9p\x00', 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=xen,fscache,version=9p2000.u,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',privport5access=', @ANYRESDEC=r2, @ANYBLOB=',nodevmap,aname=bpf\x00,uid<', @ANYRESDEC=r3, @ANYBLOB=',measure,appraise_type=imasig,rootcontext=system_u,euid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) 08:54:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x588c, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010141]}) [ 2508.712672] binder: 29280:29281 got transaction with invalid handle, 0 08:54:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7601000000000000]}) [ 2508.758024] binder: 29280:29281 transaction failed 29201/-22, size 24-8 line 3061 [ 2508.797362] binder: 29280:29281 ioctl c0306201 20000440 returned -14 [ 2508.849007] binder: undelivered TRANSACTION_ERROR: 29201 08:54:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfe800000], [], @local}}, 0x1c) 08:54:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x40, 0x5, &(0x7f0000000500)=[{&(0x7f00000001c0)="05c2cb2a95b6c7aa6a0a5f5bf0155edee460a0d068193da5dbff89816f09daae3dc80165b628b1692ae1faf88577b4d23d92b26e7e12afbbf9a3da809e067cc0d6034ba8a5cf409e66dc694641eca1891df68915d2b66401e8db96c46d963a9c42625e858f0d", 0x66, 0xd0}, {&(0x7f0000000240)="ade5173d13e3b4ab23f53840f945471e64efaafa1dc69accdf07c1417e6dfed910238934d25a1b3207f8ae6aab24e0352eaa592130d9892e1b8f402977a48c1b476339e12eeca37f83e22f44ed", 0x4d, 0x5}, {&(0x7f0000000340)="a9aca354eff502c3e33e2f7214679df5e479f3f09abd", 0x16, 0x3}, {&(0x7f0000001a00)="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", 0x1000, 0x1}, {&(0x7f0000000400)="bb8456f29e1b5f18b08aa0a4f5553473c12fcbd48aae34e93ed4319ec9bbe34a8fb278a2f214b0e57827ccccea3ea30984eadd944d2db3f02004520ba5eb0e75683d4d6b73f078c57b1de66ceb029e404a9623c26911fa0599360754ceb0261372123cf087809b338d8f864d6c7a9248bc1e820b1126a847d8577335596fd3e95fed536ed7eac4e52be37af826c66a6f839a74dbe9d80a9c4508be8f593e74fc3080fb59e84a4f48102eee5340b99ceb3bf473dd3a9827711da7ab", 0xbb, 0x600000000000}], 0x2050002, &(0x7f0000000600)={[{@barrier_val={'barrier', 0x3d, 0x3}}], [{@smackfsdef={'smackfsdef', 0x3d, 'bpf\x00'}}, {@subj_type={'subj_type', 0x3d, '($*{+\x06\x81-'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010200]}) 08:54:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7901000000000000]}) 08:54:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/../file0\x00', 0x0, 0x80, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2509.334015] binder: 29601:29643 got transaction with invalid handle, 0 08:54:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfec00000], [], @local}}, 0x1c) [ 2509.385782] binder: 29601:29643 transaction failed 29201/-22, size 24-8 line 3061 [ 2509.414850] binder: 29601:29643 ioctl c0306201 20000440 returned -14 08:54:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001020b]}) [ 2509.463624] binder: undelivered TRANSACTION_ERROR: 29201 08:54:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a01000000000000]}) 08:54:16 executing program 0: lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000340)='mime_typewlan0uservboxnet1\'wlan0cgroup[mime_typevboxnet1\x00', 0x39, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x440, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000380)={0x8, 0x2b, 0x4, 0x100000000, 0x4, "47802b90c7cfd20aae7dfbda016feaecbb63bc", 0x1f, 0x3ff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r0, r2, 0x5, 0x1}, 0x10) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x13, r2, 0x0) socketpair(0x2, 0x4, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @default, @bpq0='bpq0\x00', 0x465b7e, 'syz1\x00', @default, 0x4, 0x2, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 08:54:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file1\x00', 0x24a841, 0x80) faccessat(r1, &(0x7f0000000580)='./file0/file1\x00', 0xa0, 0x100) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', r1}, 0x10) execveat(r1, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000600)=[&(0x7f0000000200)='bpf\x00', &(0x7f0000000240)='bpf\x00', &(0x7f0000000280)='bpf\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='bpf\x00', &(0x7f0000000400)='bpf\x00', &(0x7f0000000440)='$z@\x00', &(0x7f0000000480)='bpf\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='bpf\x00'], 0x1800) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000140)={0x1}) mount$bpf(0x20000000, &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2509.774760] kauditd_printk_skb: 143 callbacks suppressed [ 2509.774775] audit: type=1400 audit(32056.620:2474): avc: denied { map } for pid=30074 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfeffffff], [], @local}}, 0x1c) [ 2509.942123] audit: type=1400 audit(32056.650:2475): avc: denied { map } for pid=30074 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0011022]}) 08:54:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b01000000000000]}) [ 2510.038180] binder: 30131:30133 got transaction with invalid handle, 0 [ 2510.047468] audit: type=1400 audit(32056.670:2476): avc: denied { map } for pid=30074 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2510.097583] binder: 30131:30133 transaction failed 29201/-22, size 24-8 line 3061 [ 2510.133917] binder: 30131:30133 ioctl c0306201 20000440 returned -14 [ 2510.167649] binder: undelivered TRANSACTION_ERROR: 29201 [ 2510.216339] audit: type=1400 audit(32056.680:2477): avc: denied { map } for pid=30074 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000500)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/file0\x00', &(0x7f00000019c0)='bpf\x00', 0xfffffffffffffffd, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0xfffffffffffffdfc) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000010, 0x0) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000080)=0x6e) syz_init_net_socket$ax25(0x3, 0x3, 0xfe) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x1}) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000380)) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x2201, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000400)={r3, @in={{0x2, 0x4e24, @remote}}}, 0x84) 08:54:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xa2, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x24) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xff000000], [], @local}}, 0x1c) [ 2510.341421] audit: type=1400 audit(32056.810:2478): avc: denied { map } for pid=30132 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f04000000000000]}) 08:54:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001102a]}) [ 2510.462845] audit: type=1400 audit(32056.820:2479): avc: denied { associate } for pid=30121 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2510.613078] audit: type=1400 audit(32056.820:2480): avc: denied { associate } for pid=30111 comm="syz-executor.0" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2510.700932] binder: 30557:30628 got transaction with invalid handle, 0 [ 2510.735056] binder: 30557:30628 transaction failed 29201/-22, size 24-8 line 3061 [ 2510.754488] audit: type=1400 audit(32056.830:2481): avc: denied { map } for pid=30132 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfffffffe], [], @local}}, 0x1c) [ 2510.797832] binder: 30557:30628 ioctl c0306201 20000440 returned -14 08:54:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x8080000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x6c8003, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') mount$9p_virtio(&(0x7f0000000340)='&\x9bGPL+,ppp0+%\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x4, &(0x7f0000000440)={'trans=virtio,', {[{@version_L='version=9p2000.L'}, {@version_L='version=9p2000.L'}, {@cache_mmap='cache=mmap'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure='measure'}, {@dont_appraise='dont_appraise'}]}}) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) stat(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2510.843159] binder: undelivered TRANSACTION_ERROR: 29201 08:54:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001102c]}) [ 2510.888364] audit: type=1400 audit(32056.870:2482): avc: denied { map } for pid=30131 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 08:54:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000c000000000]}) [ 2510.959257] audit: type=1400 audit(32056.880:2483): avc: denied { set_context_mgr } for pid=30131 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:54:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2511.201795] 9pnet_virtio: no channels available for device &›GPL+,ppp0+% 08:54:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x100000000000000], [], @local}}, 0x1c) 08:54:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1000000]}) 08:54:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004000000000000]}) [ 2511.351314] binder: 31100:31146 got transaction with invalid handle, 0 [ 2511.379356] binder: 31100:31146 transaction failed 29201/-22, size 24-8 line 3061 08:54:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000100)="8e6b2077cc8cbb931d70112afe90126e54ae426ddedcb28d9e681f256ce72c4549a1323d3f3df4fcaf2721d1d5c295cd4cd227c2923348762082392f1037a05304f148fecbfc34e367c5a2a02aeb5a30d705") mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2511.409735] binder: 31100:31146 ioctl c0306201 20000440 returned -14 [ 2511.424075] binder: undelivered TRANSACTION_ERROR: 29201 08:54:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x8000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x9b, "29b6e817e5cc0ee21097efef1d756bc0fd42ff4d3bc99d79016b9c6d412af9dbad10deea9d3a10254c6e826c2532a05ed564217ee792f62abeb6b0c37796c6a81c453ad19141803c29c2d122d714ff977e97014fecbe3d64ff2bb99306f7314a0edcfc38b191493b83e5c76168b35fcdf157e13d94746cc1fc9c280e2a36db0c875a2fbcf230007257d2863fc8b85df23f3e6faa00b7003cdae340"}, &(0x7f0000000340)=0xbf) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8004c, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) unlinkat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x200) 08:54:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x400000000000000], [], @local}}, 0x1c) 08:54:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000c000000000]}) 08:54:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2000000]}) 08:54:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x80c00, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) recvfrom(r1, &(0x7f0000001a00)=""/4096, 0x1000, 0x2, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='bpf\x00', &(0x7f00000001c0)='procselinux\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='}mime_typeem0selinux}\x00', &(0x7f0000000280)='{ppp1\x00', &(0x7f0000000340)='vmnet0-cpuset\x00']) r2 = getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x7, &(0x7f0000000440)=0x3ff) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x16240, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000500)={0x0, @bt={0x8, 0xbc3, 0x0, 0x3, 0x6895446, 0x5, 0x0, 0x875e, 0xf3, 0x401, 0xffffffff7fffffff, 0x4, 0x4d2a4cac, 0x4, 0x10, 0x8}}) [ 2511.946865] binder: 31519:31567 got transaction with invalid handle, 0 [ 2511.970128] binder: 31519:31567 transaction failed 29201/-22, size 24-8 line 3061 [ 2511.997154] binder: 31519:31567 ioctl c0306201 20000440 returned -14 08:54:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x9) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2512.045652] binder: undelivered TRANSACTION_ERROR: 29201 08:54:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x500000000000000], [], @local}}, 0x1c) 08:54:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820000c000000000]}) 08:54:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd000000]}) 08:54:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000500)="6249f25426ed387e8a167dd8773b55b675c37300893454bff594f3b8d740a25307158a1e6eda12ac2f86b0080100826446dcfe3367a4a58c0af39bd00a914d9dd68158086c2e778d339f9f538c927d3f7e46745c658d86e877eb246971a85d175c8d1983028c335447b3cb34913a27b6b0a321ccda4a848b2b9eebe0340c076f467712f748817a565b475c8e4969d1475cf0694c73") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0004000000003b5a60cc77de90da15ca75059c0da5479796bcaa7bf2996cf4762e95e29197d88cb8bf985fd6962f1c75d7d265b0211f9fcd135cab48be515ad0a0432cb6a8c3d16c2dbb363dde1d0822c9040fc4139224ce423ac50b4490befdeb751735fae3e530d9291a0d73d7abff34d927c5b2534826b6aa9b60657765608502e326bbcd43e0fd4fb7206c62f2dbfcf746fe5707117f0a6d5517494e2e902a3d80e3c20979852ab37420d9b603989362e742d188ab498d36d80fd5ccd1882e4d1207799615f546824221e5d14a3518a32d6785c5e60241aacf861ece4d28da6fb0f025b5bc0ad10073cd8e8480"]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x4, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='bpf\x00', 0xc000, &(0x7f0000000700)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x4}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, '\'vboxnet0trusted#vmnet0(&keyring--'}}, {@uid_eq={'uid', 0x3d, r2}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}]}) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830000c000000000]}) [ 2512.583623] binder: 32009:32073 got transaction with invalid handle, 0 [ 2512.607540] binder: 32009:32073 transaction failed 29201/-22, size 24-8 line 3061 08:54:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce000000]}) [ 2512.648042] binder: 32009:32073 ioctl c0306201 20000440 returned -14 08:54:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x4603000000000000], [], @local}}, 0x1c) [ 2512.705614] binder: undelivered TRANSACTION_ERROR: 29201 08:54:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80200, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840000c000000000]}) 08:54:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0040000]}) 08:54:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x4703000000000000], [], @local}}, 0x1c) [ 2513.195449] binder: 32447:32451 got transaction with invalid handle, 0 [ 2513.237328] binder: 32447:32451 transaction failed 29201/-22, size 24-8 line 3061 [ 2513.283022] binder: 32447:32451 ioctl c0306201 20000440 returned -14 [ 2513.310158] binder: undelivered TRANSACTION_ERROR: 29201 08:54:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x402, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000240)=""/27, 0x1b) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x8000000000000000, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8601000000000000]}) 08:54:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9010000]}) 08:54:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfc00000000000000], [], @local}}, 0x1c) 08:54:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'L+', 0xa1}, 0x28, 0x1) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1ff, 0x1) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0c00810054c900fc210b88c5cfc87531fe3afdcd02003b5e8b1a85ea5d6837d3f80c8d50d1b76e94537cb2efc80f79102efa47d2a09b9640d7fc606cab29841bf37da24df716607667f9db5440bc51393ed111cd6eca1a079b39224fab69c4c593b4d633b339c8acd5c60e89b93aee3b4c5330"], &(0x7f0000000200), 0x400) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2513.805668] binder: 411:441 got transaction with invalid handle, 0 [ 2513.820919] binder: 411:441 transaction failed 29201/-22, size 24-8 line 3061 [ 2513.837552] binder: 411:441 ioctl c0306201 20000440 returned -14 [ 2513.847910] binder: undelivered TRANSACTION_ERROR: 29201 08:54:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb010000]}) 08:54:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfe80000000000000], [], @local}}, 0x1c) 08:54:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000940)='./file0/file0\x00', &(0x7f00000019c0)='bpf\x00', 0x20000, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) statfs(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000a80)=""/199) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x8, &(0x7f0000000500)=[{&(0x7f0000001a00)="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", 0x1000, 0x200000000}, {&(0x7f00000001c0)="2a18f502b9d18d4da044e3a05527cb91796478d02b9a1c0e5789a62002f0ad7da2634e3c16fbaba9519e99f7834ac404aab8a86c72b472dd9ff1921731f0c65119bb25a6dd50dd92073f8d94262c07cbd660a986cc5afb90cbb1550ca3912d42840de4e4ed69a57f144ebebf1575d85137ea5a1515963727d66fc2b7c31c5c71b98ed1ac9ad51ab1576a427b96b6b5e2bda77eaa037362cf383f4138874532217089f3b60630133ae15978910fdecc70dcfeefce01", 0xb5, 0x5}, {&(0x7f0000002a00)="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", 0x1000, 0x6}, {&(0x7f0000000140)="5efb3165ecd3bb377a53110a24", 0xd, 0xadd}, {&(0x7f0000003a00)="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", 0x1000, 0x3}, {&(0x7f0000000400)="7f5b0e792152e606c11c5b0fafaab0b6f1dad398cba3dfbc6cd8f5c005ef5113a520a45d5f10795f4b5913e751c1c62a9a61e98221e7cea0352893d48256fd7814e9d003cc9ac3006b5b2421cf9848ca8587e1111e4aee6574f99afa963b7cf40e262e13ef5c4bb92d149cf0f8d34295bc90561d78a3933fd09c71809048d47d7fca201942f80977b36089b44356009c9dc05ef8e362054bb96f82d04a74", 0x9e, 0x6}, {&(0x7f0000000600)="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", 0xfc, 0xa6e}, {&(0x7f0000000340)="3e17cc6f52e29ba5736ccfa01f5af76e81bdd1a814dc4c868a4240c4baed8c3c92487e39135911aa1ae86ba5ba8d7d537d0725dfa5b0da141427f760c30971cdaef091d82b25cd6a", 0x48, 0x6}], 0x20, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_win95='shortname=win95'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}], [{@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}]}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x11}, 0x14}}, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = syz_open_dev$usb(&(0x7f00000008c0)='/dev/bus/usb/00#/00#\x00', 0xff, 0x2000) openat(r2, &(0x7f0000000900)='./file0\x00', 0x101, 0x40) mount$bpf(0x20000000, &(0x7f0000000980)='./file0\x00', 0x0, 0x1e708c1c1021494b, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000840)=0xc) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000780)='security.capability\x00', &(0x7f0000000880)=@v3={0x3000000, [{0x1bd6, 0x1000}, {0x4000000000000000, 0x7}], r3}, 0x18, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8701000000000000]}) 08:54:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde010000]}) [ 2514.373680] binder: 754:840 got transaction with invalid handle, 0 [ 2514.391044] binder: 754:840 transaction failed 29201/-22, size 24-8 line 3061 [ 2514.398459] binder: 754:840 ioctl c0306201 20000440 returned -14 08:54:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) accept4$netrom(r1, &(0x7f0000000100)={{}, [@bcast, @rose, @bcast, @bcast, @bcast, @remote, @bcast, @null]}, &(0x7f0000000200)=0x48, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfec0000000000000], [], @local}}, 0x1c) 08:54:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b00000000000000]}) [ 2514.512418] binder: undelivered TRANSACTION_ERROR: 29201 08:54:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000002c0)) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400040, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2514.859276] kauditd_printk_skb: 128 callbacks suppressed [ 2514.859289] audit: type=1400 audit(32061.700:2612): avc: denied { map } for pid=1251 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x4000, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x100000001, 0x8, &(0x7f0000000500)=[{&(0x7f00000001c0)="6e317e089ceb172378d5b9e7b2ff1f106f34084c6a4f1eb64d8979245858", 0x1e, 0x9}, {&(0x7f0000001a00)="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", 0x1000, 0x20}, {&(0x7f0000000600)="08227c78e7d6308a1ea1a3e9733d25f2937b70c940fc30a65bb084e2c15858b5b5b17e3f93deb780812281a292352625bfe999d99ec06b51c02cdb73cf3036e88fc954aeae956c0079b94dcaddf97727528a34c45255ee040d54c580d14e2619ad41f9c89e07cc9b39e4c20aa0050ae43347c51a3d30db061b2667d0d11c8647faf3d3aa7e36310bcedbdeff12034566601387f849e089de4b8a8d3fcb66038a8de5a60e1f3d5ae1551bd7a999100734fe18b7785c8edc351992c1ec32ee46d9c0e20a8c13973c9e", 0xc8, 0x2}, {&(0x7f0000000200)="0f72c808dbc95c2c932db9acbbc7ebae75f7eed94eb3ac1dd5cce7e0c7573bef1536f056eeae16a5c9613db94fa5964a70ebd6de98a878b7d09bfa300fa126d2f2bfcf343f06019542f393ea10cb4f8bd5cba4b1c2b9043f41833a775a955202b1fe34ae25686028291323cc83df57f0", 0x70, 0x5}, {&(0x7f0000000280)="ee7019b935a2457602b885f8e29f00195c5f01478d7ff4b78fc7de834b", 0x1d, 0x7fff}, {&(0x7f0000000400)="eb3c967c37af2ef7e8fdff2d391961cdc6a2ca50f00e3dd0b90a38d819e1871c9aa00753cb513ce075ad0b62ff35ad00395044239c07f68300a680a88e94cc970317372e136f6c0fc42ab5e35525734b816586b59b1b2bb7d9350a26c6e2e87e2e3c96829b0dd6f08a3858908accc0bcaae0f1eb0da2baa6eda6827b4bf703438db202f3fa4e61af8b792cf353d9a143022a6ae981764725c451615ea2100b3e6cf7d348b166b51090fcb2f02a", 0xad, 0x1f}, {&(0x7f0000000700)="6f17f020e31c1d1859aadde89ea1f5d47f3e6d801d02e5f62f26b932368f1f811088cfa78f1e6b2594e8d6e489c679ab8665171e59286c5d312afa313f0ada0171c97631a37a00a43101bd19aa23434e4d8cfc3221192ed552bb0543f24c2db6eec1d69f7d8050babcf303edc7893a89e8dc91255cf805f555564cd089971c2000ea76e1ae841c4c008af9b17796add1cb49d9efaa8efc54159ee52930e4700d370a1690c5efc8172f14518c49b9fd613568e7b53c264d2eb3ba9bb58391766eb85527bb43266b69ccd3bff04751fe959b04867685cd05d937", 0xd9, 0x7fff}, {&(0x7f0000000340)="ede55a820f2b833b54095f690138eea3b3a0867bf163fd3e2cb2d1932abbf2c8a8cd9a933b3f3740f7cfd5be71e9b538741db311d5c9d420958c5e968fcf2333ea8b56eaeac5bd8661a8486c80766fbe9f7571f05c2574397e2155759d57442fdeceeef4229d6dd250cd24ffda0f4177cb0c73960eebb5fc5049ef76c7f51007", 0x80, 0x7}], 0x44000, &(0x7f0000000880)={[{@nointegrity='nointegrity'}, {@quota='quota'}, {@nodiscard='nodiscard'}, {@nodiscard='nodiscard'}, {@quota='quota'}, {@grpquota='grpquota'}, {@grpquota='grpquota'}, {@umask={'umask', 0x3d, 0xfffffffffffffffd}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}, {@fowner_gt={'fowner>', r1}}]}) umount2(0x0, 0xe) syz_mount_image$ceph(0x0, &(0x7f0000000080)='./file0\x00', 0x10004, 0x8da999dd117ab9c8, 0x0, 0x8010, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x2) 08:54:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0060000]}) [ 2514.933658] audit: type=1400 audit(32061.710:2613): avc: denied { map } for pid=1251 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900d000000000000]}) [ 2515.032627] audit: type=1400 audit(32061.720:2614): avc: denied { map } for pid=1221 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xfeffffff00000000], [], @local}}, 0x1c) [ 2515.068502] audit: type=1400 audit(32061.860:2615): avc: denied { map } for pid=1297 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2515.069240] binder: 1297:1395 got transaction with invalid handle, 0 [ 2515.132384] audit: type=1400 audit(32061.910:2616): avc: denied { set_context_mgr } for pid=1297 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2515.140106] binder: 1297:1395 transaction failed 29201/-22, size 24-8 line 3061 [ 2515.218159] binder: 1297:1395 ioctl c0306201 20000440 returned -14 [ 2515.262922] audit: type=1400 audit(32061.910:2617): avc: denied { call } for pid=1297 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2515.292436] binder: undelivered TRANSACTION_ERROR: 29201 08:54:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file1\x00', 0xfffffffffffffffb) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x24040, 0x0) execveat(r1, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000340)=[&(0x7f0000000140)='\t+\x00', &(0x7f0000000200)='bpf\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00'], &(0x7f0000000600)=[&(0x7f0000000380)='bpf\x00', &(0x7f0000000400)='%\x00', &(0x7f0000000440)='bpf\x00', &(0x7f0000000480)='bpf\x00', &(0x7f0000000500)='bpf\x00', &(0x7f0000000540)='bpf\x00', &(0x7f0000000580)='bpf\x00'], 0x1000) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2515.325866] audit: type=1400 audit(32062.040:2618): avc: denied { map } for pid=1484 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000]}) [ 2515.406540] audit: type=1400 audit(32062.040:2619): avc: denied { map } for pid=1484 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2515.574363] audit: type=1400 audit(32062.060:2620): avc: denied { map } for pid=1484 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9104000000000000]}) 08:54:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0xff00000000000000], [], @local}}, 0x1c) [ 2515.710243] audit: type=1400 audit(32062.080:2621): avc: denied { map } for pid=1484 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x200, 0xc8, 0x5) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x35, 0x8081) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="1001d312056763", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x28) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff020000]}) [ 2515.883158] binder: 1981:2014 got transaction with invalid handle, 0 [ 2515.916924] binder: 1981:2014 transaction failed 29201/-22, size 24-8 line 3061 [ 2515.968988] binder: 1981:2014 ioctl c0306201 20000440 returned -14 [ 2516.030185] binder: undelivered TRANSACTION_ERROR: 29201 08:54:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4], [], @local}}, 0x1c) 08:54:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9801000000000000]}) 08:54:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0x3, 0x2, &(0x7f0000000380)=[{&(0x7f0000000400)="adfbe82d4eefd2597f28a4b99a73ed7bca59e4938dabdd99db8436c38ba4e2dfc474d4a1802ba89f8def46ac035e6c2629197582758c5629b3bbe9212f7fc5c3784aef18b39cd7179eeaa3ad309e823fc4c4c0df1b4324f27a52b957db1173b85d50ea3260ce5394090073d7bb88e3626871ebf7a9c67cfbbf58a7", 0x7b, 0x80000000}, {&(0x7f0000001a00)="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", 0x1000}], 0x80000, &(0x7f0000000500)={[{@nossd_spread='nossd_spread'}, {@noautodefrag='noautodefrag'}, {@clear_cache='clear_cache'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0xfffffffffffffff7}}], [{@subj_type={'subj_type'}}]}) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="5e00000075020053000000ba7c0a56a1049ca444ad6fdb5c7f15a4cf2b5e5feee99fdb682cb5a02e4cc7ab4757d75164dd32bca59b59fd3be8d7fde4e45260086be839d2563d54e9bf9fd198fad2ec3269fa560b0208e6fde0e76ee539bd"], 0x5e) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0b0000]}) 08:54:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x5], [], @local}}, 0x1c) [ 2516.482509] binder: 2514:2543 got transaction with invalid handle, 0 [ 2516.521011] binder: 2514:2543 transaction failed 29201/-22, size 24-8 line 3061 [ 2516.550198] binder: 2514:2543 ioctl c0306201 20000440 returned -14 [ 2516.585996] binder: undelivered TRANSACTION_ERROR: 29201 08:54:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9901000000000000]}) 08:54:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0x2, 0x0, 0x0, @loopback}, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000100)={0x7, 0x608}) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) 08:54:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 08:54:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000100)='bpf\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=virtio,fscache,me,hash,\x00\x00\x00\x00>\x00\x00\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="2c7375626a5f726f6c653d62706600ac7365636c6162656c2c646f6e745f61707072616973652c00b30744cdc8d31e8260dac085960fb8c51ce8e37fa517c3b017c214d018934b5c2a971de3392570e39cc6"]) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1000, 0x0) umount2(0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x401, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000540)={r3, 0x4c29, 0x1, 0x7ff, 0x9, 0x111, 0xffff}) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc], [], @local}}, 0x1c) [ 2517.004165] binder: 2906:2907 got transaction with invalid handle, 0 08:54:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e00000000000000]}) [ 2517.049657] binder: 2906:2907 transaction failed 29201/-22, size 24-8 line 3061 [ 2517.071422] binder: 2906:2907 ioctl c0306201 20000440 returned -14 [ 2517.094123] binder: undelivered TRANSACTION_ERROR: 29201 08:54:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) 08:54:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x102, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x1f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x9a7, 0x2, [0x3, 0xb028]}, 0xc) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x80000, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0xd6}}, {@mode={'mode', 0x3d, 0x8}}], [{@context={'context', 0x3d, 'system_u'}}]}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000340)={0x8, 0x0, 0x301f, 0xffffffffffffd191, 0x2, {0x200, 0xffffffff}, 0x1}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) socket$xdp(0x2c, 0x3, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x346], [], @local}}, 0x1c) 08:54:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f00004000000000]}) 08:54:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000000]}) [ 2517.647186] binder: 3371:3376 got transaction with invalid handle, 0 08:54:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x7f, @empty, 0x4e23, 0x0, 'lblcr\x00', 0xa, 0x80, 0x9}, {@empty, 0x4e23, 0x0, 0x0, 0x4, 0x3}}, 0x44) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x3008000, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x2201, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000001c0)={0x9, "1478c30cfaa93bfe0cc7d90488757c6aae22ff5e8b4396c21291471d00abda91", 0x1, 0x1}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2517.716868] binder: 3371:3376 transaction failed 29201/-22, size 24-8 line 3061 [ 2517.747358] binder: 3371:3376 ioctl c0306201 20000440 returned -14 [ 2517.807796] binder: undelivered TRANSACTION_ERROR: 29201 08:54:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = semget$private(0x0, 0x0, 0x730) r2 = geteuid() r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000440)={{0x6, r2, r3, r4, r5}, 0xff, 0xffffffff80000000, 0x2}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000000000]}) 08:54:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x347], [], @local}}, 0x1c) 08:54:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001000000000000]}) 08:54:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2518.078834] IPVS: set_ctl: invalid protocol: 127 0.0.0.0:20003 08:54:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x60000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @rand_addr=0xc0}}, [0x3f, 0x9, 0x3, 0x53, 0xffff, 0x2, 0x101, 0x4, 0x7, 0x7, 0x2, 0x74, 0xfc, 0x9, 0x5925]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={r2, 0x5, 0x789}, 0x8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x7) [ 2518.386699] binder: 3774:3854 got transaction with invalid handle, 0 [ 2518.419934] binder: 3774:3854 transaction failed 29201/-22, size 24-8 line 3061 08:54:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c000000000]}) [ 2518.468790] binder: 3774:3854 ioctl c0306201 20000440 returned -14 08:54:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8, &(0x7f0000000840)=[{&(0x7f00000001c0)="5fee1df943f0bd9ab050aaeecaeeafe7fd0b76237eb270dee6f00644d3fe78e2ccf6080cec47d1fb5e74d58029e918edb10840e9a621b6c827761c7df626d5624992bcac70b6a9cd1ec92d57373f3c3005e208970b93b2a5fe5e38d470f5a933d0d4e793e153013894a260af998fb5bb73608dfd854d5f5437bc1418c0fc017fde6d99ed8736bc7a8e61ce046da02079a7570dc2efb5f110253333400ca0e475b6e488335855343f8f7b68082d3baef029da9c4ea594758e4b9d5c4f330d5f3500559659b54584565f3f25b8158cd89d9e291f052391d0df64b89429de7d136c3086de9d2427b45206a3e9a7373c262c14e1230c61", 0xf5, 0xffffffffd0b9cb89}, {&(0x7f0000000600)="a9fd5fa8b4a766b40390f1f244e72e064e31925320c43f351d17364ce60f024ce71f739454a6b02ef060f72899ff40cc726af5b66a651a0ef9ae4e31229b06906212c46302a00f2f4560e18c463acaee7a99509d7b42630c6308665735d3eb5d1ccb908e2aa42e5bcdc7789259c2569f1e9be3bc0335651a17db0674ecb6ed9cb5418181de03009f5889a8765160211790813e8c48f39feae7a72a180c7502023b6d3ef22bb7e68042e761439d6a6fd544af9ab61e5eb0d923f873c758caf5566db94cd3a537751afff34fca78e8f21ee2066d21f5b2ce1e8ff8373e3996bcf4e7e0963d672dd42e8c28c7dd17cd7027f292cf78dd", 0xf5, 0x19}, {&(0x7f0000000140)="e0643fe61b441ec86132f3c805e888b4", 0x10, 0x3}, {&(0x7f0000000700)="c92029c1fd392cf050ae080bd7a60fbdcee73f93a95acd0ef8a14969e8cb4d2626a39aa612304cdba51bda0a69ad32ea6a047ca37017a285cb111845433fbb500ac4bfab0d4c4ec83b9ab90b74dd415b16f2b4b752d354071dd1f6d3404943fe088a1f62129b770b3c8f4ca82b882a8eff93d9f09704f08dda68f6dc9ee8a238a62a77bbd57fcf4cb3a9b4d43df2f436151269173ede69553c7be50bd278d2a5d1b545b9165756ecd03a44bdd790eeb757f35339d392027c143d56e46b3e9a33fa6f322e17b44cccf8c660b7d08da4de704030ec9466d85fb33e1402a9cf4b2f78530762cc3468c2", 0xe8, 0x2}, {&(0x7f0000000340)="ad1dabc8add437699a9939bb008d8bb0baac13ff8e43fc1347bdb5dd9ebd2e0e933e295f4f", 0x25, 0x100}, {&(0x7f0000000380)="fa38df9c32a0d3bd88d7e07a292728070c", 0x11, 0x1}, {&(0x7f0000000400)="7208b9fdfe16ca63a30162cfa23f3a5f4597c1bb15a4ecf462b6bec74f9c009035f642e9ea9dc7fd069a4b10cbed9eb9630969b81646d59ee9af377b80593b34774b0901b69de1f28fa90e8d883fc9278c946acb09a001ea4347d670d79d62c50a16a2244e25da6e369a2275", 0x6c, 0x5}, {&(0x7f0000000500)="98b19b60a376d42d830d32a9b118427059e0a09494231d710a2f40477eb96ab0f29765ec1c9e339ac7bcd78e05aced0f57e1f55dd6977d5a27d716ad724d61b57981409cfb0316f996eec310d1d23262c7044adc08835ef6cec1219b8f3390f0a7744c6131e82fc612f2dd0e75fc39db98e30cde24c0625cb95886b84c5cc283d6b8bd4e6266b3cbbfc89b9b9fa451a21cb9f77fea0d4fbef9", 0x99, 0x5}], 0x100000, &(0x7f0000000480)='keyring\x00') mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2518.542419] binder: undelivered TRANSACTION_ERROR: 29201 08:54:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x500], [], @local}}, 0x1c) 08:54:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00d000000000000]}) 08:54:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0/file0\x00', 0x1000, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="f2e83a9322e6c771be189bdd9cdc2e3d18dc72802860d795b1ce8986e70d0f50bdda109eb647135c7cd15a10be1cfaf1950bbf9218e18759ea9059a8ffb6ec852430b356e09fe29fdfa55de0be5eec70178e", 0x52, 0x5}], 0x1100400, &(0x7f0000000400)={[{@nodots='nodots'}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@fat=@debug='debug'}, {@dots='dots'}, {@dots='dots'}, {@fat=@showexec='showexec'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@debug='debug'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, 'bpf\x00'}}]}) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 08:54:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x10000002001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4603], [], @local}}, 0x1c) [ 2519.051915] binder: 4230:4232 got transaction with invalid handle, 0 08:54:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000004000000000]}) [ 2519.168663] binder: 4230:4232 transaction failed 29201/-22, size 24-8 line 3061 [ 2519.194054] binder: 4230:4232 ioctl c0306201 20000440 returned -14 [ 2519.219975] binder: undelivered TRANSACTION_ERROR: 29201 08:54:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) r1 = semget(0x2, 0x0, 0x220) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000600)=""/235) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201c000000000]}) 08:54:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4703], [], @local}}, 0x1c) 08:54:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2000fff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000500)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x1) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x689, 0x2, &(0x7f0000000140)=[{&(0x7f0000001a00)="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", 0x1000}, {&(0x7f00000001c0)="bacadec419d28f3c3ba69cc9f6650609e93559d2d71464136dfdee92bb3a92f79693e242d0f7b7e823fc3459ae659e43d051529f912de8f97785e7235d209755927a4c5e330e1578c7b0c9a4175474602787ddff782a25bc1d7a2fbcd62d595736b8ea5e302b27e9", 0x68, 0x3}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="6261727269f0722c64746578743d726f6f742c6347af5a8164522bbc6f4e746578743d756e636f6e66696e65645f752c6f626a5f7479700000000000"]) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0xbc, 0x100) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)={{0x77359400}, {0x77359400}}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x29fd355c, @local, 0x10001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x18}}], 0x48) [ 2519.567495] binder: 4649:4652 got transaction with invalid handle, 0 [ 2519.599251] binder: 4649:4652 transaction failed 29201/-22, size 24-8 line 3061 [ 2519.610123] binder: 4649:4652 ioctl c0306201 20000440 returned -14 08:54:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb700004000000000]}) [ 2519.619367] binder: undelivered TRANSACTION_ERROR: 29201 08:54:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x0, "bdaebee3730135d15b02699070"}, 0xf, 0x1) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x101000, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000240), &(0x7f0000000280)=0x4) 08:54:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}) [ 2519.940787] hfsplus: unable to parse mount options 08:54:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x80fe], [], @local}}, 0x1c) 08:54:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100000000000000]}) [ 2519.996007] kauditd_printk_skb: 118 callbacks suppressed [ 2519.996021] audit: type=1400 audit(32066.840:2740): avc: denied { map } for pid=4972 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2df3f53c25d8371f, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r1, 0x1, 0x3}, 0x14) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mknod(&(0x7f0000000100)='./file1\x00', 0x8002, 0x3) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2520.156428] audit: type=1400 audit(32066.850:2741): avc: denied { map } for pid=4973 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2520.160921] binder: 5008:5038 got transaction with invalid handle, 0 [ 2520.280997] audit: type=1400 audit(32066.880:2742): avc: denied { map } for pid=4972 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2520.317289] audit: type=1400 audit(32066.880:2743): avc: denied { map } for pid=4972 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2520.348446] audit: type=1400 audit(32066.960:2744): avc: denied { map } for pid=5008 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2520.375152] binder: 5008:5038 transaction failed 29201/-22, size 24-8 line 3061 [ 2520.405838] audit: type=1400 audit(32066.990:2745): avc: denied { set_context_mgr } for pid=5008 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:54:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xc0fe], [], @local}}, 0x1c) 08:54:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}) [ 2520.458338] binder: 5008:5038 ioctl c0306201 20000440 returned -14 [ 2520.488703] binder: undelivered TRANSACTION_ERROR: 29201 [ 2520.527072] audit: type=1400 audit(32066.990:2746): avc: denied { call } for pid=5008 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:54:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc200000000000000]}) [ 2520.613719] audit: type=1400 audit(32067.040:2747): avc: denied { map } for pid=5076 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2520.693346] audit: type=1400 audit(32067.060:2748): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2520.818705] audit: type=1400 audit(32067.080:2749): avc: denied { map } for pid=5078 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c) 08:54:27 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x25) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2000010, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 08:54:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d564b00000000]}) [ 2520.975713] binder: 5487:5587 got transaction with invalid handle, 0 08:54:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd00000000000000]}) [ 2521.025489] binder: 5487:5587 transaction failed 29201/-22, size 24-8 line 3061 [ 2521.039772] binder: 5487:5587 ioctl c0306201 20000440 returned -14 [ 2521.079357] binder: undelivered TRANSACTION_ERROR: 29201 08:54:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x29c6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x28}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3ff}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x4c}}, 0x20000001) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce00000000000000]}) 08:54:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 2521.544901] binder: 5847:5937 got transaction with invalid handle, 0 08:54:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfe80], [], @local}}, 0x1c) [ 2521.593676] binder: 5847:5937 transaction failed 29201/-22, size 24-8 line 3061 08:54:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffffffffffffffc0, 0x1c000) write$P9_RLERRORu(r1, &(0x7f0000000100)={0x31, 0x7, 0x2, {{0x24, 'O)uservboxnet0proc)$md5sum:user(}++('}}}, 0x31) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2521.639146] binder: 5847:5937 ioctl c0306201 20000440 returned -14 [ 2521.685762] binder: undelivered TRANSACTION_ERROR: 29201 08:54:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd004000000000000]}) 08:54:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x2002}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 08:54:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0], [], @local}}, 0x1c) [ 2522.196854] binder: 6379:6404 got transaction with invalid handle, 0 [ 2522.230150] binder: 6379:6404 transaction failed 29201/-22, size 24-8 line 3061 08:54:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd901000000000000]}) 08:54:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() stat(&(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getgroups(0x7, &(0x7f00000008c0)=[0xee01, 0xee00, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0x0]) r11 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x0, r4}, {0x2, 0x1, r5}], {}, [{0x8, 0x1, r6}, {0x8, 0x2, r7}, {0x8, 0x2, r8}, {0x8, 0x5, r9}, {0x8, 0x2, r10}, {0x8, 0x7, r11}], {0x10, 0x7}, {0x20, 0x2}}, 0x7c, 0x2) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000a00)='./file0/file0\x00', 0x0, 0x108004, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x588d, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100c000000000]}) [ 2522.281732] binder: 6379:6404 ioctl c0306201 20000440 returned -14 [ 2522.313141] binder: undelivered TRANSACTION_ERROR: 29201 08:54:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0xe3, 0x10100) recvfrom$netrom(r1, &(0x7f0000000400)=""/163, 0xa3, 0x100, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = geteuid() r3 = add_key(&(0x7f0000000580)='.request_key_auth\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640), 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r2, r3) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x40400, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0xfffffffffffffffe) accept(r0, &(0x7f0000000500)=@nfc, &(0x7f0000000380)=0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)=0x3) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000100)) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff00], [], @local}}, 0x1c) 08:54:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb01000000000000]}) 08:54:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c1211526a9f70c2f8080b158cdaa35aa1840180000017c0a6e6a289127674bf19979837035c125d3ef1a1d949e6c72f6220f44f33dc760f0d41eddee84eec80167eafbc3c6ca197455d8ec13c163060eaf70b9406ab5e81b211372ca8418350ce19fa49b1d0fd35c3b8cc324808f194a21e2222f6739975f31004a60a8b810aff952dafdaf3f0079ff98aaa81ac89af1561b041db0d4efc80b27b7c621f6c65ebd66bbd97989b11fe5d49d44a68b493ecbc5e986c490fb2db1963f1a4048812b70b5f4c8fe95059f0a7") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x3) mknodat(r0, &(0x7f0000000340)='./file1\x00', 0x80a4, 0x3) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588d, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d564b00000000]}) [ 2522.738725] binder: 6758:6759 got transaction with invalid handle, 0 [ 2522.765391] binder: 6758:6759 transaction failed 29201/-22, size 24-8 line 3061 [ 2522.798525] binder: 6758:6759 ioctl c0306201 20000440 returned -14 [ 2522.850307] binder: undelivered TRANSACTION_ERROR: 29201 08:54:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01000000000000]}) 08:54:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1000000], [], @local}}, 0x1c) 08:54:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)='usermd5sumvmnet0posix_acl_access\x00', 0x21, 0x2) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 08:54:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x161140) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file2\x00', &(0x7f0000000a40)='bpf\x00', 0x118102c, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x200, 0x81) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x1d8, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x18c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @loopback, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfd0, @dev={0xfe, 0x80, [], 0x15}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94a5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x100}}}}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1d8}}, 0x4) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2523.282196] binder: 7133:7191 got transaction with invalid handle, 0 [ 2523.319922] binder: 7133:7191 transaction failed 29201/-22, size 24-8 line 3061 08:54:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe006000000000000]}) [ 2523.362223] binder: 7133:7191 ioctl c0306201 20000440 returned -14 [ 2523.397179] binder: undelivered TRANSACTION_ERROR: 29201 08:54:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000000], [], @local}}, 0x1c) 08:54:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000140)='./file0/file0\x00', 0x5c75, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="315e97ef87e6b61df9ad1531a8fdd568b738e0459511ec79eaa968b7fb31034b8984c74fba3ccf1df15558488f7471126c", 0x31, 0xb65f}, {&(0x7f0000000600)="6dda425daf2b1662b7c3ebb4763e19fd66f3e0bf4ee476d1a10fe8ce359c142d98f292d3ad486b3507804cd9ca17ac29c4fcb2868caa930ecbb519acb8f0377c33b434af4fd35c93ab24d43429b0d785ff9b9b2e976ce5059fb30faee0cc367739a5796a99353957cfcdb4e0b5e3969b7814ff721a09654a825de6f24ed241aa7afa9c58fccc19f382c70f4389e241d93e9e216cc4c95c85d1bc1180543dec0d5a165e5594bd7b3afb296d43c24c9a3e5cc489b630343aafa64f281b8d8623416fd8bca040d053bc87224deea98927390efaf375e5296affa3c2936012eec5e9846e10c8dcc0bd3aa30c852a5fb22fea3a16d338e45065", 0xf7, 0x1}], 0x80, &(0x7f0000000a80)=ANY=[@ANYBLOB='barrier,acl,nodatasum,discard,fragment=metadata,treelog,fowner>', @ANYRESDEC=r1, @ANYBLOB="fa64996446c5006400d843dc2317b881643d", @ANYRESDEC=r2, @ANYBLOB=',smackfsroot=nodevposix_acl_access-securityppp1.\'em1ppp0p!em0posix_acl_accessvboxnet0,measure,permit_directio,pcr=00000000000000000032,fscontext=system_u,\x00']) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x4, 0x0, 0x0, 0x8000, 0x0) 08:54:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100c000000000]}) 08:54:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00000000000000]}) [ 2523.750410] binder: 7521:7583 got transaction with invalid handle, 0 [ 2523.786929] binder: 7521:7583 transaction failed 29201/-22, size 24-8 line 3061 08:54:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x5000000], [], @local}}, 0x1c) [ 2523.827534] binder: 7521:7583 ioctl c0306201 20000440 returned -14 [ 2523.866067] binder: undelivered TRANSACTION_ERROR: 29201 08:54:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_score_adj\x00') ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000340)={0x0, 0xb4, 0x8001, [], &(0x7f0000000280)=0xf27}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000001a00)="03f0cf20597956e00086339c21687e93670fcabd9a4bcb002de8cf69728bd3d829bfb480363b709a55ee78316663aa7a62b56a652245e527627f4d9efd95204d1115acfdec7ae5148e32388d4cc014324f26f330fd62b1b9ab938de45cfda9815df78c4b383e96b196ac38014f888b2adb5e3b2ce1e758f01af62389b33029510e1ce441c68c960b6aebb11e90c15b82e14e5ed79b51173c1cccbbc6c73e2b3464db6b7f6af3a6847f69f72872f18aed89153951519ae7ab5a99ce381f43d539a14651ed1a7923e3335f11f4eea80941c0bcb810e552920e0b805fb89ff7eb16c6075dab35175129437886f0ab6b51a7d93064a3896b2ad8e7f214bda9eed90369a47e3a9d7d2e992d36b20e4fc6eb4df5139fb0ed90f08f8579f1cdd25abf4e601bef7fa131e643142d5aea73d7d6553610b2025378e6eb95f24674fe7f572d4171f9f447631f24c584eb11675a1af2092295003ad988402aec88cc4bc8fb105cbd6ab57d97a10e7e344abe1897ad4fd086131ad15b800589534d78d1a245134c294de4b6092166eb0d6b08b31d30cc14a17cf6308c761a7a7bb38dde4efcff8f6678bd8aca3b5252f005a0162c13f17cc8f1902e61877cfb013cc8b207608d28c34216fdad456e9db2ee6772ea6a3bffe860c9527de7392c99b7f30adb786b25adaea270263d5b7f48c3d694191ff763541cf8092a21490e0034331bd7c1f739111c6f93c7ea824870e640302bcc35a0e080de601abdaeecd33fe346ef76be38d05bdd1563a9de1b90d07c83e1a17ad341395aa70578ac44782e322d4ffaed0d21a9e5b1f7aba45003c8d8ba56c52777525f9e9de2f5baa73c67ccf7159c1ee2d942ee7a90ba88c65d89aa34ca5b621f267a05004897cff64d9ebc49eb6fd70f84074a5542f6d6f30184b3db7c1da7c8b78e6f2a9c3083e539ab699ed36b41e1c09e697016a1044db208ff4ef3804c25829775203b83e7e6e0d4619dc0ad70e908132acfc4121e2934028b513e323ceb63f024fd559e5f64c13ca2989b3b7857e32a2755e9885224deb848b5665e5ab9838449f488625a273a0e8a15bf4d83d2cfd386ecafafa0b20628a724a5c44a0d73626e097b72451c16a9068306646d7bf2ce9b5884fdf00dfec82d8c4f31377bf1e04030a872b55e7a486f746ef7688131ed6e71f82fbb24ca69d99d7ff7d41e72c53251dcd0929664c172c694592fcbf68dfd1bcc7c23f0594bb693e363913182892f7e6a203f02b72b5b04f418bb7d0ea61b36e78bacfd513711942041a6e7c1875ac23c2d8cc83a76833333aa5e18c1abd5d249c0f608d14a13c3b9c5756476c1d942f957cbf0d67e53c74903dc098f38140dc24a021c309eedf94a0f7ef6fc23e58650c99c7176acd42e96517f653848a62d1ebc8a6dd0caefc0c8685019d4da5bb3cc0402cdd76c9796b165edc132410e132fdbb44b2cda24b728b1ca4cc46002e8732caba2efcfdbae8533ed0d4f895f1c4eea0ff80b7e1cf0ee416356dcbb21193fbd2a8ac5f1d20905ba57e4299351666e03f1fd2251dd8893655bbc9e29f79893423ebb59fe84b15f7631e53ae159fa3c5e19037da5f29d92c9fa0f4cd5ee17d97a68f6303d91a60aa29c628d609f9328493cd0d234ae3da56eecfdb6684e21af93cf252b8365618f0d4fc790a738526de07d90901231d9f85a21b1776049b7c80468336f9e422960d7a84ea6653b6afc811d297980b31d22ac22038395395ca4924050baede8d868211f03fd4679277c26bd9df62988514b3d1a36f3a773425ea2a2c3193a68c32c0a4a11b83d4b7155d051b5d6d7bb8a16fd8b7058a8624a9717c1951f8e78e565999ad360ee2fc6fa9155dfa47b201ae0c11e51fe7487b5baae4fd134ad16b72c6798478003110aa191e108420da639685f73da687287dac9c92b2c0bad669dd617382a902416a64733f545e400222a76a983a447a9ebd46c817a30ac8329f801ff45ecdde82d7215c98766be5ec9e0d7411d8d43ce904706dda8b71941a91c340df01deb25da46516ab89a8e0421e458632bc18dc3f81522ff77e25102d9c6332726173e747c1633ebf5c17e2531258df2092bd8d6e4a68b3c83d554d584a836de2930a99fcb21e7518f9188cc8108190f09e08b5809b55508eff714795cbbfbaa56dbe2c87abc0354aa730e2cfe2288a16ec1d2928044c821c12833299f048df3071aa96db524949a33f2330c87c2f5e49097f6467480909603cb8b79aab66b5f265799a4a1a571451c1f9b246edf207c806c21dbb7dd0ea45fb975daa3589e5521a61c7786b7b57d14580630648f4ea064fc8b920c89d3f2d6e514c0afa85d63b7d32ea7c53abe7c7986aec9731739655621a8fe016d2f3f534d579168cf9a2e2546219535fe4bf7dbca08f6ca3c8290ca8e47e2bd6d898f26129813b5805b8a4866a3e6bd34733c03f48743a06b902e3772ec2c8c55909ce225ff0fcc3bc72954978b786a0cefc80d560a02122a1622dce099f7c07ab5b776ba15ed2d101668d79a87c4aa7696d3987f09455355151c5bce3c2c8042c06b88191151555ef931f015260efd7dc6e64a3ba8e747c2b0aff68bafe3c95ab6d5eaeddf1be5f0e414e78ede6f6df1a64d34f9f413caf5f486961aff0ce700481309355904e79ae96a8d39aa6c4d0cad605935903064ba5529c6794e7ec11ecf771234e67f16ca29e973c5ebbb59071b28d27b6034da90697cb4b547b55c80e90d4dad33c5819f7ed2acd625b909a3fe1048965afdcad02f0e098eb9a96ffec77723e6786f94a154babb5bb35d8805a17ed50b12bb3e2c2ade2f90108fba2ab5ee6cb078b13ca16bd51b145b1a9ea11e1802a184c9efa47ce5b697661bc070ea987f2697b31f4738073fc705733e11e56d5205be37d28673412a645e7fd9cd760db5ea82e20b877d3c349943b842b42db52d063f4376e350035cc9ec0ab488ba49bc9f102d8f7ea0dae0a02a7b04b1ab456773ba6024feffeef473e6e724c3fa9545487351cfc5a04a6278e379c9eb55f28717625726703c582b60cc2ab0152d6f888d5f3035f2ae5d446fe704a356b9026946406d420baeb9806a0b5f3be99e1ff45ef40aeb46ef90d34e5ae95bcdc5052de9d1a2a4a11cff3fcdb2dc9617485dc9bd71fe55692650b426054060257cdccf2a17dcffe242b9b646edc0e75bf87763e9cbc1639b8fe2b25d37d5ca79a62f741a79ecc87507c1f7c3135c87cde172655932ec988ad3a22cd82c9b1a0c68c562881d62f0a1d7039687a9c3e1c8a10c7fea1874b82d10bca8cd4a1bb44d0a79023d2e224e9bb5b4af21c6cf0dd25010db2c160c7e3e0ca59ae7415617a450c7a0c6a22358a6a07dbb7998eaf6b96922007c60e7703a67d6887c38915dba9693154f8dc6a6e4e2fb189ea463bc8a56dd0c9868b8b620a12d6d526ec9a776fc78aa3174a6f2e6a2a4e8f452b05e5a2ba4f04862265e261f96475ed97951e137d319e972bf00dfcc86abd35b42eaa3e1ce3b87eeb93d8d0caa39e93affe84478a1935aeed5b8ab93ecca03a4c75f2f9c8f10b5a92da628cbb67ea10146c70384caf2c41ea651cd174498fa139355b387f4dda8dffa8c4747b3981c7c1cff86de2909c057fdbdc798dc30e6819c9ae2838bacdaf8b103455c935e49e432c88246761792a656a0e20c404cb85d0546693b76297aee6ac4ba71d0c90a3c65712ceb53b160f505b0fb24c33c000302c6013cd0ee377ac16b90ade044c1edd7fcdc27bb27beb4336ee47c913ae6fc115fd4c84c7d9832994d232117955b56e718ea4083e44cdcdf9b0624fef6595d235161c0b817bb5f032493c18245127057610aa09217aaa986255d1514092e45fe3c4b777c1b8c3a4185a02a2eff8e4c242d3f9668e69ddf142979e5370a0513ea1416b3012ff28a23c86609d85cb108481d183206d65123ec3855e24c2089013c3066227828e7ce09ec415eeb93f3e46f611bb9b4ddae4a849ba84786814af8133447e4a8e77abead67e3174d033626e2c117bf52b6c3b7f79445fe12da4c0acb8ec1faaa5fe35409f230c4be9d848d277eec99b091a366b7e0cb7c6994dd66c332529f50ade44d8e90839d509b699c1e0e2ec69f580c9a6a6343944367ed85ce9f9de9a7a63f336c607fa0245f8402b05f694dca89abbb803503d8d0395b2b64b969fa1caffa585a1ea7acbee638af74c7a229607fb9deb7a9c5107cfbdefd6710cb2ca00f77921ac08c339d9141bfa3b9d3de8dcca953e026689c42cda4f209af841ca3014f559535caa6538a79cebb61118e5d33a4987d096a0bf1ccaf6166a248bd224f3877811358eb29abf903521e68393b619aa6cfe9b9c809bfee35ce1243eaf43ccb688811a7538070bb49e157ade97702d5507759fbcfe151a7fd86125ea7cf0760f15e2060fc7db4db92d1ce128ced6e7e89a6d70a745db9b118e3db05e07659719df3ff277f148510fa6549117ba91105e20a552860cd361c06370191ba727a51be9eb0bfd6f28d4c1f4e50e61400394c96d34e6dbfedddbd8a481a9adf774578167f3ba6d4a1da75c09c90a5bcab7ca5000955426ae9bfe93a767604721798f97b494857a6543ee8b5f9433886535ec3ab00fe3d1e6e838d531f77811f5b25fe43a104477f319e238b0af3f00700f0dd2ef09c59c99dace79c201d22c9a51892a8bd10caec51043d06c37142dbd4cdf8bf9cdf286cf458f1f8409e96e455c89cdc2c6f14e8c7970c13630da9acd1911ce09102f7df5e8683a65ef70aae19698df819dd62d32c9259f01a9f44647d202b4c2ab302ac1c07b618c338f08bb4d53d8776e735f608509d207aff94babe25a4f5399c46ae015e7e242ead2db96323cfb24aed6d7663035dffc74ec0e47136324952e4aed2b03e9717ad0f4b9074e48d568803132c5d726be40835b34b711bac2ff64bb70f687e4039f3ee2ff56a90c933908df29205525c0849a53ca4cb243364df8cdd9b0e42c3b754972cdf2c93922f0c7f9f617ef3863eb288c54ba907e07f78a4dc17b98dc9874574ed0cb7fb48384d984818afd65c5c64c24683495ff74a52832147e82f01a4178e9de2ea4c5f127f2913c5fd361894b1137c23b0ff1b7d02940b57b56c8915c2e72a4dad20e6b1165ba84a69d7543f076f8568e1bd020b0283e954a0dbf4c092635c67b4b597ad5f829e2c58160a09372b722ced4f7b0c712fb03fb5f6856b33bde988f7898d2c06e1efc71ebca8607bdc96a5bc3874460c45bd4ec80b01e31126f68fecd2279069b3e02c878cd169e6c09b38fff26d332d927870e50e8a4fbf0e1529a4e2b89f2f1ecbcb957978a682056ad8076f72d489b9edc0c922589409db60af1e1ce2d1149f63cf295a6112073bab2d187929657e793e8d3f3b7dce594d683d91221e60ba1f797ef12e4e6618ea3199895dfb528d8f0232d89810d3d269355e1c42db4093a9297585d1e4fbe84f14f141aef75f11bd4882498b89370c3233d848af42bd8149143df5d9f79408b2ef2b3d8b4fd74e6f2446f75174755c2a392b807465c01bcc703a58dde1b731d53e3034ac74348d88ef9385490e4aa7cd10c8f4892ba87b851777d6c10ae979dd69bb1a13691e2efec14e4ea2620657868aaf0e4a308e246f18e9e121fc1b83558b73af171e52446c60fd333da494a2d74b500d3c7ae31b638880c0832f044e54c9d44e48d7f23b76cdcc2a149da753b0becdfcd622bcc1f63051c4262120e3c9bfd1e5506535b5c371130dc0710f2153cc2011a6cfb26991a69bffaa", 0x1000, 0xfffffffffffffff8}, {&(0x7f0000000140)="5214ac712fe1fc3268425448e09b2a53908cdf8022088435a15a780f0d00824fa6bacd704537b749883993152f4184d3de03dfb01ec775cfc93cbfd27e", 0x3d, 0x7}], 0x2000, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24d564b00000000]}) 08:54:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02000000000000]}) 08:54:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x46030000], [], @local}}, 0x1c) [ 2524.319425] binder: 7893:7964 got transaction with invalid handle, 0 [ 2524.329832] binder: 7893:7964 transaction failed 29201/-22, size 24-8 line 3061 [ 2524.351544] binder: 7893:7964 ioctl c0306201 20000440 returned -14 08:54:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100)=0x901b1c658865f548, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x220008, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2524.408457] binder: undelivered TRANSACTION_ERROR: 29201 08:54:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000080)=0x100) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30100c000000000]}) 08:54:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0b000000000000]}) 08:54:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34d564b00000000]}) 08:54:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x47030000], [], @local}}, 0x1c) [ 2524.915657] binder: 8477:8533 got transaction with invalid handle, 0 08:54:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0xd6) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8001009, 0x1, 0x1}) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 2524.960040] binder: 8477:8533 transaction failed 29201/-22, size 24-8 line 3061 [ 2524.993996] binder: 8477:8533 ioctl c0306201 20000440 returned -14 08:54:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2525.024215] binder: undelivered TRANSACTION_ERROR: 29201 [ 2525.094964] kauditd_printk_skb: 139 callbacks suppressed [ 2525.094978] audit: type=1400 audit(32071.940:2889): avc: denied { map } for pid=8663 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2525.234197] audit: type=1400 audit(32071.980:2890): avc: denied { map } for pid=8663 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d564b00000000]}) 08:54:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc000000], [], @local}}, 0x1c) [ 2525.338996] audit: type=1400 audit(32071.990:2891): avc: denied { map } for pid=8663 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2525.389448] audit: type=1400 audit(32072.000:2892): avc: denied { map } for pid=8663 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 2525.475344] binder: 8899:8921 got transaction with invalid handle, 0 08:54:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+10000}}) [ 2525.513313] audit: type=1400 audit(32072.020:2893): avc: denied { map } for pid=8779 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2525.539655] binder: 8899:8921 transaction failed 29201/-22, size 24-8 line 3061 [ 2525.554184] binder: 8899:8921 ioctl c0306201 20000440 returned -14 [ 2525.600293] binder: undelivered TRANSACTION_ERROR: 29201 [ 2525.656858] audit: type=1400 audit(32072.040:2894): avc: denied { associate } for pid=8740 comm="syz-executor.0" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:54:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000140)={0x0, 0x20, 0x752a75d969fd789b}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x5, 0x0, 0x0, 0x8080, 0x0) 08:54:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 2525.802187] audit: type=1400 audit(32072.050:2895): avc: denied { map } for pid=8779 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2525.876748] audit: type=1400 audit(32072.280:2896): avc: denied { associate } for pid=8845 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2525.900773] audit: type=1400 audit(32072.280:2897): avc: denied { map } for pid=8899 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 08:54:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70001c000000000]}) 08:54:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfe800000], [], @local}}, 0x1c) 08:54:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2526.081336] audit: type=1400 audit(32072.300:2898): avc: denied { map } for pid=8901 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:54:33 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0xb43f}, 0x8) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x12002, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000100)=0xd98, 0x4) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 08:54:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec00000], [], @local}}, 0x1c) 08:54:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 2526.496458] binder: 9676:9681 got transaction with invalid handle, 0 08:54:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) write$P9_RSTAT(r1, &(0x7f0000000100)={0x43, 0x7d, 0x2, {0x0, 0x3c, 0x200, 0x26, {0x9ef19066e618506f, 0x3, 0x8}, 0x80000000, 0x9, 0xffffffffffffff01, 0x8a6, 0x1, '[', 0x0, '', 0x4, 'bpf\x00', 0x4, 'bpf\x00'}}, 0x43) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000280)='./file0/file0\x00', 0x3ff, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="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", 0xfa, 0xffff}, {&(0x7f0000000440)="f727d9d54e000b6b42cff99947747a26c19f2f70564fa98d7b07761b69114f61d42cfdfbe8606c4611765187413409d601a6617c2034e13254ae23517876c1010cda08fe3c5080121d4b61fa72d8", 0x4e, 0x2}], 0x4, &(0x7f0000000540)='[') mount$bpf(0x0, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x2e0, 0x0, 0x8000, 0x0) [ 2526.553127] binder: 9676:9681 transaction failed 29201/-22, size 24-8 line 3061 [ 2526.600848] binder: 9676:9681 ioctl c0306201 20000440 returned -14 08:54:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) [ 2526.648044] binder: undelivered TRANSACTION_ERROR: 29201 08:54:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa01000000000000]}) 08:54:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x300000, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x8001}}], [{@obj_user={'obj_user', 0x3d, 'bpf\x00'}}, {@audit='audit'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfeffffff], [], @local}}, 0x1c) 08:54:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10842) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 08:54:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0201c000000000]}) [ 2527.111624] binder: 10036:10059 got transaction with invalid handle, 0 [ 2527.121138] binder: 10036:10059 transaction failed 29201/-22, size 24-8 line 3061 08:54:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff000000], [], @local}}, 0x1c) [ 2527.198340] binder: 10036:10059 ioctl c0306201 20000440 returned -14 [ 2527.244688] binder: undelivered TRANSACTION_ERROR: 29201 08:54:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7fff, 0x40) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000200)=""/159) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x7ffd, 0x0) r2 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400), 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f0000000440)=""/48, 0x30) 08:54:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 08:54:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}) [ 2527.657765] binder: 10493:10523 got transaction with invalid handle, 0 [ 2527.697691] binder: 10493:10523 transaction failed 29201/-22, size 24-8 line 3061 08:54:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfffffffe], [], @local}}, 0x1c) [ 2527.728467] binder: 10493:10523 ioctl c0306201 20000440 returned -14 [ 2527.767214] binder: undelivered TRANSACTION_ERROR: 29201 08:54:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}) 08:54:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x81, 0x0) getpeername$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r2 = creat(&(0x7f0000000200)='./file0/file1\x00', 0x80) getdents(r2, &(0x7f0000000240)=""/37, 0x25) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001c000000000]}) 08:54:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getuid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000600)='bpf\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB=',hash,fsmagic=0x0000000000000001,\x00']) umount2(0x0, 0x8) setxattr$security_selinux(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x1) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1080, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x9, 0x40000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=0x0, &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={r4, @in={{0x2, 0x4e22, @remote}}}, 0x84) [ 2528.119037] binder: 10880:10909 got transaction with invalid handle, 0 [ 2528.161912] binder: 10880:10909 transaction failed 29201/-22, size 24-8 line 3061 [ 2528.179744] binder: 10880:10909 ioctl c0306201 20000440 returned -14 08:54:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x100000000000000], [], @local}}, 0x1c) [ 2528.232869] binder: undelivered TRANSACTION_ERROR: 29201 08:54:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a]}) 08:54:35 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101801, 0x0) unlinkat(r1, &(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x100588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 08:54:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x400000000000000], [], @local}}, 0x1c) 08:54:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}) 08:54:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) [ 2528.807233] binder: 11378:11418 got transaction with invalid handle, 0 [ 2528.850706] binder: 11378:11418 transaction failed 29201/-22, size 24-8 line 3061 [ 2528.883089] binder: 11378:11418 ioctl c0306201 20000440 returned -14 08:54:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2fffffd, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="5d173fb306a3c77af5bd1b581e938429b44bc622011274fc2bfc711e29032079716683b962808004cfbfc297c5c2060f6ca26363948062e034a6a55285e42a6bf09941326bd0ab84564f2c0545bd37aa7b99969cd87c9ef934f3ef4c2ba36f341c466ebcf753162cdfe13e2c39c4207adf33165411fff8e3c27712856f3d1858456158fc", 0x84, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000280)='logon\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='bpf\x00', 0xfffffffffffffffa) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000840)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000880)) r4 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000600)="1fc40b13433dec3039eae5bd7275c54de6951890c462ece97f2595b48a0ee711e0eb320b29ebe9bdc851c1ad1c2c314bf9984298583068499629e48559255335b978f16e9a3159656366fcd971e492db9439b542535c3de6f93204ee13037e1af920ba82098eb1adf35edf3d5c5992bcccd07ae4fa4e4df9db71d4a315efffd5c5056ff23f4a61be3987b3c80be0dd6c4cd219219489ef0e43e8d4f899e4fe297dab09eefb47b3e9930d52162a0b898959c98b442617f0eb281bd06973faf49667dbf1eab1237ca15d7fee6c801e51b88d106c2db481914f8d4ea2b77018592f413c9125f62ff4a1cc41e0c2cba6a4a072ed", 0xf2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r2, r4}, &(0x7f0000000700)=""/221, 0xdd, &(0x7f0000000580)={&(0x7f0000000480)={'digest_null-generic\x00'}, &(0x7f0000000500)="fa1db555fece4acc63e0e5a5b35307bc122724dc74d6d3065c3ccdd845b233e6dbb03e7019037222fa246301ad94d3c5e8314c0cc83adafd705d24a935040944a1c29e7e9a925a3e5d6a0a192f62c5d1f6546302bf2b58a3a3ca2c537759e0c9cfda4d9714b5da", 0x67}) [ 2528.937719] binder: undelivered TRANSACTION_ERROR: 29201 08:54:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x500000000000000], [], @local}}, 0x1c) 08:54:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}) 08:54:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120101c000000000]}) 08:54:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x2000, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x40, @mcast2, 0x20}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="1de62341a6a57ef85fd204d8b3380e153cec77185611935d0f59d47ceeb0a31dc5cb9b827a86f6acd15c0dd90f701e72977028969ccf6f88b09401b5a4d322602e10a4a22971b90080275362aba61ee9f1096309ae9af4813c70e32c56b22cc99d2850f589418a7a3f85bbfd4887b2433e91a89d2cd50e18e1cd1b9dc4ef3d3f5a30f646e65ed076bdf1d40c4f26d0e539915032f9163d601640f2a15eeef85a943c398194da7096271b349e287b04712f300d93f29c196bf3a067f8f42b42a7660ecd81f6c742c0c9c4b1c1413261a2cb63bf2e9e9ecd", 0xd7}, {&(0x7f0000000400)="2be37de76f2602aa8d31dd87a427aa69360247605ef984cd79b5b29602edee09c1268c60a7053ecf4e3b4a7f53515a74b40fe3fb18cf176847e27b2d58460340b07024865230a9c5dc855c3fe58cf7f457fef999b992190c7f841587d90dd7dde59632d9fb6298ae6114bfb79fd9fcab88981d7fc50c12528c46ffa86026819f780befbb134c9d739ab296fd3dabf254ca136e934451bfcc1cf2c1ca214d46e5295c7036c8d33ed0", 0xa8}, {&(0x7f0000000700)="09090983f99972212be95af4af2ec490b2c1b05b63a527140b39f7091506260600727a2eee85a5d445c9a89804563df3b7d494f929c8c871ed6436be3bf8486df00d778f9cd56c0239cd0545e5a860db3425accbe2f414861228b506ce23eb8741429829b81f84c347b749739abf420bbf24b17436b1c6d4ae66a31c59f7c40d6f6c76249b0554279a6e856b762eec9985eef2afe5fc6e7f172b4a34e1a380b39e201cdf0b295e290735a080f3a9312596d64a43df4297a27014f85a21ccb7a7c619893c429d75c3541d7c64da1e6f946dfc248d36c8", 0xd6}], 0x3}, 0x400c891) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000080)='./file1\x00', 0x40, 0x1) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x38, r2, 0x311, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0xf, 0x80, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x4) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}) 08:54:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) getgroups(0x5, &(0x7f0000000340)=[0xee01, 0xee01, 0x0, 0xee00, 0xee01]) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="8376339e43d1099e9136e8cf0bb41ab1587973271b5fe545e29be6b4b76bc82b96e0e280580562799789f5a2b39884afd30ce50702d358c010c3cce00be2b39e2bc7b4b1f7a0d3fd6c57a11f9a7951f5cbdd2638cdc472d2b837ead85d45cbc14b19070436", 0x65, 0x1}, {&(0x7f0000000140)="0d6237997a8cb66d6b35a781fac599393c8e72", 0x13, 0xffffffffffff1e50}], 0x2, &(0x7f0000000400)={[{@integrity='integrity'}, {@noquota='noquota'}, {@resize_size={'resize', 0x3d, 0x40}}, {@nodiscard='nodiscard'}, {@gid={'gid', 0x3d, r1}}, {@discard_size={'discard', 0x3d, 0x1}}, {@errors_continue='errors=continue'}], [{@subj_user={'subj_user'}}]}) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x1c) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x100) 08:54:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4603000000000000], [], @local}}, 0x1c) [ 2530.356441] kauditd_printk_skb: 95 callbacks suppressed [ 2530.356456] audit: type=1400 audit(32077.200:2994): avc: denied { map } for pid=11899 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 2530.358965] binder: 11899:11905 got transaction with invalid handle, 0 [ 2530.362901] audit: type=1400 audit(32077.200:2995): avc: denied { set_context_mgr } for pid=11899 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2530.426048] audit: type=1400 audit(32077.200:2996): avc: denied { call } for pid=11899 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2530.452367] binder: 11899:11905 transaction failed 29201/-22, size 24-8 line 3061 [ 2530.467610] audit: type=1400 audit(32077.240:2997): avc: denied { associate } for pid=11900 comm="syz-executor.0" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2530.505452] binder: 11899:11905 ioctl c0306201 20000440 returned -14 [ 2530.528646] binder: undelivered TRANSACTION_ERROR: 29201 08:54:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]}) 08:54:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40000, 0x0) connect$x25(r1, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 2530.621900] audit: type=1400 audit(32077.310:2998): avc: denied { create } for pid=11900 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:54:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4703000000000000], [], @local}}, 0x1c) 08:54:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x4) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0xffc0000000000000, 0x100000000}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0xfffffffffffffffd}, &(0x7f0000000400)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="4756001d01c4a259d81b597e72bca14b86ad1b541d7c564ccca8d5d941d91f95d32aedea6027da5f168b94f97f6a42d59438f725b3dc46b7b760a63da0e0baf7aef310421f809b85c40aeea646992e384b0e2487b8c9bd80b37ae18af7016998c6d3", 0x62}, {&(0x7f00000001c0)="aab40893fd6829d56b595c4bb21669efe7be57994146ac795ac86f4b3b180f6043c4a500a9f59bb2962e7a15159be930a9b652425dc4cb527ca4c9169cdf631f51c64fd08fe9f112c8f1410fa5", 0x4d}], 0x2, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0x1e4, 0x1, r1}}, @init={0x18, 0x84, 0x0, {0x6, 0x8, 0x1f, 0x8001}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x34, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x4, 0x21b, 0x202, r2}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @authinfo={0x18, 0x84, 0x6, {0x40}}], 0xa0, 0x840}], 0x1, 0x40800) 08:54:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130101c000000000]}) [ 2530.746739] audit: type=1400 audit(32077.350:2999): avc: denied { write } for pid=11900 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 2530.801830] audit: type=1400 audit(32077.360:3000): avc: denied { read } for pid=11900 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 2530.837133] audit: type=1400 audit(32077.380:3001): avc: denied { associate } for pid=11912 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2530.923826] audit: type=1400 audit(32077.540:3002): avc: denied { map } for pid=12197 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2531.022615] binder: 12266:12312 got transaction with invalid handle, 0 08:54:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc00000000000000], [], @local}}, 0x1c) [ 2531.103525] audit: type=1400 audit(32077.560:3003): avc: denied { map } for pid=12197 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2531.128510] binder: 12266:12312 transaction failed 29201/-22, size 24-8 line 3061 08:54:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) [ 2531.155797] binder: 12266:12312 ioctl c0306201 20000440 returned -14 [ 2531.176239] binder: undelivered TRANSACTION_ERROR: 29201 08:54:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect(r0, &(0x7f0000000980)=@isdn={0x22, 0x4, 0x401, 0x8001, 0x5}, 0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}}) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0/file0\x00', 0x9, 0x8, &(0x7f0000000840)=[{&(0x7f0000000240)="efbbccad805fa3b029081fa3e837af6dbf46c07f06f4fa3184f4673b6775feeae353872938db02916d04ad462f45551b2d150f94394eacc42ea55ec515ef44d6fe2acbcfa1566bb9587cffb3dd31b8a82b", 0x51, 0x800000000}, {&(0x7f0000000340)="e89c1fa5702a82845374229374cbb87bde27ef793cd6da36aaf4c0e12411971d65a0525d040729bc3707f3c233b50b95943744a04f6f96033e029e2229e2633a182ed3a335224abc698c3d0429059da6c16bf749d744a9f08fd6e35ce416358553d5ab74a5c4e6cb587d04ba27b0", 0x6e, 0x5}, {&(0x7f0000000600)="18c6efe05b26bbf1df9662016d8f496950ee5f6eac9d2948da8b3e828f57f277b0dfa8f90cc91937643892d1fa051985fdc99f528c359592cee3d250a67e9d53f16131db4c490524ae9ed04eb8d12083bd9246ff8a3c86a874130eeb68a5003bd2c161a132dd416efffa97da199f8b9008319704f75291e7ed0bda1fb88e853b7fef0d8a0f93465714aef32e95e15746cd4314bd8e965f8e09ff9fc16541e9bc0d0ae6a4a53a716303b5aa8da7193088e1510173d4134e474c2e63db71f1f2c8fce77bbcce7827a38470c0a276b6d73fea8f4bb63daa1225df07eea9b481", 0xde, 0x3}, {&(0x7f0000000400)="57b5fe6c1635eeda63", 0x9, 0x8}, {&(0x7f0000000500)="5c6f44c334904b996f184c09c6a20cd8da0a006b778e3f25d249a32d95ce0c539af7034fa0c4273dd2c999463bfd6a60bded9edd4bd206289e35c343223a8267ab3415235ccec51e6a8ed4c2979bf82b1447303e441122193d406225d0f8b53d650d42083d50be4c9b73f38e0fc28ddc056e3d0eb4ca47490d2cf2f96aa6505b53b5e507518a5b1f0b655d0aa8e186e2d2c0ce7d9dd19ec45d8bd62a3bbbba0b6e37f7801dcd9717cd90c506140393c483909113fe66", 0xb6, 0xa090}, {&(0x7f0000000440)="3c02d10862f0bdec6e4cb6f66095ad23bf1375f28d29f16136c8c626b24a5e24e3e0fb006f737fa76f7f6a77732bc389564dfa4df08ac95af2cd59a8517b899ccb80b6e8f55ddd539f3d97be0f4dde988180dce099309df6731f76c6fda9ff9a0ec00c000bc684c522b83a30d3d1ab76c3da6789b9f3fae108ece303a48aa765", 0x80}, {&(0x7f0000001a00)="7176796d34b21066c38f4a4aa8b0a470930f52ba8def19fde63bf7bb2ff49469451c582915b054dbf856edd96b3fbe4e9504c3e1ed7e6f2b054e48c94d37599e3c85dcd2a164b219748a191d9922846139916227a9fa6dbb78648fb24fed771d61b07d375c1608031092e595516b856837504e574c138ed04a2c04a522eacf81281612950102c3ee1eee3cfc68e27c90487c777e4dfb57e83e0bad1e501145b7769db6b8d3b1c1dea57bf88fef2f0555d7ee3dc37e3402c12318604c9a0e55ccb31700d73f4cf6b5fa00ce3560769c760edb818e9832e4612ddfcdae3fbb0b2290be7007f182cb22273d9230cda2817c5c040d4785e7117bbd9ca3e255336d749db82ceae96aaee15c6353097172e6a1652effdec652696dd608537fdbf3491389e019185d9ac8f308e7a76e496e1a67b3e949eef82104eed3fca68d9d927d91182e4bfedf57de2c18a42b939b535ff8d4ffc8ff0d24cc5e4d8aad76ec5f41eeef0d53fac2a2268202a9a3d4c37107b55dc4d64d3011546e11539b23e610b721dc2ade5d1adaf0933e883ab96f6933dcad1b107d3b515e16a403f68d87c30287f5a6871f5fd3dd29a90d884aefefd5a3434dc7f1748ebc30169cfc155d8646d2e69df451c712f88551b52b5eb37637300c87b661694f2976f2fdd2d697503388e55b9277ef2ddf07214055bf3c69ad6d58598596b93ce1f005083892a0412229ecdc6f84bbb1ab9bd20b97f0d2e0fdc8676a11d43c64f34aacdc193cfecf503a41a2c5bded143101ee56e433180c913f87a956df1606996201c8f3a87a0ff3e0896b237ac1c9cd7ab2ad632f47908c5e9a04114ea36aff44130be0b0a0da51d16e4d6dfdb21e8b90ee97d4562690cfd4fe41c8e1e9dc9f0cbefa64d2c958db4cd1b6eeebfd84ed4cc4fe2c0662a45f4c25a00ccbdc8a05f5e2865187f1c9076f628aeeb2e1ee6bd2a1bd218fb00b243b1858cd301acd8f568e39bfd738670d3754c08523087c92cdc3fc314e81e3ee7e2234f5416555e243b1565a4d4883f760471e1db8642d3d47652ffa3bb914e17c055cd9df7347161d13ce5fa6d18121230a0f1158487b1b866cfe9827c2a596fa18299feeb9bd72ceb3325731ff28adb0df67425121321aee4b7b117ab39b455f16c3315eefd2755fe1bb0524ef242e21fef7b04762e228c1a093f9c04afb8c50e497b2a961d3458b16558fb963b4052a16c6effab8514c5ba767145222877cb6ff6d2c334f1b8b61984117af4a6fa459b5175a257bb1cfa7f36569ae41e3c08e351ba4e60d0273c0496a8cca98df35777a709eec23bbb71e9a0d1aedda50c1dc6f2a8afbd7ad4cb85c4f340deef1f913486c5290d340509200320d82493f1d6bfb2b0eb5355ceaa3215e1f175e3904cba90092101b55e920cbec10c9b67c5fa57b589b590ac244e14b5bbc81febc9bd6238d7c39b35071bf2b9b194f95a7256571d20185e704ab31226814f5ae08777c980d7b6600b242c383de910ba73759b93896c8aba04ba90deb1d52a9cbe6242abaa83a218ccfda979f367b418e9c92877a838e698443d32ec9d92699016d25782c541b6d5a0c6e1796ad46619a607c6c95279b2b5fac9cf938c1a4132173c1bd59c52b1947811c79b87d752fbbdcaf2c020bf7712b1514d16fe70de3be35c349f9599566b0db7c266dad9ad35a253ed07c8cbf425723ffcb297bbebac72c21302adc273c19623d3a5031a65a9dbec6f855114d3c6c724d0e8d6405d6db258cef21ea170b3a22a9afa24e6582bcbd85296bb5cc6f9a214bcba61d730193beecc1306a0a7c477595e59f6ceb6d8c23f7b42ef1be960643a7fff8ea7352b7a3de7926f6f6090279d26f2d54b695d89c8699b18d4ee0bbe2f5f41ade2cda8e9f97a0d7554e2dd8de930f3ce5580cbdac632a879388ad68a2eded65ffdd4cc3afc09c968cdcd7e59fc93f2d6101e83e98683da2cc42d52bccdb214aeddf468947115cd3d779bc5e7a9ae7744a3c57af67d2d7808b241becbde0fd35bda16454eafeae24b2535a5354d6b46569a858df4a85a8e0ac02f639f566937bfc66fd885f4f54966b877793a37fa6323ecee04243e2219e56107757a5c4d67b67e1f0ca42187b0faf36c9ee3c1a4074f61346b99bb3c20ac6d0240eade2f21a2e18fd61f235009a0aa2f02a513fe6d8c10a4e51549a5becba65e22a932df235d479da5e86374020818191d656d6a732056dbc91d40edaa434ab2b66ec1df3cd4d6c15cedd68309a449d6a36a403c1e02ba8e256ed4413f972ae58ef1cc0de6bf96657c8598387b703cc3bfed96118887f4e72f3e914316f9712c3db90d1eca74157aff1b615004b1d3242876e905e00dbf8877de20049f29b831a0808878605c7f4073ed3918c80bbacb0ebc6548034b1ff2f01e6717932b21cd79d2683a08d8c02a9c604c3b1fcfc1a5c03a70dfc41c25e015e05cbe47c3196e624309cb768d752ef5403013ce7ca7058f9741f7c53f1979dcd7a6e1a87072162de020d8a2881d9d17c7de5ad1b9f2d80008ad44f9fb5027323a0c2b18c594cf913291c6861977bd27a7384c43814f67f4468ce7e23db2f1799257e8d516ebded042365630c37db49e21dc32fc4bb40e64d109cbf4133cf28d35407d3e666b3378b816faadf542c3ba142af747d04eff5cd8502604b5767f37bbf0db1787599d37fa6d95902fbd10515d2623a2765a1143dae00fe415ed6304c784fc68d99feee257c63aa3c2cb587261483d79e40c85cf89b18c46b5ed3b2b4a1fd191f08691553d8b3ba8011fec3dfc28308050e8a01776765b1028e7441422e42667d3ed14528dec957ea2108e7486f619ebcf5eef561bf181002a42e015726db82c70ce65c15da72553af556ec87cb2892cdda6174b7b5b772f3d0dab91b0125c65a1d966676661e504c06b38ad272f4591c14d1e09c92d04fa62f77bd165d95231b498c4e24093e4ae504ccf959b1a08e3d8737ab291e64d9591f7e95e496e0cdf694e04e943002b7ee5a30311b0855a1dd8857dd89cb67486beaa27e8f3c9e9c2fe2e61a89fb773734c531c579b3ff2d33f9067029554e0c5f70b863da24ac076fd39108015ba1ce4cad74a50db4a8ea0b2b043493283e43d5e50f0c746b277d4a4d99b878b97983bed2b69c0b3728b51cec4468eeb4f03b39ce84f1acf4f3f2a017d2659248540df2593d66f7572e8d83b08158b4b83dc932e3a885ca49b9533a3f0ff6fde9451dd8f6ac6cd5e9b35b3e74bcd122695ba7063a2557d3f9445a45e9b2ff9b3a5644fef57aa0bedfb322c27479990e83636012aa07118f9e57718bb3fbf610384a3926f81fccc1189a7ded8ba186c34485923b7da29973c7cc27955ee916ad37a88d5b33f0fa12c943fb6c2315e0d96880a26cf0cd53d1deb9e2fb2a826a06a634c9dfe6bc1df21401d6b126622b8257799a1263dccbebf840519bf0e70a948eb85a433bb99a819d5370c3afb9df189d1ae3011bd648f914878e50be6390b603d21d980220b04e24e0a5813943673d7b1ac4da25c5325b19e9a02ab6bfc40fc80ef3370bd49ac40f2f1b58412b10149247956cc98989df471ebc27829fa6d517637af6e86ace9a4e215894039b089215adb17caba8610ed302d364a8890fa9d523dbb804fd051956014969cfea296601eb58d37337bcce0045316094baa178d8db4d811b925081f03d14667aa85cb528494cde55fa76f29d9a6189d3e7b6603599bf87916929649b5a9902f7d2a0cb64aa9c5d35ec0cfc388f9e18028a8c47f7b8cda81f7a9fc6c537d6f6cd0a1ffdd7f5daf857a4d37a87381c1f3e748734c1a25f9fdf5d367c8b867dd8d39c1029f8681279c2d09e30616b4a05a4fd4d0f1b55083d324cf1504eb66517a79bec5b1e4b3d073a81b0ededc10f886754cd62b5b24e890ceb3fe55b461c9a3126e9195dd46e64f06eafbe70179eeee94a2d6bb5609342e16e963e883129e72bb632ce145a395f06f4df3ac2cb6ba52dbc14c20b996c833247b49937881ebfa91077c49a115daa3df6aaf90d49a1613b357d72bb0edeb211da2e14fd8ec9e2e1ed6e5ab5a20e3129a05d993a4477547671a645fa4621438ac2cf5fa5f8d9d545a40a20bcdc9ff9ade83c22a9f69f83b4f66edb21a9a892d8d6aaecb05a5213919c9810aa58ca77b0310a3e1e37c28af1c31b5847101cd3172366eb150425a7c1c437cbb953dddd4278d0fe49b31cdbc2e94948d186c3466abde367745cd76d1b85d6b590bdc1f90a851dcf0a31b18f9a12a2928fe72b24c45873c4eec37335ea92d625dc50c5b266d7d63725ace20d813bba78d2b718a91d8bef4c12e1db4da8c862cb859862af192968abc51782e74bbb6d35a031f33c7fb743041a674da5e995fa8fdcd074914964a3cd82d8b2d47f6d1f40d38d49697fd7baba2829a1e38d4c490fb9507ba73b9bb97632b9b64b8188c385be2f98f69cf83bacba92d87bf07e03bcf3acc2cdececd0a261785d815f554ee0449795a4f7b2029324f25f6e6ede5d6fc77a7d1cc994a4ab31e1bbe7cd331471ebf8d9e50a00b2fa7b329d3c324d7944a194ee71ce8e160386768df98f77256d6479da6e466bdd6c58e2b613ae62b4aef26de3f93277b91bf71375daf7a7ccce6e5d66e173aa4ce307e1277f9ab90f7a886ae083c897d3fbfd0ae3b1aa71c697c73cf0a4109d5462bea285b5a99265b3e0e431da79bbbc50b85ce67f4bf6d87e208ed694fb0b7ab7612a2e2a8337178b81de392dbd30a430c62aefb4f9b6f7af422b5a817d894aff149f72e3fb68867c1541f139d72e962ad1c6188b2dbab7fe704d935c15d2d941a75ba1e102b356d7e0f78f9feb7b32fe782638063704400e565f30f515a085082b80380691d71ae8f1a142d29aa2ab10dcc6539ba3eb50187ea52c8ef6f8a8a23afac49dd43c8ec913f92a0286679aed3ff38614add993738bc3d779349dedbcfc5f4cd39d9a97e14904738857838e8662f7656a0a1c3ed6589a00bbcfdd6369754a26077790b7772638d516127de86a1ac96b1842b611578aa43ef7a62f82e8ff22b2a576e23c80eba419321de09b9d16db7e479ef3da3739a32b9c975c2331ad90ca010421ac683be187e01919da84e813bac83c26caa673ac02fd8630f492f43960da47d0dbd4ff07ddc15853c16facf7adf41fb6e059342dea0fc4c77ba90bac14c05490853d97d2fcac867e7e9e592a43ec9d6fe9f709d3330e562e804d66c5cb219b31941ddfcaf1795ab86e08e0de55b774b117ed763a0ac1aa555cd4397ea9e1e7edfb0a69f94d6829b06edb5bf046452597c24cf9acf0c6fbc214557f186e7793b09686204e90c36504404e3559e0ab29eb7adc79dea86b3a5a16b379c266d348688b0551d5b7c9507489944b3031f43a8b01a270001edf17c478639db8059e66bcfab3eb78160c85bd32085f8d1b421c9b4fa1fac612609efa4df480ccef2caa53a2cca51d9c5e1351781b44226ac1a8d1f01ac5a1c3fb8a66fde2660f9254824ca05211532fcb95592bf29dd8ea0b4b0e68a211f0aced5eadb67f1231ac56868469c03e660864cb80183305f22c5fb62c0ea5cc6d66f8b70035dfc98755c724b4fb6ad54201f13efa5e4677557ac5d793e1d648394b6e03a4b883a753c1501ffb2e2d2e6774e2f041802e9b510ad79b9eec6b57fc56623b02f21637fcd148f97b6fa344884bdb422dc08c7bb71ea57bd4bfece55044a564ea0d6ccf6d60728343d46b7dbbb1430de56af379cd5d0abf998009ab7d63aec1f916c38f0fcd", 0x1000, 0x4}, {&(0x7f0000000700)="02a547b1b1b85724cdb377f9308676c3f24aaa73792e68ab61b9dcb47d98a56e4e6ae32c81b0ece637f948e82afa67a5d96b3b76bbed656b29e251604917539ab8d57973d118abd128d50b94a32bf74f4bd6fa17412b144f7d61ed888e53462a22c9cefa4bcc5a90794b4a61bba3636902a0c1eeb1c5c3d0f4318162944a87544e801192851df3835092edee5a6f16d7408822338d537fd830c195", 0x9b, 0x3}], 0x8000, &(0x7f0000000900)={[{@degraded='degraded'}, {@check_int_data='check_int_data'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, 'mime_typemime_type{-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x39, 0x37, 0x31, 0x77, 0x61, 0x33, 0x61], 0x2d, [0x33, 0x61, 0x7d, 0x32], 0x2d, [0x34, 0x33, 0x74, 0x33], 0x2d, [0x75, 0x77, 0x30, 0x74], 0x2d, [0x77, 0x38, 0x35, 0x30, 0x7c, 0x66, 0x33, 0x31]}}}]}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x200) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150001c000000000]}) 08:54:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x507100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b]}) 08:54:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfe80000000000000], [], @local}}, 0x1c) [ 2531.623353] binder: 12675:12706 got transaction with invalid handle, 0 08:54:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000]}) [ 2531.714435] binder: 12675:12706 transaction failed 29201/-22, size 24-8 line 3061 08:54:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE2(r1, &(0x7f0000000600)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x12, 0xa62e, 0x401, 0x1f, 0x401, 0x3fd, "4ddc11ed656d3b7bb2718d795865d190c5a6a94f42d5203f9b75f65069c4e4886e820ddfdfa64b0a1d55f30022dc1d88ceebb1d611d1b88b1358bb2a4eb517d99d67e8dbb517b064ebedbfa8524d63c75c6761f181be8edd1cd84b94365bcd734d93ec69ce0457d7fd51a0dbcb024739b7bf02b532ad89ace04dada1aace36db576df7012e42da646b80f9b8195115c8b2ae897eed507cab91c57105357c2fe91b29a1dcdc6d54f1fccdd0b1126d4b0624d343b20781b7cdf3c426e89f3a13"}, 0x1d7) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext3\x00', 0x400, &(0x7f00000001c0)='GPL!$vmnet1}vboxnet1posix_acl_access&system\x00') 08:54:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]}) [ 2531.789859] binder: 12675:12706 ioctl c0306201 20000440 returned -14 [ 2531.821708] binder: undelivered TRANSACTION_ERROR: 29201 08:54:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x50d000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, 0x1c) 08:54:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x170101c000000000]}) 08:54:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000003c0)={0xc4, 0x9}, 0x2) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80004, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000440)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @multicast2}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lchown(&(0x7f0000000080)='./file0/file0\x00', r2, r3) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) set_tid_address(&(0x7f0000000400)) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x100) r5 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x6, 0x4000) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1]}) [ 2532.257832] binder: 13097:13118 got transaction with invalid handle, 0 [ 2532.287540] binder: 13097:13118 transaction failed 29201/-22, size 24-8 line 3061 08:54:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x50000, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x800, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000400)=""/145, &(0x7f0000000340)=0x91) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000100)={0x6e, 0x7d, 0x2, {0x0, 0x67, 0x1ff, 0x0, {0x8, 0x4, 0x8}, 0x2000000, 0xfffffffffffffff8, 0x6, 0x7ff, 0xd, '$selfvboxnet0', 0x4, 'bpf\x00', 0x1f, '!ppp1ppp1cgroupcgroupselinuxGPL', 0x4, 'bpf\x00'}}, 0x6e) [ 2532.345487] binder: 13097:13118 ioctl c0306201 20000440 returned -14 [ 2532.392121] binder: undelivered TRANSACTION_ERROR: 29201 08:54:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfeffffff00000000], [], @local}}, 0x1c) 08:54:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7ff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) mount$9p_virtio(&(0x7f0000000040)='bpf\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2090c20, &(0x7f0000000340)={'trans=virtio,', {[{@mmap='mmap'}, {@access_any='access=any'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x3f, 0x73, 0x7f, 0x34, 0x37, 0x77, 0x7f], 0x2d, [0x63, 0x7d, 0x32, 0x77], 0x2d, [0x38, 0x75, 0x0, 0x7f], 0x2d, [0x77, 0x77, 0x77, 0x66], 0x2d, [0x35, 0x32, 0x77, 0x7e, 0x7e, 0x65, 0x75, 0x36]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bpf\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rose'}}, {@subj_user={'subj_user', 0x3d, 'rose'}}]}}) setsockopt$inet6_int(r1, 0x29, 0x7b, &(0x7f0000000200)=0x8, 0x4) 08:54:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2]}) 08:54:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000]}) 08:54:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x70c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e4e7ad5cff767c46fed4500"/115], 0x68) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x10000, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff00000000000000], [], @local}}, 0x1c) 08:54:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0001c000000000]}) [ 2532.920833] binder: 13637:13677 got transaction with invalid handle, 0 [ 2532.956907] binder: 13637:13677 transaction failed 29201/-22, size 24-8 line 3061 08:54:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000200)={{0x1, 0x4}, {0xb566, 0x800}, 0x6, 0x1, 0x2}) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = msgget(0x2, 0x80) msgctl$IPC_RMID(r2, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2000005, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd]}) [ 2532.990793] binder: 13637:13677 ioctl c0306201 20000440 returned -14 [ 2533.019794] binder: undelivered TRANSACTION_ERROR: 29201 08:54:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4], [], @local}}, 0x1c) 08:54:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x715000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e01000000000000]}) 08:54:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce]}) 08:54:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f8a3c6c4a4f43c0607c47887f1294c4e91e0028d260179d6c501c1480ce57e62e1ca4df02f919ec3a7f9f4b6786976f7013ce48bae09f3df49ad1b6b01823137a517f5f260d8120df4a588cdea10000000000000000000000000008006e128c86cf259e70c8ec9fdbaa13890a2fe4d873682ba5644cca0729bdd12f9765629b55e334ed713b5a255beed53f08c6e3c8de741e836a1a9883432d5fc8a854993acdef64ba569e18587145ff84e7") mkdir(&(0x7f0000000040)='./file0\x00', 0x3) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x8) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x10, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 2533.480051] binder: 14101:14185 got transaction with invalid handle, 0 08:54:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x5], [], @local}}, 0x1c) 08:54:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0001c000000000]}) [ 2533.550137] binder: 14101:14185 transaction failed 29201/-22, size 24-8 line 3061 [ 2533.589784] binder: 14101:14185 ioctl c0306201 20000440 returned -14 [ 2533.634763] binder: undelivered TRANSACTION_ERROR: 29201 08:54:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}) 08:54:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) close(r0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x740000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) 08:54:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfc], [], @local}}, 0x1c) 08:54:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x221001c000000000]}) 08:54:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x8, &(0x7f00000001c0)={[], [{@dont_hash='dont_hash'}, {@subj_user={'subj_user'}}, {@permit_directio='permit_directio'}, {@fsname={'fsname', 0x3d, 'bpf\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x31, 0x33, 0x37, 0x76, 0x0, 0x77], 0x2d, [0x66, 0x36, 0x34, 0x65], 0x2d, [0x62, 0x32, 0x71, 0x77], 0x2d, [0x66, 0x0, 0x38, 0x77], 0x2d, [0x7f, 0x34, 0x37, 0x37, 0x30, 0x77, 0x0, 0x77]}}}]}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000340)=0x7) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x101000) write$P9_RREADLINK(r2, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:54:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10a]}) [ 2534.113322] binder: 14649:14654 got transaction with invalid handle, 0 [ 2534.122374] binder: 14649:14654 transaction failed 29201/-22, size 24-8 line 3061 [ 2534.139745] binder: 14649:14654 ioctl c0306201 20000440 returned -14 [ 2534.161938] binder: undelivered TRANSACTION_ERROR: 29201 08:54:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x346], [], @local}}, 0x1c) 08:54:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x1000000009e], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00000000000000]}) 08:54:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x4588b, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(0x0, 0x0) syz_mount_image$ceph(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 08:54:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x2, [0x10000000017], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11e]}) 08:54:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x940000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x77682a85}], &(0x7f0000000240)=[0x0]}}], 0x1e2, 0x0, 0x0}) [ 2534.620710] WARNING: CPU: 0 PID: 22968 at kernel/workqueue.c:2911 __flush_work+0x740/0x880 [ 2534.629679] Kernel panic - not syncing: panic_on_warn set ... [ 2534.629679] [ 2534.635767] kobject: 'kvm' (00000000ebfccec1): kobject_uevent_env [ 2534.637088] CPU: 0 PID: 22968 Comm: kworker/0:2 Not tainted 4.19.38 #6 [ 2534.643969] kobject: 'kvm' (00000000ebfccec1): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2534.650029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2534.650163] Workqueue: md_misc mddev_delayed_delete [ 2534.673757] Call Trace: [ 2534.676370] dump_stack+0x172/0x1f0 [ 2534.679682] kobject: 'kvm' (00000000ebfccec1): kobject_uevent_env [ 2534.680088] panic+0x263/0x51d [ 2534.680108] ? __warn_printk+0xf3/0xf3 [ 2534.686696] kobject: 'kvm' (00000000ebfccec1): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2534.689554] ? __flush_work+0x740/0x880 [ 2534.689573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2534.689588] ? __warn.cold+0x5/0x54 [ 2534.689600] ? __warn+0xe8/0x1d0 [ 2534.689615] ? __flush_work+0x740/0x880 [ 2534.689633] __warn.cold+0x20/0x54 [ 2534.727005] ? __flush_work+0x740/0x880 [ 2534.731010] report_bug+0x263/0x2b0 [ 2534.734683] do_error_trap+0x204/0x360 [ 2534.738578] ? math_error+0x340/0x340 [ 2534.742405] ? __lock_acquire+0x6eb/0x48f0 [ 2534.746662] ? error_entry+0x76/0xd0 [ 2534.750647] ? trace_hardirqs_off_caller+0x65/0x220 [ 2534.755771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2534.760647] do_invalid_op+0x1b/0x20 [ 2534.764374] invalid_op+0x14/0x20 [ 2534.767833] RIP: 0010:__flush_work+0x740/0x880 [ 2534.772538] Code: 74 58 e8 63 59 25 00 fb 66 0f 1f 44 00 00 45 31 e4 e9 86 fd ff ff e8 4f 59 25 00 0f 0b 45 31 e4 e9 77 fd ff ff e8 40 59 25 00 <0f> 0b 45 31 e4 e9 68 fd ff ff e8 31 59 25 00 4c 89 ff 45 31 e4 e8 [ 2534.791823] RSP: 0018:ffff888060e3f990 EFLAGS: 00010293 [ 2534.797288] RAX: ffff88805e3c25c0 RBX: dffffc0000000000 RCX: ffffffff8146100b [ 2534.804645] RDX: 0000000000000000 RSI: ffffffff814616b0 RDI: 0000000000000001 [ 2534.811917] RBP: ffff888060e3faf8 R08: ffff88805e3c25c0 R09: ffff88805e3c2e88 [ 2534.819191] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809b795690 [ 2534.826475] R13: ffff888060e3fad0 R14: 0000000000000001 R15: 0000000000000001 [ 2534.833783] ? __flush_work+0x9b/0x880 [ 2534.837760] ? __flush_work+0x740/0x880 [ 2534.841753] ? insert_work+0x3a0/0x3a0 [ 2534.845646] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2534.850761] ? debug_object_assert_init+0x17b/0x2f0 [ 2534.855790] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2534.860900] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2534.865494] ? mark_held_locks+0xb1/0x100 [ 2534.869646] ? __cancel_work_timer+0x1d3/0x520 [ 2534.874321] ? cancel_work_sync+0x18/0x20 [ 2534.878469] ? __cancel_work_timer+0x1d3/0x520 [ 2534.883079] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2534.887665] ? trace_hardirqs_on+0x67/0x230 [ 2534.892090] __cancel_work_timer+0x3bf/0x520 [ 2534.896526] ? try_to_grab_pending+0x710/0x710 [ 2534.901113] ? try_to_del_timer_sync+0xc1/0x110 [ 2534.905790] ? detach_if_pending+0x4f0/0x4f0 [ 2534.910214] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2534.914800] ? trace_hardirqs_on+0x67/0x230 [ 2534.919127] cancel_work_sync+0x18/0x20 [ 2534.923155] blk_sync_queue+0x33/0x1c0 [ 2534.927058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2534.932600] blk_cleanup_queue+0x404/0x720 [ 2534.936844] md_free+0xcb/0x1b0 [ 2534.940139] kobject_put.cold+0x28f/0x2ec [ 2534.944384] mddev_delayed_delete+0x34/0x40 [ 2534.948709] process_one_work+0x98e/0x1760 [ 2534.952976] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2534.957660] ? lock_acquire+0x16f/0x3f0 [ 2534.961654] ? kasan_check_write+0x14/0x20 [ 2534.965900] ? do_raw_spin_lock+0xc8/0x240 [ 2534.970150] worker_thread+0x98/0xe40 [ 2534.973987] kthread+0x357/0x430 [ 2534.977356] ? process_one_work+0x1760/0x1760 [ 2534.981855] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 2534.987405] ret_from_fork+0x3a/0x50 [ 2534.992913] Kernel Offset: disabled [ 2534.996778] Rebooting in 86400 seconds..