0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2020.280995] binder: 25912:25913 transaction failed 29189/-22, size 0-8 line 2855 03:50:13 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x4000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 03:50:13 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}) [ 2020.333010] binder: undelivered TRANSACTION_ERROR: 29189 03:50:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190b000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x60, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:13 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}) [ 2020.525513] binder: 25940:25942 transaction failed 29189/-22, size 0-8 line 2855 [ 2020.546056] binder: undelivered TRANSACTION_ERROR: 29189 03:50:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xffffffffa0020000}]}) 03:50:13 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x170, 0x2}, &(0x7f0000000140)=0x8) r2 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0x183000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000001c0)={0x6, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000200)={0x5, r4, 0x10000, 0x5}) 03:50:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900f00007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:13 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}) 03:50:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x50000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2021.117294] kauditd_printk_skb: 2 callbacks suppressed [ 2021.117307] audit: type=1326 audit(2000001013.838:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25922 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2021.227089] audit: type=1326 audit(2000001013.948:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25965 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031909000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:14 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) 03:50:14 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x5, 0xfffffffffffffffa, 0xff, 0x6, 0x0, 0x100, 0x2800, 0x4, 0x236, 0x4, 0x7, 0x3, 0x400, 0xfff, 0x2, 0x6, 0x1, 0x50e7, 0xf02a, 0x10000, 0x1, 0xc996, 0x1, 0x2, 0x0, 0x400, 0x97e, 0x9, 0xb969, 0x8, 0x5, 0x7fffffff, 0x7f, 0x5, 0x7, 0x1f, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x7}, 0x1000c, 0xff, 0x7, 0x0, 0x1, 0x200, 0x4}, r1, 0xa, r0, 0x8) 03:50:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xe000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xe4000000}]}) 03:50:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900050007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:14 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}) 03:50:14 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) r2 = dup2(r1, r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x400, 0x770b, r3, 0x7ff, r4, 0x3, 0x5565, 0xb2}) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f00000001c0)={'gretap0\x00', 0x4000000000000}) 03:50:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0040000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x900, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2022.021766] audit: type=1326 audit(2000001014.738:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25965 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900060007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2022.117188] audit: type=1326 audit(2000001014.838:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26011 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:14 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}) 03:50:14 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x400000) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x10001, 0x20}) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}) 03:50:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xfeffffff}]}) 03:50:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:15 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:50:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000010000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}) 03:50:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x5000000000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2022.912022] audit: type=1326 audit(2000001015.628:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26011 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 03:50:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2023.059592] audit: type=1326 audit(2000001015.778:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26054 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:15 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc01, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) r1 = socket(0x111, 0x0, 0x10001) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r0, 0x6}, 0x8) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'tunl0\x00'}) 03:50:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031902000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x400000000000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) [ 2023.818687] audit: type=1326 audit(2000001016.538:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26054 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x6800}]}) 03:50:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031908000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}) 03:50:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x6000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:16 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000007c0)={@empty, 0x0}, &(0x7f0000000800)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'vlan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000940)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000980)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000009c0)={@empty, 0x0}, &(0x7f0000000a00)=0x14) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'bcsf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) recvmsg(r0, &(0x7f0000001ec0)={&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/255, 0xff}, {&(0x7f0000000cc0)=""/12, 0xc}], 0x2, &(0x7f0000001dc0)=""/237, 0xed, 0x1}, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f00)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000002000)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002500)={&(0x7f0000002040)={0x494, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xb7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x25c, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xb13d, 0x40, 0x7}, {0x2, 0x9, 0x1, 0xfff}, {0xfffffffffffffff7, 0x6, 0x200, 0x100000000}, {0x44ff, 0x5, 0x0, 0x1}, {0x8, 0xff, 0x20, 0xfffffffffffffffb}, {0x3, 0x200, 0x1, 0x2}, {0x1ff, 0x3c, 0xd88, 0x1f}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x1000, 0xd83, 0x4, 0xfff}, {0x5, 0x4, 0x5a04c3b5, 0x9}, {0xa, 0x8, 0x4, 0x35}, {0x80000000, 0xfffffffffffffff9, 0x101, 0x100000001}, {0x5, 0x400, 0x80000000, 0x9a17}, {0x5c, 0xff, 0x5, 0x9cd4}, {0x3f, 0xfffffffffffffffc, 0x77e, 0x1ff}, {0xfffffffffffffbff, 0x2, 0xfff, 0x5}, {0x7fff, 0x5, 0x2, 0x7}, {0x3, 0x400, 0x3ff, 0x3f}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1b2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xfc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x800}, 0x40004) [ 2023.908521] binder_transaction: 9 callbacks suppressed [ 2023.908539] binder: 26087:26088 transaction failed 29189/-22, size 0-8 line 2855 03:50:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}) [ 2023.995415] audit: type=1326 audit(2000001016.718:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26100 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2023.999300] binder_release_work: 9 callbacks suppressed [ 2023.999308] binder: undelivered TRANSACTION_ERROR: 29189 03:50:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190a000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x2000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}) [ 2024.204523] binder: 26121:26122 transaction failed 29189/-22, size 0-8 line 2855 03:50:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x6, 0x4b2}) r1 = socket(0x800000000000a, 0x80005, 0x0) r2 = memfd_create(&(0x7f0000000100)='cpusetdnodev\x00', 0x1) socket(0x0, 0x3, 0xe8) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002000103e6c717c3244025b0653ef803a5a18a5a0428c5a84eebe3a5320ca7f86619401fb24787fc32d89fb17d2e12ce42bfffffffffc0a69b704d148ed6026b4a19a9171a8beaaa62fa0ad8a264ef3e276cce140da87ec02131d2d1b019930c3d6c82e5027ccd2100af47b3a09f4fdb21e10dc58d391d113c8984af13e872e472ff011028aed554533bda1a57dcfae405fd9d1532fb7f622780d2d9cb12d4db8c0224be48d05309c9ef61fb822ff9f83a2c76c51049"], 0x74) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) getrusage(0xffffffffffffffff, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x741) [ 2024.249763] binder: undelivered TRANSACTION_ERROR: 29189 03:50:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000b0007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2024.777674] audit: type=1326 audit(2000001017.498:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26100 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}) 03:50:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x4800}]}) 03:50:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xe, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900090007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:17 executing program 4: r0 = eventfd2(0xffffffff, 0x801) r1 = getpid() fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) [ 2024.875493] binder: 26151:26152 transaction failed 29189/-22, size 0-8 line 2855 [ 2024.913624] binder: undelivered TRANSACTION_ERROR: 29189 03:50:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 03:50:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900100007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2024.935742] audit: type=1326 audit(2000001017.658:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26160 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:17 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000dc0)="861d6a4db2db6efbf11bbd235ae84bac1735e94ea21dc87551f70d0e61f9e1959b1bf83a412ca5e0c2c6eb99fca8798fbe50f334e7e624fa11c53e315cfd59b824232280f9a5004ddfc12557db2e84ebb7df9fa0d5e4566cd7e7ed2a05a5c61c252988dfca61cd2bdb5937920d18ec077bcb1f3c1bff8c6590f66d92100c9e7ecf7039c8032fcb7bd023f091b689e6994367e7e46f87cbadd3e7c5bb2fac34ec1e27ff14a0d20bf6a3fccd2057a6d114e3d7ff733d662ac46ad78e861ef850686b3fb12fcb5097eabb422f597872ff5699b54d4c53b8bd348379683e871ee81e9d8251d6f0e5c78a8d781253a9afa4d5de3bbb77c85b1e90ac0c0d1493921424e17a092de3c4020b0f1d38e163cba4507b6ad6e94d9ce16c508f99ab32144941bb4e4c72ab978bcb5b190fd132a11e92fad914fbe0e3b7ffe5ea8b93e7e78b1fc1cbf7eb9b002743ad594d3a64359c0a365335f1c2b8c6135cea82ccf24c7b987a8de20aeaee8d6d8662d1978cffaf9ebe8a19c7063630e23984d7f7b43febbdb7945e2c7a878171670dc48e92bf53521f6ec0152e97d84a84051917048279deea8674ea6a966ef69b548043764f56d06543d58d09ac2bfc18850992ad90c4e2506c5baf8626d90e376ad89eaecdcea4bba619cc86a74b7cefb9e0458c74f1627e19882617658c99c0869d27865771f1e78ce34c581fdfc0c4baeed764f3dc1ce1d38bcdb9bf724ef8f832fb00fcc4b77353cc91d78eac99fa0a4039d0c0c70f197463f444e4a6b787cba0f154cb53734399c08542179eb15b9a9ad3c5b505d8829eb2849f55b41cd8ba0d8309dbbdd197074b96996e387246d1f48be3271c2228a0a0e8cd31b3b72e1a0eddb53df993cd63dc8428b363df65947032906e944bbab6c45af4ac16f2a8241dd49f2dceaa0eabc945139f829337a63f208cec78787542eeb9bb2ee5b70caa5df546886e30be892649cec00245dd887e85e83c6c7bfaed229feed7d807554f1817ab999840ae70a976ae128c6904a4fce9ab4d4c9e15f56f1dfb52231ba0e04a96ce730d35c966fef8ade21360818641cdd3bb449019e7a1841e631683bc91da457d3608bff3e146c934e383dc25877e51f450642ff7258298e26f7967dc2a63b8acd01760c566c0b6ac02192a30f009270f3de9f0f6956fb06b09a12c2a6eed44836a8ae4143d157bdfbde66129e5cea0151d009e4ca1342e5a9b79488f7fb258568878978dff8aee84ae9e0447c8c640f1fe7eb5e11ad6871cb47fbff87466a2d4ae008f24ceb2a53dababfcdc34b805bb2b4c9075059764463ae230ec84e1a35629f7aeccab33b172814241a28f764f42c220e8bea09411375b2e89a7ae200b8598da2a0513b429d61eb9128b2d47cc56965750d40d9c24fe3083f477c8328fa8ff9f6b0cd50a9db4d49da821b9f84e194851f8bb3d50688e1cd8aeb401c9b81c298ba9d3ee74aa304a5f2e08c62488d64218592c4f90cdef0df1bb46fe262d1ec2f520d610f1093f2deb6820bc6fef2d9e32967a4d8cd81c399bd9b0ce17907f812fd07ddae1c8cf4bc965e7184552385f866bb89f0bce3a510cde5a5be0ce9ddad474f219320cbd07347452cfb983181e97910cf1f3cfd22b6626cfe7b91a0c4572c24ea2a0189eba66da5993472b57d987822ed65251faf2c884b6e9b7c1e179fde498c19b30d27fac2901e110c4cb724c1f4f6d9401e22639705bb16c2c8c3b55ee4c9b24bdc59b3a941e17e0b07919e395e1ca6ea8d5ed116236a901e6fa244065fb9e53b0c380c3bb9ab6e9bf7b207814aefa8fc6cc998ba9527eaf3ed788790f82e2871e299161b5363386b1f488a58697f58e63820952b57d20ddcf216f82c7c9d6c63edf7b77f55f43e7d17a6a600a15452eed5b63488b496b533e623bd3fcfc78463aba2f991c60f29beb4bc31148b71e5e002ce5ce86f7c15ec388401e7a4dff6840b1be2e3265d8acd41f0209cc9974b1147b376e109eb6886553307e5cf7cda89fd1ec569716d90ec957f5356857be520c2240e7904847d7ca95e2be9bc04451320fe053f169848acddfe1184985cdf0f6cb4cc73ca9b439674c4309d91ed95b18af812a803922f15e2a0bf0360822224171445a330884bab45f7aa90863936fac5481e9ed97efaebd1246b5b66b920399eaa6b0b0407b5a3fe872cf44c0e2ab01470edb2e39c9cdf200f87137b016f3be7a581a0964563f0b49cfb3ab9a4c1e65823c1bdee3c5ec336579bf57d466fac46f636feebe92d290d01ad66ddf20e3e3c1f80b6a4541ba6d86b3338e3a4de1d45693de4e1e29abb814d76de4372cc98f4b8b14d64c1b493405a1994ac9ddcc574da37975308c06cb961422e0dd8a7df14266a08fcd0ea5b60386c6f8aa84a5c4d86dc607652d698e4a86c6b24239872257eca5cea88e9a0f2a1c4e763bcc138c831bbfad4d495327a7b4550a63b8d9aefd00c11a0c62375285e3d516ca12a82e4415a7f967f33cfea39dce3fd9a93bc1fcd71fb4c650b0128ee6fcd8dfb6e56a9e1c059fd74eb190370f2b4d7707c3d61997d0b291503f25b234921eb154e38e27817f37dfa6f55a2d55e6bdd3d5d3b859b4ec38214407b8252d64947508f4f452939e5287e5ace658a5dfbbf52816bd45321f0aa5a8514eb0482e84676fe6b07d4da25de9f58091f5ffc3b570c16c0a66b8491581a4db9f41ba5d05dac68f4b989d4192f629eb6ba4876863218f1cacd3c499d9b8185d8135f71f38250b77d9548af2e9fb214c08f1d682c371f1bf60f4728a26f90118b5525cce7dd1a139b30826729d900751225049969b75a30cc44bb24d2586fa1d722ab180ef7e15cd54e56c105fd095c78b820340cce373b1791a9aadbdd276bc93f3d90625fd2cb55d01e36767fc9e1b45f44c82bd1c31e8f54af20e6e23611c90714f59b01a67fd8e22e0d47966cbb78c69bc0db1f70c6d930f5101b959d10420661e8cefe0f51645fdb4e7f5bddbf96632cf35c828e5b549753b80354136a2be2d0d5b4b4ef8c10163f6e35f85ffe83ac0808def6613702ebe587bdc27b7e78089663774cc647fe66381c1ad6cc1b0256ff465f851f92b1187b47b2457e35d50e563df3dc91b538c1043b3586c8ba92e9b0c64ff5809ee38d260f5382bb58ed3bc2464bc1052c515f4d2c0a850a4b92d8cc04105a99a30843f1cfcbfb9d93c57c4ea945f7942fb5a68c5277eb18dc5b4874d915d79fc060fbb85fcde6d764bcb1149fceb5189378ae7e0a112eb3c04071ab98c495e844e0d4aa7b110f696ae466242c2be8a2fbd6c100a9f5cb77689c445c759bd69f415fb8fe4fbe0dc9d1d3c703ed2d8c3a03ab2a9b64a68ac96cfa8bd345d65981bb7121c1c69ae466ded874d2fa7147e0d4f53667ada5784f3c6d9ce585bd25211ceda9934a875b0c5259b6e539e3f434aa297af3e905b821c1215d670240a49a01dd99b50bae2f27379d553d388da0145ed7da42607030903cab5f6c51fd465e0d999bf2f4d5800bed95977ca90cc6e3fb96b8674bedf2dab4684d380dad57d7c5d2cce3de7424c2c44fae7eac51bcb39e5c92280aef3e8a445e0df2d4db5ef96eecf1f019fdf970e0efbaca685b769f1d55b9aae6ef7ffba7f3ca1930c6ddc10ea2cfc71069b1304f15764e8375dea98375633bc44411848b9fe8ff8de386196f4091e5e2f2656d5e9b376c5b6d8d23648fa679f43cc76a329a040b10bb64b751a554c56741ddf6929c281c45a5b914e79b8f58484664c62b3e1d3d0edc44566029a4675e9fdb9a18438292809753a4fa0f1bb6dad0e4067518e577c04964bb1ddb1e9b0f8ea2c873d7834625f04005fe51a8e834577beecdaaca5889cb0c0b68f62b8255b4939acc2f7c351106dcd27e13d8fa28ed358e9f899da04b9f7e0de6d78c40250e596152cd0ea0af4a639fd63c0ad90eb5303fd52b3ee4de21614f74a6d7e9da405d746f42a43be6a16d04322fe12d2590b6a403daa0711a6ddc1572aa8bb8fe69aac8e8d3b6106501cbfa226defebd195740cd317e17a5eee1f71a1d7773307cfd1b549f7ee82358577a5df05cce45dde0b41c897101072330d4d945047f647eb142c16f3ae93d9d5c4083ff0135ee685f59e371447c0d0db9e0e05bc35fa7957afcfaa81524968e77f303d213a5e6d1a1744265c9ff82e572694f4a2fd5b74e89ac5ea4c2cd2a54c736866386683319a480fc2ffbad91c8f81fb7720236f8318ce4ab7328dc4c9c1bbe100af5dd937de03cff8690501e24627e9b027b7137173e987d8466ed7843fd4182751db7545dd302a82a03400e153d4756d7fe106772dec77dd2a5877728e35c0174ef9385a0ae08a1fbeaef6393d0f7a9dce12e602b5aca449ab47498dd141c7ac3b01c7a6f1446f31260bb3bdccd991dcef41ce6ff668384c71969dcc0ba1adde43ff7212365a160347fab35d847ed692d0f5e6d2574efc218351886bf8c21aa34e0b3ee5b7d6cc2fe11cef6ab796d2aaffc723c8a7c634a3ad52db36bf75118378f80a4e9adc2b6f9370e02cef00ee70cf172d40c28765ef6db8fb65ab8a9b24ab2cf1983c42dd5fee573d8e0a03c50dbb0dcdd51f80eaabeb1bf07ed5a4798706887ba5e7eee978c47f8c910e281c1ab506ac7913681c037afb959945eb21f8dbee81e4557a6ea0cdce3f10e8fae1f345fceaf3e8a5a3f215e66a012169d2d70658256de30caa12a782d2328e89aeb642d15efceda5acb98be3cffd060f8d9e66b84bc338444c2de74b92e8fbdf28af287b26d5f052973c4fd6bafe215cbfcdd7c84083a0363d538b6674cf2d5b2644a62dd9c27faab968b783e164ca98b106740e2b77990b52d6d1f46be6480e44b52f0709988080cfafd5f181e136b1c9309aeba8c93ca4995c9517b1b9463116e8faabffca204026234e25b665a494eff44da374fb5c045ffcff7e3b2e62f91efb7c9164dcbc6859c10e823103420243c52119e453caadc7fee3bbfccc0cd3aa25cd00f1d355b7996adb1dd874104e554d450363b680579e68a37329eccfeaefd4e627536a8f2b64bacd90637b8451611a69d92e754bf86893bcef02e9932ce102fa75db3e2c3dc3eca06c5ca3fe7f8a4e142c192cf0bdae05be8dd61624ffcfb5457a39bfbcc01c929cbecfd2bd14068a7a9dc0f4161ae5376050b81ed2a6ca2faeee3f7e70181367abf2d8f2f4ed72654dde77e4a309ba6817bdbd1e7435267f195a00e1243d44fe1e2b724d281fba7fb6f6adfadcffc1e5ab99bf4ecac88eb882595baf2174f10af322e3cd6ae40f6ad86cbe261436536e1e01834ae48b27b0fa2485cc4a5835d34e87ea23f08dac6cf6ab872cb378883aededece8aa14bd439c54d28c1a0f517551bee2ac312e57231dc74f8cbf71172cebbb3ac784fecf14547254364de6470c219ed8c5775b1f8af1e7cf8fbd5c7b43020b1e6d8f596f2c1827ae4e06269453bfad6de89e0cb3e78b761bc32d05a6985c3d0d5acc0a8a4f44b0a52c951cc1290154271bf146e89b93c76e9f3a1b70da50cbcfb8ddaf174c775591b9a9ba1cfb2dca61e978b57dc087c44c228b1a3abaea8e35677ca3a3b5469ccb658a5fb3465bd7bab31df1c39d37552d3925606b2c39b1047e2c50bed2faeddcae4d642c01bc6697e09b7a966670d2ecfbd56ec87c7177e201188138a588b23f2dd0ddaf0ae20f664dd395819bbf15ac1ec79d2f17d7ba6e22323532db73f04417ad73185e3c6fdf23aa6355482f351e1f30b36bf68d136828dd580751cf1d916fdcd5a465429210df5c6", 0x1000, 0x1000}], 0x4, &(0x7f0000000340)={[{@umask={'umask', 0x3d, 0x24}}, {@gid={'gid', 0x3d, r1}}, {@umask={'umask', 0x3d, 0x7fffffff}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_role={'obj_role'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@uid_lt={'uid<', r3}}, {@obj_type={'obj_type', 0x3d, 'em0}lo'}}, {@hash='hash'}]}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x0, 0x8000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000480)) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) [ 2025.026305] binder: 26169:26171 transaction failed 29189/-22, size 0-8 line 2855 03:50:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900020007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}) 03:50:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x91ffffff00000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2025.114066] binder: undelivered TRANSACTION_ERROR: 29189 03:50:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2025.279146] binder: 26187:26188 transaction failed 29189/-22, size 0-8 line 2855 [ 2025.300544] binder: 26187:26188 transaction failed 29189/-22, size 0-8 line 2855 [ 2025.317647] binder: undelivered TRANSACTION_ERROR: 29189 [ 2025.324749] binder: undelivered TRANSACTION_ERROR: 29189 03:50:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x10}]}) 03:50:18 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x10001, 0x8}, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1}) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}) 03:50:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190032b407000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x1000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}) [ 2025.784679] binder: 26202:26203 transaction failed 29189/-22, size 0-8 line 2855 [ 2025.819454] binder: undelivered TRANSACTION_ERROR: 29189 03:50:18 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'nr0\x00', 0xfffffffffffffffe}, 0x18) 03:50:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2025.931376] IPVS: Unknown mcast interface: nr0 03:50:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900080007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2025.975091] IPVS: Unknown mcast interface: nr0 03:50:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}) 03:50:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xa00, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2026.009712] binder: 26227:26228 transaction failed 29189/-22, size 0-8 line 2855 [ 2026.066885] binder: undelivered TRANSACTION_ERROR: 29189 03:50:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}) 03:50:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x7}]}) 03:50:19 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x5, 0x3, 0x3d, 0x6, 0x0, 0x7b, 0x6, 0x8001, 0x5, 0xffff, 0xfffffffffffffffa, 0x0, 0x100000000, 0x2, 0x9], 0x4000, 0x8000}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xa050, r1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r2, 0x2, 0x1000}, 0xc) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x800000000000a, 0x80005, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x8001, &(0x7f0000000080)=0x2) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd, "52d06bad51898a5784d338726e248ba99136b5048380a08e281e36c3ce0fc360c6845bc41a6eeb51bcb4fa70374f0b842166c1dc68276ef3a25e1e8498921d", 0x2}, 0x60) ioctl$SIOCSIFMTU(r3, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000140)=""/230, 0xe6}, &(0x7f0000000240), 0x40}, 0x20) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r2, 0x81}, 0x8) 03:50:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000f0007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffa0010000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2026.628780] kauditd_printk_skb: 2 callbacks suppressed [ 2026.628796] audit: type=1326 audit(2000001019.348:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26210 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2026.709563] binder: 26248:26249 transaction failed 29189/-22, size 0-8 line 2855 [ 2026.735566] audit: type=1326 audit(2000001019.458:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26256 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2026.738765] binder: undelivered TRANSACTION_ERROR: 29189 03:50:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}) 03:50:19 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1ff, 0x8000202) write$P9_RLERRORu(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x1d31c052, 0x3f, 0x6, 0xfffffffffffffffb, 0x3, 0x10000}) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x9, 0x1}) 03:50:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900f00007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x300000000000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2026.878912] binder: 26262:26267 transaction failed 29189/-22, size 0-8 line 2855 [ 2026.910208] binder: undelivered TRANSACTION_ERROR: 29189 03:50:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}) 03:50:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000b07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2027.529874] audit: type=1326 audit(2000001020.248:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26256 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xfeffffff00000000}]}) 03:50:20 executing program 4: r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) clock_nanosleep(0x3, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) 03:50:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x7, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) 03:50:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000907000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:20 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000100)=""/96) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x101) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x3, 0x8}) 03:50:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2027.676000] audit: type=1326 audit(2000001020.398:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26308 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000b0007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}) 03:50:20 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'lo\x00', 0xc128}) lseek(r0, 0x0, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0x1ff, 0x4}) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 03:50:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x40000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x4a0ffffffff}]}) 03:50:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}) 03:50:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900050007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:21 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000d, 0x3, 0xfffffffffffffffd) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x6, 0x4) 03:50:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x1a0ffffffff, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2028.465076] audit: type=1326 audit(2000001021.188:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26308 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900060007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2028.585955] audit: type=1326 audit(2000001021.308:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26352 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 03:50:21 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x3) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xff0f000000000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2029.371651] audit: type=1326 audit(2000001022.088:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26352 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x3000000}]}) 03:50:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900003f07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:22 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}) 03:50:22 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000000c0)={r1}) r2 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x70c0000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2029.466373] binder_transaction: 9 callbacks suppressed [ 2029.466390] binder: 26393:26394 transaction failed 29189/-22, size 0-8 line 2855 [ 2029.505224] audit: type=1326 audit(2000001022.228:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26402 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2029.537141] binder_release_work: 9 callbacks suppressed [ 2029.537150] binder: undelivered TRANSACTION_ERROR: 29189 [ 2029.537637] binder: 26393:26394 transaction failed 29189/-22, size 0-8 line 2855 03:50:22 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:22 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80000, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) [ 2029.566481] binder: undelivered TRANSACTION_ERROR: 29189 03:50:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000607000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xff0f, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2029.698241] binder: 26416:26417 transaction failed 29189/-22, size 0-8 line 2855 03:50:22 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2029.740551] binder: undelivered TRANSACTION_ERROR: 29189 03:50:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x6000000}]}) 03:50:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000f007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:23 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={0x0, 0x3}) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x80000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x20008, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xc07, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2030.304318] audit: type=1326 audit(2000001023.028:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26402 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2030.393838] binder: 26446:26447 transaction failed 29189/-22, size 0-8 line 2855 [ 2030.413640] binder: undelivered TRANSACTION_ERROR: 29189 [ 2030.463373] audit: type=1326 audit(2000001023.178:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26450 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:23 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x803, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') ioctl$sock_bt(r2, 0x8907, &(0x7f0000000200)="8213093cb76ab8d88fd85d8168dc95900ff94d3130726598d140696c39879151ad8cf4fafc5429ee0fb08493756515a506bdd24900acabb9a579c3465fb1887cfdef8f575e4710736880bad38b0848e934a6a0efacb79a1d33ad0444045f0ba52656c758d92b904ba8fb51d33ecc8f62dd845dc9fb4f776e65f6356f1ce02a60016b0d3a4694ffa3624bd310b002c96aa2e1b03a5791a695b0d8984bea10ab7dea4462f13238c31200e34d6c49f4cf1577b116c2b99b851514b84bb02333a89c8d9c528351320c32ea3d0950c6481ccd5b35d7acaef66bb6022bd5e6eca3a3d8") getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r3, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) socket(0x0, 0x0, 0x1) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000300)) 03:50:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900b43207000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xa0010000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2030.528760] binder: 26457:26460 transaction failed 29189/-22, size 0-8 line 2855 [ 2030.574415] binder: undelivered TRANSACTION_ERROR: 29189 03:50:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2030.718259] binder: 26477:26478 transaction failed 29189/-22, size 0-8 line 2855 [ 2030.750772] binder: undelivered TRANSACTION_ERROR: 29189 03:50:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000507000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xa0020000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x300}]}) 03:50:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:23 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = gettid() sched_getscheduler(r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4111600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'rose0\x00', 0x5}) [ 2031.282827] binder: 26489:26490 transaction failed 29189/-22, size 0-8 line 2855 03:50:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:24 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) [ 2031.333326] binder: undelivered TRANSACTION_ERROR: 29189 03:50:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000a07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x10000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2031.474810] binder: 26508:26510 transaction failed 29189/-22, size 0-8 line 2855 [ 2031.507544] binder: undelivered TRANSACTION_ERROR: 29189 03:50:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2031.657573] binder: 26522:26525 transaction failed 29189/-22, size 0-8 line 2855 [ 2031.691637] binder: undelivered TRANSACTION_ERROR: 29189 [ 2031.693435] binder: 26522:26525 transaction failed 29189/-22, size 0-8 line 2855 [ 2031.706890] binder: undelivered TRANSACTION_ERROR: 29189 03:50:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x5}]}) 03:50:24 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xd7, 0x200) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x9) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0xb, 0xfffffffffffffd79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc4c85512, &(0x7f0000001000)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0xc0000000000, 0x9c2, 0x5, 'queue1\x00', 0xffff}) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0xfff, 0xfffffffffffffffe, 0xdf, 0x2, 0x8001, 0x2}, 0x9}, 0xa) 03:50:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000f07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x700, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2032.104540] kauditd_printk_skb: 2 callbacks suppressed [ 2032.104556] audit: type=1326 audit(2000001024.828:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26486 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2032.242797] audit: type=1326 audit(2000001024.958:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26541 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:25 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x14000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x39, 0x2124, 0x99, 0x2, 0x52e693dc}, 0x14) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) socket$kcm(0x29, 0x7, 0x0) write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x1}, 0xf) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0ffffffff, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000a0007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:25 executing program 2: syz_extract_tcp_res(&(0x7f0000000080), 0x9, 0x2bf40aff) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x4c00000000000000}]}) 03:50:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x6, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:25 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/227, &(0x7f00000001c0)=0xe3) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e23}}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) 03:50:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000207000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:25 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000000000000000000002c0000000000000300000000000000000000000000000000bbac6f7e33caa4549041e503973979b6f912b5a311e75dc2bd049d21bf3e0513824172bff3a01e389931481b6f8964fc6ba1956cb67aa40b2ed54f03876e1e5559e6cabafe21d00ebf9169f7163eb2d99aa3790c4cba16b9abf6ffe99245a9265294d84bbb1429058dac65c270f5d5964212dbedf7c15f778ccd5541ef2a1c32c3dc7d022270543ff555a242e890f4fd39f4904fd3b05a5b62b78dce32078c792e5a3a3e5a1f053ee27bb544383b18748c4c692a16adade58d8a6b1034b2c85a6109a1"]}) socketpair(0x10, 0xf, 0x20, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000040)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000540)={r4, 0x0, r3}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r3}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r3, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() epoll_pwait(r2, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2ac590504e2e", 0x5a, 0xfffffffffffffffb) keyctl$invalidate(0x15, r7) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000fd00", {0x2, 0x0, @local}}) mq_open(&(0x7f0000000080)="6b6d6e67d5f50ed22495c60c9470cd24fd7ffe00000000", 0x843, 0x0, &(0x7f0000000040)={0x0, 0x7fff, 0x5}) r8 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40, 0x111000) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)=0x1) [ 2032.999040] audit: type=1326 audit(2000001025.718:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26541 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2033.107557] audit: type=1326 audit(2000001025.828:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26579 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000f07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:25 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0xfffffffffffffc00, 0x4f}, {0x40, 0x6, 0x20, 0x9}]}, 0x10) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfe80000000000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000000c0)={"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"}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000500)="6068f5adbf725edc4d4133484f7c4c2a388d2abd9a33a72bcccc76c7434691f7dacf18f64d119948a1acc7e8bec43524bba6170b81bc2f3f3321c2eac558ac3c539d1c99f5feb7e70c9f455c7ff06c35790a47c97f0965eb098ada8a4f610e03ebad2249680ad51c190c040c22bf17e8098f82940867b5541cf5f7fcbd47ba1dec0573fb94d007b9fa91cd2f19c5a68f42c2800d8ab8486a5571ef3d634fb30d5cf898815ed82ad9af0cd924a67854c621485997e28bf6a538abf1312d9f235e6c16986c8d157f5566f1b299d2804325b374c53a6beac588fd023865e62102e4c2e904173655ffb9c4c310c9c80ee459040ed40921105bc7d2d0d8ce953aaf271be4064cf7cf7e26ea3a88236a5f9e495b59abc8cb50f5d4dd9aae13c645226e953304dc444b3fb29f213f2d632622cb5fe3e077b42cbd0024df03721ff16c1a2730eb53dfc8103738f137fc9180328d751826d2c6bfb968894815fc559125a3af3127131a4c0b1075e0fd30f64e690e91b9fad27bff491a7db2bb097a07cb7555daf77800d351c212c995f92d0b6bc64c32a105a9dcba0ed2bd853be8d532b3115a4483b7ce50b7b14080dac0428fd6fe5ec58341438f210dc91f10101d3dad8b818f101eca6d178f7666e72f1b3711166d3957762da1e7a1b916a12fbc0ce022c3a9b262c9be29a5c2455f9edf1a2f8187013900861fb8788a8b5ae6524f9f092af3d55961844581725867bbd4068bcb6a8514795fd7ac1e11b942c5f21c34b87e95b972aea635a60d57d2dc5acfb6ac0f3c573a4230da036daa29043ff433d34b4d383ab55076d721cedfa55222e815b1cca4ae1b943372df4183307f5193f66ac5e544259c07aabc906479a2bc5d30daeec247c178d7dceca84176884544dda9af47e41547eac7449a7aceaf2b861c6ce579342f1284e4d5b35a52d947bf6469cb970461c4c7ae1719042c550aabbe5923c38d1cba5a428ccacf3bcf457a8421a82d8e165fa82d11d641d02805473c0e159777d31e890c8773232eea3823178969cd277ee79c786ee93066d64c4fa3a2d0346aaa33149a9400a8af52ec772819095f112b60cfc552af32d33a1970e862c1d5604f07bcf172a38607df3273a163d6132af9b43d9dd1ab8cc20917cfa87eb800a43737a437de733ef4de3e929fb12773ac3afbf49d13377338e898f841a7556f49957c2247b0f0631955793dcd1cfec3732d417e6dfa03ace2cfc8aceda13290353af979a158d057aa9b10519035b6330d867318f81b190c689853a427be216474a2156cc9cab7ba6b3aca53b707bfc44145664a761bd145db8467bdd78a3b9257bec94d0fc3146e9651f9b9dce56c3e10982d2f3a40bcc11da5ddd6347ef3232dd730dc5be91a50489b9e5a213486156bc8963153a281a02e99b18555b88f12aae28db959feaad20598895da9e7268703bb62e5541a6fc1eb3f28ead6ed9c4aa2a14c6d99e463c04f10e8a5f27772e09fcd6697335759d3a13ef148e0dbba4d41cce056f7b472db49cfe93a9352301aca6261dc667c3e121d0f0dc01aa1ea27f9ccf3747f296e1dc68788a223357dafd0cddbfe959f17ab3820e044a7533177234ad96090273dc89eff03812a835ba43fdc6f9f87f92bacb17952bd61cd8cf1753e607786a3451e4b5ccc26f075f75b19c419ed8d98aa5d0c8e22df0483ac6edfd678d92ab89e02c42c185d289d6f80b7f3c5730a9f288d1052ae2a93cba8b3ff886f0a1ce281334963e9bb80e3c6d73975c1f821f664e8007322bac707adbb457d4d7a0607fcd37a765915ee214f93736ea93cd17302d6270f4447b6cdaab3a4bd15a5721feaab9030b9ac0b7e1b2a61024a7a7e6f2533e9545825b3080feab3be57731ea67a87beda6208d249a9e2cb286859c4e0e4d9b1951e8cdc63869bc5fe77fc706725ee64098736d92401fc525a9cb8c72f5b4158dff87004e50bddfed889cc7138261e8b6a9382a87e665b70d78876323bb3ffd1b6cfacffe384ffdc7680a77efa37208af00cf26e8840392b7133fd8abd167d06e4550dce45e440f196e7609d7efbc4b285cbf0fb0347209b2154e5d42e6481d18cd806ff5b2ea5bab06c67ccdbf6d32921a43e5f4afeb53a73a1682535efe9cc9c07117aa2483a7a4fe18bc2d9b1d023cac6d9c287ccef00acc8c496d84cd858e134309f2ab3a6513dbcb8ffe5e1992721c9212d230bba4bd2ed4fe52fe008516e07ee2bffa2480292dfa56399c06dce87ae7a59391e7ab34af0aa169f46a9216f60b8c0625c53c459e2c2576fb3e9723bf3c77303eb8a5627e4cb16e028102d8cf45e24766fa49d9fc7369d2af0aa524184eae777c6aaab656fbc23ca0cc75d7cb3735e63cca727512e7f2ba517fdcfbaf162ff30fe4e623d52e724bc0c552f98b0269459b03a061fe5b326f9dbdc058e8678434bf4b50ecc957c00b52934e493ca73432c7a6a6b7482e40d11f60380d50e03895a006d812a4ff460f887a84d7bdf050cec3c73f39aea270c6b533a4598c3f78671fe61ff933c6f236d36bd5e46aacb5c6ef5acc57985f37c34da1004703f5cce0eab6a9917b1c7582872f2ecd64b5decd5d70b43bbdc093266622a6b3b2a87d2f2d7dcbdc38a009cc882c0e1f142758107f563f801c4f7b21373c01f7a844ed910f6d0c26e95b3355a46dbf9b783a9951eb68f476bcc56ea018bb941e73900dc3fa1d0a6e71946a6c35ddafeaa6637f2f761796903d98e639e52caa2bf8486bd074598cf8fabf2600f7ec892ee47cdc585cbc34dd939c34e49ab705eb6cf8a4a95550294a3d7ace2823a33bbfdff8b5e4e29f38d979906b526d4b49e771672f1aa87eb42f3ebb420c011c8ba50820ee60d59dce402d1cdee98181299596e4d8e4c2668e5279875e422e95a1f9aa6923d6ab1eff8e6f3daed1f31e8432a36a5cea38e90cd195f5921e0b6ac9cdd773eb7fcb4651a067e7ea24ffc9b149015aba8ea8b117ee424013f21502ec6734ca42a1a2d512b9f4f4dd94d98a58aa7ca04fd4df7f50fc1c55acffeebcba254ab24798cb6470e7e26949817f46efcc2d8b0cda0d8026135bbb285cb09dc2748d565007f88a362858d7de066312c62ad25c071107215c459adef2eaa477439027845e81a5b0af1b252026213f8f10486b5bad0b01022eb31a450a3775ad8fd5314f300b93af2a25cd975d6d32c8d743fe8e60224f9d559fc54bcd1c1ee313152eb74d5be51af3d7072165937bde083abb2813ee45cbb1a36e9f68afbed47aa498002a73e872d87cadabf6ebfffeee9a513e9dd321fbfbc8d63f48f1753157c0e9d7ad2490ef90450fe6c6b18e43782abe10099b76935906afade7629f84917f3962197e45e7eac690b306d935c96c68a6ad315287b2ce4680f73ba100bf6eb35732772f2fabc6f95b4418faa0ef03be2b1793324f7505ebf467fbd0b0ae044471fc486a4ab1cbe3d3fed19e8f5741751d0a757d75b4667ec8629466226121ea423a7c866746a1689506002a16b67efbe505155deea1d788665875da9eef1a887304ad88740588db8888f512f309bbf3653f133a18ae0d9bba27f3834ad2b38db77dbde649e62d8328bb85a248c90f1b5d8a97b1b56213fe863d225d80050ceca7978070aa8a99554fa383f356b4bfe7ad4ca98fc411bd05f77bd41a9f2baece83172370725ad575593191a63ccf28d92808f245a3450edf0051e2c7ce09e8704b9c70ef3944e386238e9768e3b91a38541256dbe4c43a545dfef5256ee7b316c1ca83dc7187313d842fc92ebf94f2021da41ca0182c8d6ceefd6224657abceb3216876e78a1157dd3ee8cebaa71e7059f2c8af12b52a01e23f7e0f6916bce864f6fac1852987e6b6396076de07b1bae8a820f5bf5c842bdbe4205eee6c0dbb9be3cade0c26f89c9e1bfe9f5217eab48038fdebb189a28d496a0e5b5b0b58e4959c5371bc44ec66663983e569610fd95d9be8eb507963bc8622b962a298c6926afbc1c3d62547d391ebc6e61eca04d784854a28172c93db39a59eb09a0e699f136dd484d2eee378a9d44e906e3667fad5cf339730dc7eaaac1265db0895fd447807564d750971c160065e56ea5d64493a85f7ac6bafaf852158c3e463d6e6db2387e863f4ebd30e80044daf5245d7214556fada5d86d40177ccd214e601755dbe9bad8ad9fb8718d53a5bee067ed956afb3ba20e01d1a7c52bbb411c604be11077a8aac0e9062940c12ad116c00dd4753370b233db10deff529f47082d5f2e62e0f1b12ef7bcb19e01c74ca6ddea8f06c1516eed55d85b8e21ed90aa9325c31d445bfa197ce47e0cc3783f651d023aab43cf42bcd02acd9ed907fe50c7c7fb3fc04634f60ba8fec0ce6255acd098884e3bb51a0aef49dcd3919486fd410728b07cf5ed1696fba4c63c9f7cde136cea0f205a1760eb3c89f1b290d823d9a6e4272b0ae973693b4b135656d89679887b31d228271a397485924332c37573b2c2ec3b28d02551444037f5a98f950afd560afee1fe4a510bb32853d46f7a20d32c053b88d01ff0ade2a9490e636e0d88e08de4dc008bf29e8771df467d7cfa506dd1077c2adb52e557db43b32434d58a743532ce848f95136a773fc6503ffe8314a64fb74d23bb1c5e631f1bce069d1f614c16fda1c95b7529909b73fba2118ad5b11d58bfd78e7b462f6caed93b1c7a3b5249cf4d157c1cf2a204b46ed0d0eb887a0affe795454e863134d065eecbe37685c1df922abe4e66ad02d4413c6dbc52367ad9a5ec7a6903ce838b89a86bec5f3c405bb0f5b0cfd03b7712452d8391a633c46775dbbfa1a2ed99e0f77e44d73ccde5b9cfe10994f3ad4eec70f212d2af1aedfe55996ea6ada44ea194a015b13b1b40ddba42ee9ef7ea81d0a3207b94ee9ce8373f2d389886507d3cdb52e09070790864fbede7eb48b3cf96befcbdd1c070f359a361130ea487d7c4a523533ef406308242d5c64b376d5782096193433cbcb3c90dd33cc60b7acc0acb749d70976a05ed5d25910b23cb20405a2e1de2eb4b06ffab3171ccf27d364a64639fb6f5c0fcbf66b1a9363071eabdcb4976fd9aa30ae490262b955db3ccd5cb3edea550bbeacd23b2a6243dd8d07be8833dea465787730e89e76fec78744f7b1f26fcb31387e9b6fbb4d5f735ac14261cde2f0993883a752dda2ecca3a3a687623fbe4ce9f3072445f67d407bf59831bf3640170d041aafcb99f855c20fa499519aab20dad007f934e33b8a4f38d59ed5b74e71a8112de4414e83553479febeb68d55a41ee70fa81a59b29a38e14560b4f9d4c7ab73f1e85519230eaf0a983d28853903a2a92a63dcd5a8a0f7ba9b3a18e6262b2f2f10a7942a16732d16e717045ef95e2baeb2035edefffe5f4f3b84ec47b985c2e2e60d5dd383a47cc993ae67a70e70d017077badd0094ed1b3b3c75eb3fd980d4d179ab996f11184250ee2a0c3fb32cd718f742549960c8d8a2d15c9b1f35b907337e0decef4875cf49e7285a29f266d55294c5a0f110087ec6ff19ca9fcadc07c47b145670b0553e4855f329709815362d54fe13accd0d1581287584db82847d9daac69948cae755c6b76fd92bcc5d8dca6456e0a00a5689650d0f70decd1abb475e473ade6fa0dcab28e0ac2068ab203c22395012ececc46cf2c3258339978866cdb57cbfca02429e8b3a59c2692ad5543d2e1ea0cd05d8b7b9a500b3443f190feb3d283734cff995f4b5fda11316bfcd953963321f1050dca1782a94d863662dddf3bf765506b9c2a8e657cc8329e37eec") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2033.893371] audit: type=1326 audit(2000001026.608:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26579 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x4800000000000000}]}) 03:50:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000b07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:26 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x5b8, 0x3, 0x100, 0x10001, 0x1, 0x5, 0xffff, {0x0, @in6={{0xa, 0x4e21, 0x3, @remote, 0x7}}, 0x17e, 0x101, 0x3, 0x5, 0x10001}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) 03:50:26 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) signalfd4(r0, &(0x7f0000000200)={0x9}, 0x8, 0x80000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x4, [0x5, 0x7, 0x1, 0xbb7c]}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0d0000f696a8ba75ce001bfcec62021bc81c50c6895cc5b97e9e5a32c400000000000000000000000000000000250c39153af6cea4fdeeff214dd24fb2c0f24099a33971e0db275d53824f2ae4bc94299d12aa22988567b03bc80a4e84d5c7d360af828fe81ae41a0fcdf883a3463b6801033ed1847cb320c40a115954d2a288e9da73e375d6c4bc1d081bd40c8d722e92724177787fb855"]}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xde}) socketpair(0x15, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000, r4}) 03:50:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x7000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:26 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0434270d00000000000000000000010000008000000000ac775c341fa99af778eeba0000"]}) 03:50:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2034.040051] audit: type=1326 audit(2000001026.758:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26637 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:26 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x7) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000040)={'gretap0\x00'}) 03:50:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900001007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x900000000000000, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) fstat(r0, &(0x7f00000000c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x3f00000000000000}]}) 03:50:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000607000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:27 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x0, 0x70, 0x7, 0x553, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1000000000000019, 0x803, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x100000000, 0x9, 0x8, 0x5, 0x0, 0x401, 0x2000, 0x8, 0x8, 0x7, 0x1, 0x1, 0x8, 0x3, 0x4, 0xf7, 0x4, 0x2, 0x100000001, 0x7ff, 0xfffffffffffffffa, 0x8, 0x9be, 0xffff, 0x2, 0x8000, 0xfab8, 0x9, 0x24, 0x6, 0x401, 0x1, 0x0, 0x18, 0x87e0, 0x8, 0x0, 0x100000000, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x20000, 0x2, 0x7fffffff, 0x5, 0x9, 0x1, 0x1}, r2, 0x8, r0, 0x2) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') getsockname$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000000000000000000000000000000000004000000000000000000000000"]}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000180)='veth0_to_bond\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x2, @empty, 0x1}}, 0x100000000, 0xfffffffffffffffd, 0x3f, "9290dcd14bd762bd0e854ad4a2ffed8d871c5e2da1162b4259eb5c82a64a27bbeccd1c8fa63022de9f8a546bda690ac49e94ebb2742602ab1845d059b0d305bce8234c3fc4ccd5739688d094f67afdc0"}, 0xd8) 03:50:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2034.818005] audit: type=1326 audit(2000001027.538:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26637 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7ff) [ 2034.899084] binder_transaction: 10 callbacks suppressed [ 2034.899138] binder: 26673:26674 transaction failed 29189/-22, size 0-8 line 2855 [ 2034.923259] binder_release_work: 10 callbacks suppressed [ 2034.923266] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000907000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2034.973908] audit: type=1326 audit(2000001027.688:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26684 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:27 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d0, 0x0, 0x3f, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x400) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x500000001, 0xfffffffffffffdad) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa0040000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2035.081964] binder: 26703:26704 transaction failed 29189/-22, size 0-8 line 2855 [ 2035.113413] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 03:50:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x10000000}]}) 03:50:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000a07000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:28 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xffffffff00000000, 0x1, 0xffffffffffffffe0, 0x7, 0x9}, &(0x7f00000001c0)=0x98) getpeername$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x7}, 0x8) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:28 executing program 2: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x18000, 0x0) fchdir(r0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001280)=0x9, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x9d, "22c114faaa14c80313efac0fa4743882237670ff3a7e0b35b32665db660242d883bf1f5047ea219c3e26309efe83123ab08d7eb8d4a410fe6a95086b0db0fac02365d3f0b974786babe4d6e07cf6cc2a33bfa35f4bb3a09a34ac77b7b8bff7df60e459d8ce327c09e247223b25e981ee273a9ddf9cffc7dc8d8976b8acb9bd8590d48456ad98e38740a323dc00fdea787d4cea516eee6df8fe380c5d00"}, &(0x7f00000001c0)=0xa5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r3, 0x1000, "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"}, &(0x7f0000001240)=0x1008) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x900, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2035.727576] audit: type=1326 audit(2000001028.448:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26684 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2035.808605] binder: 26725:26733 transaction failed 29189/-22, size 0-8 line 2855 03:50:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:28 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) [ 2035.852874] binder: undelivered TRANSACTION_ERROR: 29189 [ 2035.876093] audit: type=1326 audit(2000001028.598:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26737 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:28 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x1) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000507000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x91ffffff00000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2035.995562] binder: 26748:26750 transaction failed 29189/-22, size 0-8 line 2855 [ 2036.039979] binder: 26748:26750 transaction failed 29189/-22, size 0-8 line 2855 [ 2036.084865] binder: undelivered TRANSACTION_ERROR: 29189 [ 2036.093973] binder: undelivered TRANSACTION_ERROR: 29189 03:50:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000807000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xffffffffa0008000}]}) 03:50:29 executing program 2: r0 = memfd_create(&(0x7f0000000140)='system.posix_acl_default\x00', 0x3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x3, 0x36, 0x1, 0xdda3}, {0x8, 0x9e, 0x9, 0x1ff}, {0xfffffffffffffe01, 0x1ff, 0x1ff, 0x1}, {0x1, 0x8, 0x7e, 0x5}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='bridge0\x00', 0x8, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:29 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x20001, 0x0) listen(r0, 0x7ff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getgroups(0x7, &(0x7f00000001c0)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x0, 0x50, 0x0, 0x8001, 0x7fff, {0x1, 0x8001, 0x101, 0x20, 0x8000000000000, 0x0, 0x8, 0x952f, 0x29, 0x5, 0x4d8, r2, r3, 0x5, 0x1000}}}, 0x90) 03:50:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x20000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000010000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2036.702278] binder: 26783:26784 transaction failed 29189/-22, size 0-8 line 2855 [ 2036.721155] binder: undelivered TRANSACTION_ERROR: 29189 03:50:29 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2200, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x32) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007100000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x5, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:29 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) uname(&(0x7f0000000000)=""/247) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=ANY=[]}) socket$inet(0x2, 0x4, 0x10003) [ 2036.887837] binder: 26806:26808 transaction failed 29189/-22, size 0-8 line 2855 [ 2036.924557] binder: undelivered TRANSACTION_ERROR: 29189 03:50:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007060000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xffffff7f00000000}]}) 03:50:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:30 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x1, 0x240000) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000001c0)) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0x7, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x3976, 0x30000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000240)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/251) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000300)={{0x20, 0x1}, {0x3, 0x1}, 0x1, 0x4, 0x8}) 03:50:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007090000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:30 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000000000020000000000000000000000000000000000000000000000000000000003ef66d49f6b7ef791c647d7517d4c3008894c272d92e3b51eedd0a4f955a8b293578368188949c38646a381d6edbb96a5466cc92c95d31fc13479e7ea3655b3c6476537e67ab7ef3d4cf9fd0d45de4e6e9784f5185c9c5ffecd80c09c7d2f74db5609100185fb12ad4391da6103f4dd6c40f25a9317f6dcfb7ac5ab96fff4050c05682cf953805c83fde1882c44255cc3142a5c2c7ae41eaf11d5d9b26d9650fdae77aaa47a77cab9ba9d143f0462e7f904558e4a6c01c561027641206c54d752db215ee081b9702135e92"]}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'irlan0\x00', 0xffffffff}) 03:50:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x300000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2037.546818] kauditd_printk_skb: 2 callbacks suppressed [ 2037.546833] audit: type=1326 audit(2000001030.268:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26794 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2037.636529] binder: 26832:26841 transaction failed 29189/-22, size 0-8 line 2855 [ 2037.658712] binder: undelivered TRANSACTION_ERROR: 29189 03:50:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2037.666498] audit: type=1326 audit(2000001030.388:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26845 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000000070b0000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:30 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000500)='/dev/admmidi#\x00', 0x0, 0x42) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, r2, 0x310, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4e}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x95}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6b}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xde}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x401}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000090) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000000000000000000000000000000fcff00000000000000000000000000"]}) [ 2037.742645] binder: 26850:26851 transaction failed 29189/-22, size 0-8 line 2855 [ 2037.767641] binder: undelivered TRANSACTION_ERROR: 29189 03:50:30 executing program 4: perf_event_open(&(0x7f0000000d40)={0x3, 0xffffff18, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8000, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'bridge_slave_1\x00', 0xb237}) 03:50:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x100000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2037.924384] binder: 26864:26865 transaction failed 29189/-22, size 0-8 line 2855 [ 2037.944949] binder: undelivered TRANSACTION_ERROR: 29189 03:50:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x3f000000}]}) 03:50:31 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0d0000000000000000000000020000000000000000000000000000000000000000000000a3fec4e6117c753cd638ef9f8aae2d2f44304d33723cfa8291e767298565be9f76"]}) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@mcast1, 0x4e23, 0x0, 0x4e24, 0xb9, 0xa, 0x20, 0x80, 0x7f, r2, r3}, {0x8e9, 0x9, 0x6, 0x6, 0x2, 0x2, 0xffff, 0xfff}, {0x4, 0x9, 0x0, 0x400}, 0x7, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in=@remote, 0x3501, 0x1, 0x3, 0x9, 0xfff, 0x1, 0x7}}, 0xe8) 03:50:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000732b400068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:31 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) socket$inet6_dccp(0xa, 0x6, 0x0) 03:50:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa0008000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2038.465867] audit: type=1326 audit(2000001031.188:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26845 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:31 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000000000000000000000000000000000000000000000000000000000000000000ec73b5bfbe23a0df8dad5b5593228bc419e37680cd3369ed605099e6bb87ef2f20333c19b91bec89098a9ebd82eb4cb64405a37efdb5c46e404f0c5839c784047be8a8b6ac2cc0e2fac92ab6fb36c82f4040a40407d3ef34c380f5fd22d52436967383d2910ad9376ec6e23fdf9acdceeb858ff95f3519a80c8aca37ca3b433c46d1abf2208034c0b78c8086a5bcf48142594a8255574cd5350d608b6313fb"]}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x58000) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x60) [ 2038.598495] audit: type=1326 audit(2000001031.318:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26892 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:31 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='gretap0\x00') getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x14) r2 = socket(0x800000000000a, 0x80005, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000200)={'mangle\x00'}, &(0x7f0000000280)=0x54) ioctl$SIOCSIFMTU(r2, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x3, 0xfe05) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 03:50:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007080000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfe80, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:31 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x9, 0x40000) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/146, 0x92) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfff, 0x100}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0xfffe000000000000, @mcast2, 0x4}}}, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000200)={'veth1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0xd}}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='team0\x00') 03:50:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x48000000}]}) 03:50:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000000070a0000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:32 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@del={0x108, 0x11, 0x110, 0x70bd2a, 0x25dfdbfe, {{'drbg_nopr_ctr_aes256\x00'}, [], [], 0x400}, [{0x8, 0x1, 0x30}, {0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) 03:50:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x80fe, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:32 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) munmap(&(0x7f0000e56000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2039.381679] audit: type=1326 audit(2000001032.098:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26892 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0020000, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700f000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2039.534146] audit: type=1326 audit(2000001032.258:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26937 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:32 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x18020000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:32 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000380)=@ethtool_eee={0x44, 0x8, 0x6, 0x0, 0x0, 0x10000, 0x7165, 0x0, [0x6f06, 0xfffffffffffff001]}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x31, &(0x7f0000000140)=""/49}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x8, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0xdf0e) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x2, 0x4) 03:50:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xa00}]}) 03:50:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000500068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:33 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7d) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x2, 0x100, 0x7ff}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x5000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fowner_gt={'fowner>', r1}}, {@smackfshat={'smackfshat', 0x3d, '%'}}, {@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, 'userem1ppp1mime_type'}}, {@subj_role={'subj_role', 0x3d, '\'mime_type'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}}) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x28, 0x4, 0x8}, 0x1}}, 0x18) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x18) r4 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r4, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x18801, 0x0) lchown(&(0x7f0000000480)='./file0\x00', r2, r3) fsync(r0) 03:50:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:33 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d00002f233cf2f18c193d7a900008000000000000000000000000000000000000000000"]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0xbb00}) 03:50:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2a0ffffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2040.279058] audit: type=1326 audit(2000001032.998:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26937 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2040.366695] binder_transaction: 7 callbacks suppressed [ 2040.366754] binder: 26973:26980 transaction failed 29189/-22, size 2-8 line 2855 [ 2040.386832] audit: type=1326 audit(2000001033.108:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26983 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000600068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x200001, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffff) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8000, 0x102) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4238}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x460}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x85}, 0x20000001) [ 2040.435194] binder_release_work: 7 callbacks suppressed [ 2040.435203] binder: undelivered TRANSACTION_ERROR: 29189 03:50:33 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000000000000000000000000000000090000000000000000000000000000000000fcedb726c1439e8b8a5ac6e37f26a6bd898ead12ca69c96f85fbc27eaeccfb79fdb5bec679b78ca5a6461f9c1fef5df2311b38299777725134fbe0273d517381ab4c7ae385b9286e96fdf3e1b4ce1cc5ff305ba0e6b8a6c845b84ac42af21c2e56af5ef3df74602593222418887e83e54bde196e058e86650d70e75514eabd02b48a7ad6d119c44f908711a5603ce0ee4a210da771e635867cbace54e1cec162ec32a21b307916ecf611"]}) r1 = getpgrp(0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 03:50:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:33 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000040)={'bridge_slave_1\x00', 0xdffffffffffffffb}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r2, @broadcast, @broadcast}, 0xc) [ 2040.629949] binder: 27000:27001 transaction failed 29189/-22, size 5-8 line 2855 [ 2040.650629] binder: 27000:27001 transaction failed 29189/-22, size 5-8 line 2855 [ 2040.677945] binder: undelivered TRANSACTION_ERROR: 29189 [ 2040.688113] binder: undelivered TRANSACTION_ERROR: 29189 03:50:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x3}]}) 03:50:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000900068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:33 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xffff}, 0x8) 03:50:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:33 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x800000000000a, 0x80005, 0x0) io_setup(0x4, &(0x7f0000000000)) r0 = semget(0x1, 0x0, 0x6) semctl$IPC_RMID(r0, 0x0, 0x0) 03:50:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x400000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2041.179969] audit: type=1326 audit(2000001033.898:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26983 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2041.265358] binder: 27024:27026 transaction failed 29189/-22, size 108-8 line 2855 [ 2041.290334] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000080)='bridge0\x00', 0x7) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7fffffff, 0x874, 0xffffffffffffff39, 0x8ba4, 0x3, 0x3e, 0x6d, 0x19, 0x40, 0xca, 0x6, 0x1, 0x38, 0x2, 0x1ff, 0x80, 0x3}, [{0x0, 0x80000000, 0x5, 0x1, 0x3, 0x7, 0x81, 0x3}], "ff7bd90fe0", [[], [], [], [], [], [], [], [], [], []]}, 0xa7d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8001}, &(0x7f0000000100)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r1, r1}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x800) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x7}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007003f00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2041.315404] audit: type=1326 audit(2000001034.038:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27032 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:34 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x1}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, 0x8) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa0020000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2041.435854] binder: 27042:27046 transaction failed 29189/-22, size 8791026472627208192-8 line 2855 03:50:34 executing program 2: socket$pppoe(0x18, 0x1, 0x0) [ 2041.542245] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x1a0ffffffff}]}) 03:50:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007050000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:34 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) socketpair(0x15, 0x3, 0xf56, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0xd5}) exit(0x2) 03:50:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2042.157960] binder: 27064:27067 transaction failed 29189/-22, size 2684420096-8 line 2855 [ 2042.170189] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007b43200068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2042.250898] binder: 27076:27077 transaction failed 29189/-22, size 50331648-8 line 2855 [ 2042.261918] binder: 27076:27077 transaction failed 29189/-22, size 50331648-8 line 2855 [ 2042.270782] binder: undelivered TRANSACTION_ERROR: 29189 [ 2042.284956] binder: undelivered TRANSACTION_ERROR: 29189 03:50:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xe, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x202, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x800000000000a, 0x80005, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80, 0x7c000}, 'port0\x00', 0x8, 0x80000, 0x5, 0x1, 0xf757, 0x0, 0x68, 0x0, 0x2, 0x2}) 03:50:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007020000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2042.388942] binder: 27085:27086 transaction failed 29189/-22, size 144115188075855872-8 line 2855 03:50:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2042.443982] binder: undelivered TRANSACTION_ERROR: 29189 [ 2042.534857] binder: 27098:27099 transaction failed 29189/-22, size 1275068416-8 line 2855 [ 2042.568794] binder: undelivered TRANSACTION_ERROR: 29189 03:50:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x4c000000}]}) 03:50:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfe80000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:35 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[{0x8, 0x9}, {0x2, 0x7fffffff}, {0x0, 0xfff}, {0x0, 0x100}, {0x0, 0x9}], 0x5) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x8401) r2 = getpgrp(0x0) ioprio_get$pid(0x1, r2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x7, 0x1000}) 03:50:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000000000000000000000000000000000000000000000000100000000000"]}) 03:50:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000000070f0000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2043.004494] kauditd_printk_skb: 2 callbacks suppressed [ 2043.004508] audit: type=1326 audit(2000001035.728:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27072 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x111100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x400, @remote, 0x8}, r2}}, 0x30) [ 2043.166344] audit: type=1326 audit(2000001035.888:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27116 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:35 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x7fe, 0x5) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) r2 = getpgid(0xffffffffffffffff) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000140)={0x7, 0x11f004}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1aa, 0x6, 0x2, 0x3, 0x0, 0x3000000000000000, 0xa, 0x7, 0x6, 0x4, 0x8, 0xffffffffffffffca, 0x9, 0xdd14, 0x3, 0x1000000, 0x7, 0x7fff, 0x7, 0xffffffff, 0x8a19, 0xa00000000000, 0x80000001, 0x0, 0xfffffffffffffff8, 0x0, 0x5, 0x4, 0x5, 0x1f, 0x3f, 0x100000000, 0x4, 0x9, 0x8, 0xe045, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x80, 0x0, 0x4, 0x7, 0x4000000000000, 0x8, 0x9}, r2, 0xb, r0, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x50979927, 0x11, 0x208, 0x2, 0x1000, 0x100000001, 0x0, 0x2, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x4}}, 0x2, 0x400, 0xffffffffffff89c3, 0x0, 0xfffffffffffffff9}, &(0x7f00000002c0)=0x98) creat(&(0x7f0000000040)='./file0\x00', 0x8) 03:50:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000a00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000140)={0x4e, &(0x7f00000000c0)="32330ab8d0e619b59411dbce59bda8fa77369ed1ab4de39abd6b2bee81fb6b5546f610c805cada0ab9db00243637b7abb40a41c331ded1608322a528971cb2cf6298415b24271321a8cd453424d4"}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12) 03:50:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffff7f}]}) 03:50:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000b00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:36 executing program 4: r0 = perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x100000001) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000080)={'bridge_slave_0\x00'}) 03:50:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000100)='vmnet1\x00', 0x7, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d95e4000000000000000000000000000000000000000000000000000000000000000000"]}) 03:50:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2043.921377] audit: type=1326 audit(2000001036.638:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27116 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0de7644caa81dc000000000000000000000000000000000021000000000720000000000000000000000000000000"]}) 03:50:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:36 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) socket$packet(0x11, 0x3, 0x300) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2000000042, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000100)=""/178, &(0x7f0000000200)=0xb2) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000dc0)=""/4096) [ 2044.068197] audit: type=1326 audit(2000001036.788:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27166 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000f00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x111000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @multicast2}, &(0x7f0000000180)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2) fchmod(r0, 0x102) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nr0\x00', &(0x7f0000000080)=@ethtool_cmd={0x3f, 0x6, 0x1f, 0x5, 0xfffffffffffffffa, 0x3f18, 0x3ff, 0x401, 0x8, 0x1000, 0x8, 0x6, 0x0, 0xd768, 0x129b, 0x7, [0x40, 0x7]}}) 03:50:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfeffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6800}]}) 03:50:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{}]}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007f00000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:37 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x1, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)='gretap0\x00', 0x8, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) r1 = semget$private(0x0, 0x2, 0x43) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)) getpeername$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) 03:50:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1a0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2044.824147] audit: type=1326 audit(2000001037.548:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27166 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/4096) [ 2044.962180] audit: type=1326 audit(2000001037.678:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27214 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000a00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:37 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000d, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4000}]}) 03:50:38 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x248080, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0xa0, 0x1, 0x3, 0x7fff, 0x7}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000006068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:38 executing program 4: r0 = socket(0x3, 0x80007, 0x80) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bcsh0\x00', 0x100000001}) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) 03:50:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfffffff5, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2045.724996] audit: type=1326 audit(2000001038.448:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27214 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2045.809412] binder_transaction: 12 callbacks suppressed [ 2045.809432] binder: 27250:27251 transaction failed 29189/-22, size 8358680908399640576-8 line 2855 [ 2045.838117] audit: type=1326 audit(2000001038.558:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27261 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000a068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2045.867671] binder_release_work: 12 callbacks suppressed [ 2045.867680] binder: undelivered TRANSACTION_ERROR: 29189 03:50:38 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000000050000001800000000000004000000f570ffff000000000000000000000000"]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x2, {0x0, 0x3, 0x3, 0x3}}) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) 03:50:38 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x4, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @rand_addr=0x571}, 0x40, 0x4, 0x6, 0x1, 0x3f, &(0x7f0000000040)='bpq0\x00', 0x100000000, 0xfffffffffffffffd, 0xffffffffffffffff}) 03:50:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2045.980456] binder: 27272:27274 transaction failed 29189/-22, size 2684387328-8 line 2855 03:50:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2046.050946] binder: 27272:27274 transaction failed 29189/-22, size 2684387328-8 line 2855 [ 2046.053615] binder: undelivered TRANSACTION_ERROR: 29189 [ 2046.085532] binder: undelivered TRANSACTION_ERROR: 29189 [ 2046.200189] binder: 27290:27291 transaction failed 29189/-22, size 4608-8 line 2855 [ 2046.216544] binder: 27290:27291 transaction failed 29189/-22, size 4608-8 line 2855 [ 2046.228572] binder: undelivered TRANSACTION_ERROR: 29189 [ 2046.236727] binder: undelivered TRANSACTION_ERROR: 29189 03:50:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffffa0020000}]}) 03:50:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000200068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:39 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000aa050000000000000000000000000000000000000000000000000000000000004fc6f41781535f185a09c498eccd2ce3857f84153235702b6f7f9d3bf6388efa81e51a89beb62a6e17d89b67948550e4c0643036e3b1fa94e8c08470a585ba909cdac3139d451e4e168c72e761ddc489f56288383edcad9db3940475d133f5a0bd42d0881bd328445c3170fb81c657cce957e87aca8530f79cdb30b6ad712bbd7cfe9c"]}) r1 = dup2(r0, r0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x73, @remote, 0x4e24, 0x0, 'sed\x00', 0x4, 0x1, 0x7c}, 0x2c) 03:50:39 executing program 4: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000040)={'gretap0\x00'}) r1 = memfd_create(&(0x7f0000000240)='.\x00', 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/237) 03:50:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0ffffffff, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2046.635562] audit: type=1326 audit(2000001039.358:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27261 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:39 executing program 2: socket$pppoe(0x18, 0x1, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000140)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x14a) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x974, 0x200000000000000}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r2, &(0x7f00000003c0)=0x4) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000240)=""/24) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0x10000}, 0x4) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22}, 0x10) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000480)=@v1={0x1000000, [{0xfff}]}, 0xc, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) shmget(0x2, 0x3000, 0x12, &(0x7f0000ffc000/0x3000)=nil) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x4) shmdt(0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)=0x0) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x2, 0x4, 0x6, 0x8000, r5}) 03:50:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2046.738379] binder: 27297:27308 transaction failed 29189/-22, size 2890512990207-8 line 2855 [ 2046.749642] binder: undelivered TRANSACTION_ERROR: 29189 [ 2046.766028] audit: type=1326 audit(2000001039.488:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27310 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000600068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 2046.885920] binder: 27316:27318 transaction failed 29189/-22, size 33554432-8 line 2855 03:50:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x8000a0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2046.977711] binder: undelivered TRANSACTION_ERROR: 29189 03:50:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000900068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x68}]}) 03:50:40 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000140)=@buf={0xbc, &(0x7f0000000080)="93da999341fde7555064ca0edf2033af63f05f01ff0b2faee330d907c0c6f5f60e5b8936b8089ffcf310d0891bf162a5fcef95aa58f805cd0463fa64cdc43f62a0923c8129315377ab7e3d827dd10f87b26f7dce110a1fe0c6c32573df9cf7ed4d9afa0dd14459ae230d114304c9f14b572a8c00dcdfa7c90b77479e50e5577bf96ecadc6348c401aa88e4ad87809610e8cfbdeb267f4563a138690f8e8807c694d1deaee9e1378f065b06e317fe0bd56f94ad4378557ac695e31fef"}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007001000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:40 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400}) semctl$GETZCNT(0x0, 0x200000000000004, 0xf, &(0x7f0000000300)=""/35) [ 2047.601465] binder: 27350:27351 transaction failed 29189/-22, size 83886080-8 line 2855 [ 2047.636343] binder: undelivered TRANSACTION_ERROR: 29189 03:50:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x34000}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 03:50:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:40 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0xd}}) 03:50:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000b068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2047.777672] binder: 27370:27371 transaction failed 29189/-22, size 18432-8 line 2855 03:50:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffffa0010000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2047.821706] binder: 27370:27371 transaction failed 29189/-22, size 18432-8 line 2855 [ 2047.859340] binder: undelivered TRANSACTION_ERROR: 29189 [ 2047.866643] binder: undelivered TRANSACTION_ERROR: 29189 03:50:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2047.999146] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 [ 2048.011618] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2048.017800] CPU: 1 PID: 27383 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2048.025173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2048.034530] Call Trace: [ 2048.037118] dump_stack+0x1c4/0x2b4 [ 2048.040789] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2048.045992] ? mark_held_locks+0x130/0x130 [ 2048.050256] ? mark_held_locks+0x130/0x130 [ 2048.054510] dump_header+0x27b/0xf72 [ 2048.058249] ? check_preemption_disabled+0x48/0x200 [ 2048.063283] ? pagefault_out_of_memory+0x197/0x197 [ 2048.068259] ? debug_smp_processor_id+0x1c/0x20 [ 2048.072930] ? perf_trace_lock+0x14d/0x7a0 [ 2048.077163] ? perf_trace_lock_acquire+0x15b/0x800 [ 2048.082118] ? zap_class+0x640/0x640 [ 2048.085844] ? perf_trace_lock+0x7a0/0x7a0 [ 2048.090369] ? debug_smp_processor_id+0x1c/0x20 [ 2048.095061] ? perf_trace_lock+0x14d/0x7a0 [ 2048.099343] ? graph_lock+0x170/0x170 [ 2048.103162] ? print_usage_bug+0xc0/0xc0 [ 2048.107253] ? zap_class+0x640/0x640 [ 2048.110978] ? find_held_lock+0x36/0x1c0 [ 2048.115067] ? mark_held_locks+0xc7/0x130 [ 2048.119260] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2048.124374] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2048.129470] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2048.134048] ? trace_hardirqs_on+0xbd/0x310 [ 2048.138359] ? kasan_check_read+0x11/0x20 [ 2048.142530] ? ___ratelimit+0x36f/0x655 [ 2048.146512] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2048.152003] ? trace_hardirqs_on+0x310/0x310 [ 2048.156431] ? lock_downgrade+0x900/0x900 [ 2048.160605] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2048.165725] ? ___ratelimit+0xaa/0x655 [ 2048.169627] ? idr_get_free+0xec0/0xec0 [ 2048.173618] ? kasan_check_write+0x14/0x20 [ 2048.177864] ? do_raw_spin_lock+0xc1/0x200 [ 2048.182131] oom_kill_process.cold.27+0x10/0x903 [ 2048.186892] ? kasan_check_write+0x14/0x20 [ 2048.191121] ? do_raw_spin_lock+0xc1/0x200 [ 2048.195382] ? oom_evaluate_task+0x540/0x540 [ 2048.199792] ? cgroup_procs_next+0x70/0x70 [ 2048.204037] ? _raw_spin_unlock_irq+0x60/0x80 [ 2048.208548] ? oom_badness+0xaa0/0xaa0 [ 2048.212433] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2048.217201] ? mem_cgroup_iter_break+0x30/0x30 [ 2048.221829] ? mark_held_locks+0xc7/0x130 [ 2048.226003] out_of_memory+0xa84/0x1430 [ 2048.229997] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2048.234611] ? kasan_check_read+0x11/0x20 [ 2048.238784] ? oom_killer_disable+0x3a0/0x3a0 [ 2048.243275] ? kasan_check_write+0x14/0x20 [ 2048.247519] ? do_raw_spin_lock+0xc1/0x200 [ 2048.251810] mem_cgroup_out_of_memory+0x15e/0x210 [ 2048.256690] ? memcg_memory_event+0x40/0x40 [ 2048.261056] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2048.266029] ? page_counter_try_charge+0x1c1/0x220 [ 2048.270985] try_charge+0xc43/0x1690 [ 2048.274758] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2048.280840] ? tcp_sendmsg+0x2f/0x50 [ 2048.284577] ? sock_sendmsg+0xd5/0x120 [ 2048.288479] ? __sys_sendto+0x3d7/0x670 [ 2048.292465] ? __x64_sys_sendto+0xe1/0x1a0 [ 2048.296730] ? do_syscall_64+0x1b9/0x820 [ 2048.300820] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2048.306209] ? graph_lock+0x170/0x170 [ 2048.310007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2048.315554] ? check_preemption_disabled+0x48/0x200 [ 2048.320589] ? check_preemption_disabled+0x48/0x200 [ 2048.325623] ? mark_held_locks+0xc7/0x130 [ 2048.329765] ? __lock_is_held+0xb5/0x140 [ 2048.333820] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2048.338765] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2048.343696] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2048.348317] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2048.353414] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2048.358862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2048.364406] ? check_preemption_disabled+0x48/0x200 [ 2048.369424] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2048.374200] ? mem_cgroup_sk_free+0x90/0x90 [ 2048.378549] __sk_mem_raise_allocated+0x642/0x1800 [ 2048.383509] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2048.387841] ? arch_local_save_flags+0x40/0x40 [ 2048.392446] ? __check_object_size+0x125/0x782 [ 2048.397033] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2048.402042] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2048.406740] ? sock_kzfree_s+0x60/0x60 [ 2048.410625] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2048.415654] ? sk_stream_alloc_skb+0x34b/0x970 [ 2048.420252] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2048.425274] ? skb_entail+0x618/0x8c0 [ 2048.429090] ? tcp_rate_check_app_limited+0x121/0x460 [ 2048.434276] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 2048.438971] __sk_mem_schedule+0x6d/0xe0 [ 2048.443022] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2048.448581] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2048.453137] ? tcp_sendpage+0x60/0x60 [ 2048.456961] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2048.462508] ? aa_label_sk_perm+0x46d/0x8e0 [ 2048.466862] ? find_held_lock+0x36/0x1c0 [ 2048.470946] ? mark_held_locks+0xc7/0x130 [ 2048.475113] ? __local_bh_enable_ip+0x160/0x260 [ 2048.479792] ? __local_bh_enable_ip+0x160/0x260 [ 2048.484481] ? trace_hardirqs_on+0xbd/0x310 [ 2048.488812] ? lock_release+0x970/0x970 [ 2048.492796] ? lock_sock_nested+0xe2/0x120 [ 2048.497048] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2048.502514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2048.508066] ? check_preemption_disabled+0x48/0x200 [ 2048.513096] ? lock_sock_nested+0x9a/0x120 [ 2048.517343] ? lock_sock_nested+0x9a/0x120 [ 2048.521590] ? __local_bh_enable_ip+0x160/0x260 [ 2048.526289] tcp_sendmsg+0x2f/0x50 [ 2048.529845] inet_sendmsg+0x1a1/0x690 [ 2048.533665] ? ipip_gro_receive+0x100/0x100 [ 2048.538015] ? apparmor_socket_sendmsg+0x29/0x30 [ 2048.542779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2048.548331] ? security_socket_sendmsg+0x94/0xc0 [ 2048.553095] ? ipip_gro_receive+0x100/0x100 [ 2048.557453] sock_sendmsg+0xd5/0x120 [ 2048.561183] __sys_sendto+0x3d7/0x670 [ 2048.565034] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2048.569732] ? lock_release+0x970/0x970 [ 2048.573727] ? arch_local_save_flags+0x40/0x40 [ 2048.578321] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2048.583831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2048.589381] ? put_timespec64+0x10f/0x1b0 [ 2048.593545] ? nsecs_to_jiffies+0x30/0x30 [ 2048.597707] ? do_syscall_64+0x9a/0x820 [ 2048.601713] ? do_syscall_64+0x9a/0x820 [ 2048.605732] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2048.610327] ? trace_hardirqs_on+0xbd/0x310 [ 2048.614656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2048.620202] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2048.625580] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2048.631052] __x64_sys_sendto+0xe1/0x1a0 [ 2048.635138] do_syscall_64+0x1b9/0x820 [ 2048.639034] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2048.644410] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2048.649350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2048.654217] ? trace_hardirqs_on_caller+0x310/0x310 [ 2048.659258] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2048.664302] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2048.669340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2048.674221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2048.679419] RIP: 0033:0x457569 [ 2048.682623] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2048.701530] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2048.709260] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2048.716541] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2048.724005] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2048.731282] R10: 0000000000010f15 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2048.738560] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff [ 2048.749531] kauditd_printk_skb: 2 callbacks suppressed [ 2048.749546] audit: type=1326 audit(2000001041.468:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27361 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2048.758297] Task in /syz4 killed as a result of limit of /syz4 [ 2048.782020] memory: usage 307200kB, limit 307200kB, failcnt 320 [ 2048.788193] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2048.795052] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2048.801204] Memory cgroup stats for /syz4: cache:120KB rss:269732KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB [ 2048.823042] Memory cgroup out of memory: Kill process 27382 (syz-executor4) score 1110 or sacrifice child [ 2048.834804] Killed process 27382 (syz-executor4) total-vm:70472kB, anon-rss:4204kB, file-rss:32768kB, shmem-rss:0kB 03:50:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4c00000000000000}]}) 03:50:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0d6a00efff00000000000000002fa0d0000004000000000000000014000000000000000000000000000000"]}) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x5) 03:50:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000000070032b4068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2048.849336] oom_reaper: reaped process 27382 (syz-executor4), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:50:41 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x991e, 0x2) signalfd4(r1, &(0x7f0000000140)={0x5}, 0x8, 0x80800) r2 = msgget$private(0x0, 0x4c0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000180)=""/234) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000091000000dd3179d90058c145a100000800000001000000000000020200000000"]}) msgget(0x0, 0xa) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 03:50:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000f00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0040000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0d0000000000000000000000000000000000000000000000000000000000000000000000a4be49d8b94188324faa488b304d0b7381201b106db6953918d68abc0c65bcd834267e74443bdffc461f1c8466ec970698e52ee018cb09801026e1467f12d34afdaa2c1fd52124b9b679fc1218b4ff00e06b6cb00460ff2130eccaa8328d4e060000000000003e3dbb2bf284f0865f6e2669974821eee9433bb4f3676b063bab047f678379e909693c107d9a511f88c0478dbb71614d57fc8cf3fd7a4da36a42e7009b803ac6d71661ffce1ccf25405dbde2323c363491493da3d65f4c4c593b9b0d607f46e4e30508fbc01c44"]}) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0x80000, 0x0, [0x9, 0xf4d4, 0x81, 0x80000000, 0x4, 0x1, 0x1, 0xbc4]}) [ 2049.122008] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 [ 2049.158782] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2049.166641] CPU: 0 PID: 27419 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2049.174037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.183409] Call Trace: [ 2049.186017] dump_stack+0x1c4/0x2b4 [ 2049.189666] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2049.194880] ? mark_held_locks+0x130/0x130 [ 2049.199124] ? mark_held_locks+0x130/0x130 [ 2049.203395] dump_header+0x27b/0xf72 [ 2049.207136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.212690] ? pagefault_out_of_memory+0x197/0x197 [ 2049.217648] ? debug_smp_processor_id+0x1c/0x20 [ 2049.222325] ? perf_trace_lock_acquire+0x15b/0x800 [ 2049.227284] ? perf_trace_lock+0x7a0/0x7a0 [ 2049.231685] ? debug_smp_processor_id+0x1c/0x20 [ 2049.236376] ? graph_lock+0x170/0x170 [ 2049.240203] ? print_usage_bug+0xc0/0xc0 [ 2049.244311] ? find_held_lock+0x36/0x1c0 [ 2049.248397] ? mark_held_locks+0xc7/0x130 [ 2049.252573] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2049.257686] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2049.262814] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2049.267413] ? trace_hardirqs_on+0xbd/0x310 [ 2049.271755] ? kasan_check_read+0x11/0x20 [ 2049.275918] ? ___ratelimit+0x36f/0x655 [ 2049.279908] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.285399] ? trace_hardirqs_on+0x310/0x310 [ 2049.289817] ? lock_downgrade+0x900/0x900 [ 2049.293990] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2049.299105] ? ___ratelimit+0xaa/0x655 [ 2049.303007] ? idr_get_free+0xec0/0xec0 [ 2049.306995] ? kasan_check_write+0x14/0x20 [ 2049.311246] ? do_raw_spin_lock+0xc1/0x200 [ 2049.315509] oom_kill_process.cold.27+0x10/0x903 [ 2049.320276] ? kasan_check_write+0x14/0x20 [ 2049.324545] ? do_raw_spin_lock+0xc1/0x200 [ 2049.328801] ? oom_evaluate_task+0x540/0x540 [ 2049.333230] ? cgroup_procs_next+0x70/0x70 [ 2049.337489] ? _raw_spin_unlock_irq+0x60/0x80 [ 2049.342006] ? oom_badness+0xaa0/0xaa0 [ 2049.345917] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2049.350690] ? mem_cgroup_iter_break+0x30/0x30 [ 2049.355317] ? mark_held_locks+0xc7/0x130 [ 2049.359485] out_of_memory+0xa84/0x1430 [ 2049.363473] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2049.368069] ? kasan_check_read+0x11/0x20 [ 2049.372247] ? oom_killer_disable+0x3a0/0x3a0 [ 2049.376767] ? kasan_check_write+0x14/0x20 [ 2049.381013] ? do_raw_spin_lock+0xc1/0x200 [ 2049.385290] mem_cgroup_out_of_memory+0x15e/0x210 [ 2049.390170] ? memcg_memory_event+0x40/0x40 [ 2049.394541] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2049.399508] ? page_counter_try_charge+0x1c1/0x220 [ 2049.404456] try_charge+0xc43/0x1690 [ 2049.408213] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2049.414280] ? tcp_sendmsg+0x2f/0x50 [ 2049.418006] ? sock_sendmsg+0xd5/0x120 [ 2049.421904] ? __sys_sendto+0x3d7/0x670 [ 2049.425910] ? __x64_sys_sendto+0xe1/0x1a0 [ 2049.430156] ? do_syscall_64+0x1b9/0x820 [ 2049.434228] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.439607] ? graph_lock+0x170/0x170 [ 2049.443429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.448985] ? check_preemption_disabled+0x48/0x200 [ 2049.454022] ? check_preemption_disabled+0x48/0x200 [ 2049.459079] ? mark_held_locks+0xc7/0x130 [ 2049.463255] ? __lock_is_held+0xb5/0x140 [ 2049.467351] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2049.472291] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2049.477237] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2049.481841] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2049.486961] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.492425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2049.497979] ? check_preemption_disabled+0x48/0x200 [ 2049.503022] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2049.507796] ? mem_cgroup_sk_free+0x90/0x90 [ 2049.512175] __sk_mem_raise_allocated+0x642/0x1800 [ 2049.517130] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2049.521482] ? arch_local_save_flags+0x40/0x40 [ 2049.526111] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2049.531145] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2049.535850] ? sock_kzfree_s+0x60/0x60 [ 2049.539766] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2049.544798] ? sk_stream_alloc_skb+0x34b/0x970 [ 2049.549400] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2049.554439] ? skb_entail+0x618/0x8c0 [ 2049.558253] ? tcp_rate_check_app_limited+0x121/0x460 [ 2049.563458] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 2049.568150] __sk_mem_schedule+0x6d/0xe0 [ 2049.572222] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2049.577785] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2049.582336] ? tcp_sendpage+0x60/0x60 [ 2049.586161] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2049.591710] ? aa_label_sk_perm+0x46d/0x8e0 [ 2049.596082] ? find_held_lock+0x36/0x1c0 [ 2049.600167] ? mark_held_locks+0xc7/0x130 [ 2049.604337] ? __local_bh_enable_ip+0x160/0x260 [ 2049.609021] ? __local_bh_enable_ip+0x160/0x260 [ 2049.613711] ? trace_hardirqs_on+0xbd/0x310 [ 2049.618062] ? lock_release+0x970/0x970 [ 2049.622048] ? lock_sock_nested+0xe2/0x120 [ 2049.626295] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.631769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.637319] ? check_preemption_disabled+0x48/0x200 [ 2049.642382] ? lock_sock_nested+0x9a/0x120 [ 2049.646632] ? lock_sock_nested+0x9a/0x120 [ 2049.650900] ? __local_bh_enable_ip+0x160/0x260 [ 2049.655605] tcp_sendmsg+0x2f/0x50 [ 2049.659209] inet_sendmsg+0x1a1/0x690 [ 2049.663049] ? ipip_gro_receive+0x100/0x100 [ 2049.667391] ? apparmor_socket_sendmsg+0x29/0x30 [ 2049.672171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.677762] ? security_socket_sendmsg+0x94/0xc0 [ 2049.682531] ? ipip_gro_receive+0x100/0x100 [ 2049.686873] sock_sendmsg+0xd5/0x120 [ 2049.690616] __sys_sendto+0x3d7/0x670 [ 2049.694439] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2049.699124] ? lock_release+0x970/0x970 [ 2049.703112] ? arch_local_save_flags+0x40/0x40 [ 2049.707710] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.713241] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2049.718796] ? put_timespec64+0x10f/0x1b0 [ 2049.722972] ? nsecs_to_jiffies+0x30/0x30 [ 2049.727139] ? do_syscall_64+0x9a/0x820 [ 2049.731125] ? do_syscall_64+0x9a/0x820 [ 2049.735112] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2049.739741] ? trace_hardirqs_on+0xbd/0x310 [ 2049.744080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.749630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.755008] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2049.760480] __x64_sys_sendto+0xe1/0x1a0 [ 2049.764577] do_syscall_64+0x1b9/0x820 [ 2049.768473] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2049.773854] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2049.778800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2049.783657] ? trace_hardirqs_on_caller+0x310/0x310 [ 2049.788685] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2049.793782] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2049.798825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2049.803692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.808902] RIP: 0033:0x457569 [ 2049.812130] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.831053] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2049.838779] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2049.846061] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2049.853343] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2049.860620] R10: 0000000000010f15 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2049.867914] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff [ 2049.896158] audit: type=1326 audit(2000001042.618:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27404 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2049.905198] Task in /syz4 killed as a result of limit of /syz4 [ 2049.954323] memory: usage 307168kB, limit 307200kB, failcnt 330 [ 2049.977281] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2050.000650] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa0008000}]}) 03:50:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:42 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = accept4(r0, &(0x7f0000000080)=@ethernet={0x0, @dev}, &(0x7f0000000100)=0x80, 0x80800) accept$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) 03:50:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000b00068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2050.031662] Memory cgroup stats for /syz4: cache:120KB rss:269648KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB [ 2050.067266] Memory cgroup out of memory: Kill process 27415 (syz-executor4) score 1110 or sacrifice child [ 2050.111091] Killed process 27419 (syz-executor4) total-vm:70340kB, anon-rss:4248kB, file-rss:33512kB, shmem-rss:0kB [ 2050.134001] audit: type=1326 audit(2000001042.848:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27447 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2050.148293] oom_reaper: reaped process 27419 (syz-executor4), now anon-rss:0kB, file-rss:32680kB, shmem-rss:0kB 03:50:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700f000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:43 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x220100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x1, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000200)=@ethtool_flash={0x33, 0x9, "1447f3bfd8ea357343e48993b0e222d380fe70889c0a6dff986f44dda9ef801318a2f2ce43cfcb0015397ef7572c2247cc14033401e26b33111091de898960cf1a5d717aeb4f360a02ec77985a2115dc893178d901d14709851dcc4d72b11a8fcc922ff980a64cb976b848712146550a81d30b6ffc2a8232b59ca0bb2aadecdc"}}) 03:50:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000005068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2050.468398] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 [ 2050.500691] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2050.516214] CPU: 1 PID: 27468 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2050.523603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.523794] Call Trace: [ 2050.523823] dump_stack+0x1c4/0x2b4 [ 2050.523862] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2050.523886] ? mark_held_locks+0x130/0x130 [ 2050.523903] ? mark_held_locks+0x130/0x130 [ 2050.523961] dump_header+0x27b/0xf72 [ 2050.544749] ? check_preemption_disabled+0x48/0x200 [ 2050.544773] ? pagefault_out_of_memory+0x197/0x197 [ 2050.544793] ? debug_smp_processor_id+0x1c/0x20 [ 2050.544810] ? perf_trace_lock+0x14d/0x7a0 [ 2050.544827] ? perf_trace_lock_acquire+0x15b/0x800 [ 2050.544852] ? zap_class+0x640/0x640 [ 2050.584519] ? perf_trace_lock+0x7a0/0x7a0 [ 2050.588801] ? debug_smp_processor_id+0x1c/0x20 [ 2050.593499] ? perf_trace_lock+0x14d/0x7a0 [ 2050.597779] ? graph_lock+0x170/0x170 [ 2050.601618] ? print_usage_bug+0xc0/0xc0 [ 2050.605727] ? zap_class+0x640/0x640 [ 2050.609484] ? find_held_lock+0x36/0x1c0 [ 2050.613583] ? mark_held_locks+0xc7/0x130 [ 2050.617751] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2050.623030] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2050.628137] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2050.632750] ? trace_hardirqs_on+0xbd/0x310 [ 2050.637076] ? kasan_check_read+0x11/0x20 [ 2050.641226] ? ___ratelimit+0x36f/0x655 [ 2050.645199] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2050.650642] ? trace_hardirqs_on+0x310/0x310 [ 2050.655041] ? lock_downgrade+0x900/0x900 [ 2050.659181] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2050.664272] ? ___ratelimit+0xaa/0x655 [ 2050.668150] ? idr_get_free+0xec0/0xec0 [ 2050.672112] ? kasan_check_write+0x14/0x20 [ 2050.676337] ? do_raw_spin_lock+0xc1/0x200 [ 2050.680568] oom_kill_process.cold.27+0x10/0x903 [ 2050.685327] ? kasan_check_write+0x14/0x20 [ 2050.689639] ? do_raw_spin_lock+0xc1/0x200 [ 2050.693870] ? oom_evaluate_task+0x540/0x540 [ 2050.698285] ? cgroup_procs_next+0x70/0x70 [ 2050.702509] ? _raw_spin_unlock_irq+0x60/0x80 [ 2050.707004] ? oom_badness+0xaa0/0xaa0 [ 2050.710885] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2050.715647] ? mem_cgroup_iter_break+0x30/0x30 [ 2050.720228] ? mark_held_locks+0xc7/0x130 [ 2050.724375] out_of_memory+0xa84/0x1430 [ 2050.728728] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2050.733303] ? kasan_check_read+0x11/0x20 [ 2050.737454] ? oom_killer_disable+0x3a0/0x3a0 [ 2050.741938] ? kasan_check_write+0x14/0x20 [ 2050.746163] ? do_raw_spin_lock+0xc1/0x200 [ 2050.750394] mem_cgroup_out_of_memory+0x15e/0x210 [ 2050.755226] ? memcg_memory_event+0x40/0x40 [ 2050.759537] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2050.764461] ? page_counter_try_charge+0x1c1/0x220 [ 2050.769399] try_charge+0xc43/0x1690 [ 2050.773114] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2050.779161] ? tcp_sendmsg+0x2f/0x50 [ 2050.782881] ? sock_sendmsg+0xd5/0x120 [ 2050.786760] ? __sys_sendto+0x3d7/0x670 [ 2050.790728] ? __x64_sys_sendto+0xe1/0x1a0 [ 2050.794956] ? do_syscall_64+0x1b9/0x820 [ 2050.799006] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2050.804364] ? graph_lock+0x170/0x170 [ 2050.808157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2050.813686] ? check_preemption_disabled+0x48/0x200 [ 2050.818705] ? check_preemption_disabled+0x48/0x200 [ 2050.823733] ? mark_held_locks+0xc7/0x130 [ 2050.827873] ? __lock_is_held+0xb5/0x140 [ 2050.831928] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2050.836847] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2050.841767] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2050.846343] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2050.851432] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2050.856874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2050.862419] ? check_preemption_disabled+0x48/0x200 [ 2050.867434] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2050.872195] ? mem_cgroup_sk_free+0x90/0x90 [ 2050.876517] __sk_mem_raise_allocated+0x642/0x1800 [ 2050.881439] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2050.885751] ? arch_local_save_flags+0x40/0x40 [ 2050.890331] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2050.895338] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2050.899997] ? sock_kzfree_s+0x60/0x60 [ 2050.903890] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2050.908911] ? sk_stream_alloc_skb+0x34b/0x970 [ 2050.913485] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2050.918505] ? skb_entail+0x618/0x8c0 [ 2050.922308] ? tcp_rate_check_app_limited+0x121/0x460 [ 2050.927488] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 2050.932150] __sk_mem_schedule+0x6d/0xe0 [ 2050.936197] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2050.941733] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2050.946240] ? tcp_sendpage+0x60/0x60 [ 2050.950051] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2050.955578] ? aa_label_sk_perm+0x46d/0x8e0 [ 2050.959924] ? find_held_lock+0x36/0x1c0 [ 2050.963981] ? mark_held_locks+0xc7/0x130 [ 2050.968119] ? __local_bh_enable_ip+0x160/0x260 [ 2050.972779] ? __local_bh_enable_ip+0x160/0x260 [ 2050.977441] ? trace_hardirqs_on+0xbd/0x310 [ 2050.981790] ? lock_release+0x970/0x970 [ 2050.985767] ? lock_sock_nested+0xe2/0x120 [ 2050.989994] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2050.995434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.000968] ? check_preemption_disabled+0x48/0x200 [ 2051.005992] ? lock_sock_nested+0x9a/0x120 [ 2051.010235] ? lock_sock_nested+0x9a/0x120 [ 2051.014471] ? __local_bh_enable_ip+0x160/0x260 [ 2051.019138] tcp_sendmsg+0x2f/0x50 [ 2051.022679] inet_sendmsg+0x1a1/0x690 [ 2051.026471] ? ipip_gro_receive+0x100/0x100 [ 2051.030795] ? apparmor_socket_sendmsg+0x29/0x30 [ 2051.035540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.041071] ? security_socket_sendmsg+0x94/0xc0 [ 2051.045819] ? ipip_gro_receive+0x100/0x100 [ 2051.050157] sock_sendmsg+0xd5/0x120 [ 2051.053863] __sys_sendto+0x3d7/0x670 [ 2051.057657] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2051.062313] ? lock_release+0x970/0x970 [ 2051.066278] ? arch_local_save_flags+0x40/0x40 [ 2051.070849] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2051.076309] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2051.081838] ? put_timespec64+0x10f/0x1b0 [ 2051.085978] ? nsecs_to_jiffies+0x30/0x30 [ 2051.090120] ? do_syscall_64+0x9a/0x820 [ 2051.094084] ? do_syscall_64+0x9a/0x820 [ 2051.098049] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2051.102621] ? trace_hardirqs_on+0xbd/0x310 [ 2051.106932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.112460] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2051.117814] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2051.123465] __x64_sys_sendto+0xe1/0x1a0 [ 2051.127520] do_syscall_64+0x1b9/0x820 [ 2051.131395] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2051.136772] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2051.141694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2051.146533] ? trace_hardirqs_on_caller+0x310/0x310 [ 2051.151556] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2051.156573] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2051.161583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2051.166422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2051.171597] RIP: 0033:0x457569 [ 2051.174783] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.193671] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2051.201371] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2051.208628] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2051.215897] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2051.224465] R10: 0000000000010f15 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2051.231727] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff [ 2051.241050] audit: type=1326 audit(2000001043.958:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27447 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2051.258027] Task in /syz4 killed as a result of limit of /syz4 [ 2051.278326] memory: usage 307076kB, limit 307200kB, failcnt 340 [ 2051.285066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2051.292089] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2051.298444] Memory cgroup stats for /syz4: cache:120KB rss:269664KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB 03:50:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa0010000}]}) 03:50:44 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x7fff, 0xa4f6, r2, 0x3, r3, 0x18cc98d6, 0x1, 0x4}) 03:50:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x8000a0ffffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000009068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2051.320077] Memory cgroup out of memory: Kill process 27467 (syz-executor4) score 1110 or sacrifice child [ 2051.330054] Killed process 27468 (syz-executor4) total-vm:70340kB, anon-rss:4248kB, file-rss:33512kB, shmem-rss:0kB [ 2051.343833] oom_reaper: reaped process 27468 (syz-executor4), now anon-rss:0kB, file-rss:32680kB, shmem-rss:0kB [ 2051.394010] binder_transaction: 9 callbacks suppressed [ 2051.394027] binder: 27486:27489 transaction failed 29189/-22, size 288230376151711744-8 line 2855 03:50:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:44 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYRESOCT=r0]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', 'o\x00'}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x7, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2051.438821] audit: type=1326 audit(2000001044.158:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27494 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2051.443554] binder_release_work: 9 callbacks suppressed [ 2051.443563] binder: undelivered TRANSACTION_ERROR: 29189 03:50:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700b432068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:44 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000002940)='/dev/vcs#\x00', 0x0, 0x10000) r2 = syz_open_procfs(0x0, &(0x7f0000002980)='net/mcfilter\x00') ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000029c0)=r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101000, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000028c0)={0x53, 0xfffffffffffffffe, 0xd9, 0x3, @scatter={0xa, 0x0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000180)=""/176, 0xb0}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/80, 0x50}, {&(0x7f0000001580)=""/36, 0x24}, {&(0x7f00000015c0)=""/184, 0xb8}, {&(0x7f0000001680)=""/31, 0x1f}]}, &(0x7f0000001780)="99f49cca56e2f9446dae2778b964b9707f9419a1a9062c822517e32a834cd6ea16950f1196d84213db97cd6faad7ada866e3ef6c6618746efe257bdcc14038255bccdf1f1e54c895f3caef7183b6070798aaa4f48dddda7b1f8d1794a41cc686f6320f8fca999195f3cdd3c6d69ad9479bbe5cd00818250421b7a3a1e30fda01eb0dd879ae22d87d736fa6e3849da4e80a4be9b07e0960121a6d64723866df9d7836e1b1ecb8f4ae4351a4e55adc04327a2f14a4a3a6df7a46693d61d03271cbe2f404e746ae5b37a3ef0be3c077ab35a03ab9b74be639983e", &(0x7f0000001880)=""/4096, 0x2a, 0x20, 0x3, &(0x7f0000002880)}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002a40)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@loopback}}, &(0x7f0000002b40)=0xe8) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000002a00)='./file0\x00', r4, r5, 0x800) [ 2051.592474] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=2, oom_score_adj=1000 [ 2051.621563] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2051.636761] CPU: 0 PID: 27502 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2051.644144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.644153] Call Trace: [ 2051.644183] dump_stack+0x1c4/0x2b4 [ 2051.644210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2051.644234] ? mark_held_locks+0x130/0x130 [ 2051.644249] ? mark_held_locks+0x130/0x130 [ 2051.644275] dump_header+0x27b/0xf72 [ 2051.644309] ? check_preemption_disabled+0x48/0x200 [ 2051.644331] ? pagefault_out_of_memory+0x197/0x197 [ 2051.644349] ? debug_smp_processor_id+0x1c/0x20 [ 2051.644366] ? perf_trace_lock+0x14d/0x7a0 [ 2051.644382] ? perf_trace_lock_acquire+0x15b/0x800 [ 2051.644408] ? zap_class+0x640/0x640 [ 2051.644427] ? perf_trace_lock+0x7a0/0x7a0 [ 2051.644451] ? debug_smp_processor_id+0x1c/0x20 [ 2051.692015] ? perf_trace_lock+0x14d/0x7a0 [ 2051.692035] ? graph_lock+0x170/0x170 [ 2051.692057] ? print_usage_bug+0xc0/0xc0 [ 2051.692077] ? zap_class+0x640/0x640 [ 2051.692110] ? find_held_lock+0x36/0x1c0 [ 2051.733872] ? mark_held_locks+0xc7/0x130 [ 2051.738045] ? _raw_spin_unlock_irqrestore+0x82/0xd0 03:50:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000500068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2051.743164] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2051.748313] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2051.752936] ? trace_hardirqs_on+0xbd/0x310 [ 2051.757273] ? kasan_check_read+0x11/0x20 [ 2051.757294] ? ___ratelimit+0x36f/0x655 [ 2051.765442] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2051.765463] ? trace_hardirqs_on+0x310/0x310 [ 2051.765481] ? lock_downgrade+0x900/0x900 [ 2051.765507] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2051.765528] ? ___ratelimit+0xaa/0x655 [ 2051.765549] ? idr_get_free+0xec0/0xec0 [ 2051.792834] ? kasan_check_write+0x14/0x20 [ 2051.797092] ? do_raw_spin_lock+0xc1/0x200 [ 2051.801378] oom_kill_process.cold.27+0x10/0x903 [ 2051.806166] ? kasan_check_write+0x14/0x20 [ 2051.810431] ? do_raw_spin_lock+0xc1/0x200 [ 2051.814694] ? oom_evaluate_task+0x540/0x540 [ 2051.819150] ? cgroup_procs_next+0x70/0x70 [ 2051.823411] ? _raw_spin_unlock_irq+0x60/0x80 [ 2051.827953] ? oom_badness+0xaa0/0xaa0 [ 2051.831872] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2051.836652] ? mem_cgroup_iter_break+0x30/0x30 [ 2051.841295] ? mark_held_locks+0xc7/0x130 [ 2051.845475] out_of_memory+0xa84/0x1430 [ 2051.849459] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2051.854061] ? kasan_check_read+0x11/0x20 [ 2051.858248] ? oom_killer_disable+0x3a0/0x3a0 [ 2051.862792] ? kasan_check_write+0x14/0x20 [ 2051.867046] ? do_raw_spin_lock+0xc1/0x200 [ 2051.871326] mem_cgroup_out_of_memory+0x15e/0x210 [ 2051.876195] ? memcg_memory_event+0x40/0x40 [ 2051.880548] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2051.885519] ? page_counter_try_charge+0x1c1/0x220 [ 2051.890473] try_charge+0xc43/0x1690 [ 2051.894218] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2051.894238] ? tcp_sendmsg+0x2f/0x50 [ 2051.894256] ? sock_sendmsg+0xd5/0x120 [ 2051.894271] ? __sys_sendto+0x3d7/0x670 [ 2051.894289] ? graph_lock+0x170/0x170 [ 2051.894308] ? graph_lock+0x170/0x170 [ 2051.919557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.925118] ? check_preemption_disabled+0x48/0x200 [ 2051.930152] ? check_preemption_disabled+0x48/0x200 [ 2051.935209] ? mark_held_locks+0xc7/0x130 [ 2051.939389] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2051.944342] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2051.949295] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2051.953905] ? rcu_read_lock_sched_held+0x108/0x120 [ 2051.958944] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2051.964079] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2051.969555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2051.975120] ? check_preemption_disabled+0x48/0x200 [ 2051.980169] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2051.984949] ? mem_cgroup_sk_free+0x90/0x90 [ 2051.989315] __sk_mem_raise_allocated+0x642/0x1800 [ 2051.994277] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2051.998624] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2052.004209] ? alloc_pages_current+0x114/0x210 [ 2052.008832] ? __check_object_size+0x2b0/0x782 [ 2052.013446] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2052.018139] ? sock_kzfree_s+0x60/0x60 [ 2052.022047] ? _copy_from_iter_full+0x2b3/0xd20 [ 2052.026759] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2052.031803] ? tcp_rate_check_app_limited+0x121/0x460 [ 2052.037019] ? iov_iter_advance+0x1460/0x1460 [ 2052.041542] __sk_mem_schedule+0x6d/0xe0 [ 2052.045653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2052.051226] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2052.055816] ? tcp_sendpage+0x60/0x60 [ 2052.059640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2052.065200] ? aa_label_sk_perm+0x46d/0x8e0 [ 2052.069564] ? find_held_lock+0x36/0x1c0 [ 2052.073660] ? mark_held_locks+0xc7/0x130 [ 2052.077849] ? __local_bh_enable_ip+0x160/0x260 [ 2052.082545] ? __local_bh_enable_ip+0x160/0x260 [ 2052.087242] ? trace_hardirqs_on+0xbd/0x310 [ 2052.091588] ? lock_release+0x970/0x970 [ 2052.095585] ? lock_sock_nested+0xe2/0x120 [ 2052.099843] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2052.105321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.110889] ? check_preemption_disabled+0x48/0x200 [ 2052.115925] ? lock_sock_nested+0x9a/0x120 [ 2052.120157] ? lock_sock_nested+0x9a/0x120 [ 2052.124429] ? __local_bh_enable_ip+0x160/0x260 [ 2052.129101] tcp_sendmsg+0x2f/0x50 [ 2052.132638] inet_sendmsg+0x1a1/0x690 [ 2052.136434] ? ipip_gro_receive+0x100/0x100 [ 2052.140766] ? apparmor_socket_sendmsg+0x29/0x30 [ 2052.145532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.151077] ? security_socket_sendmsg+0x94/0xc0 [ 2052.155829] ? ipip_gro_receive+0x100/0x100 [ 2052.160152] sock_sendmsg+0xd5/0x120 [ 2052.163865] __sys_sendto+0x3d7/0x670 [ 2052.167661] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2052.172326] ? lock_release+0x970/0x970 [ 2052.176303] ? arch_local_save_flags+0x40/0x40 [ 2052.180898] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2052.186364] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2052.191897] ? put_timespec64+0x10f/0x1b0 [ 2052.196037] ? nsecs_to_jiffies+0x30/0x30 [ 2052.200182] ? do_syscall_64+0x9a/0x820 [ 2052.204176] ? do_syscall_64+0x9a/0x820 [ 2052.208156] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2052.212747] ? trace_hardirqs_on+0xbd/0x310 [ 2052.217077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.222627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2052.228003] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2052.233463] __x64_sys_sendto+0xe1/0x1a0 [ 2052.237536] do_syscall_64+0x1b9/0x820 [ 2052.241410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2052.246782] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2052.251705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2052.256558] ? trace_hardirqs_on_caller+0x310/0x310 [ 2052.261593] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2052.266604] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2052.271621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2052.276477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2052.281690] RIP: 0033:0x457569 [ 2052.284886] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2052.303776] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2052.311486] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2052.318763] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2052.326022] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2052.333291] R10: 0000000000010f15 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2052.340565] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff [ 2052.351140] Task in /syz4 killed as a result of limit of /syz4 [ 2052.353255] audit: type=1326 audit(2000001045.068:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27494 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2052.358362] memory: usage 307200kB, limit 307200kB, failcnt 350 [ 2052.385548] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4c000000}]}) 03:50:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000800068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000080)='bridge0\x00', 0x4) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, {0x7, 0x400, 0x6b, 0x2318, 0x9, 0x101}, 0x7, 0x6}, 0xe) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x3ff, 0x10, 0xffffffffffffff01, 0x20}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x7}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x5000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2052.392533] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.402030] Memory cgroup stats for /syz4: cache:120KB rss:269656KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB [ 2052.433314] Memory cgroup out of memory: Kill process 27501 (syz-executor4) score 1110 or sacrifice child [ 2052.459167] binder: 27533:27536 transaction failed 29189/-22, size 2046820352-8 line 2855 [ 2052.460005] Killed process 27502 (syz-executor4) total-vm:70340kB, anon-rss:4248kB, file-rss:33516kB, shmem-rss:0kB [ 2052.484150] oom_reaper: reaped process 27502 (syz-executor4), now anon-rss:0kB, file-rss:32684kB, shmem-rss:0kB [ 2052.493580] binder: undelivered TRANSACTION_ERROR: 29189 03:50:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2052.504835] audit: type=1326 audit(2000001045.228:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27539 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = semget$private(0x0, 0x0, 0x320) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/4096) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000001080)=ANY=[@ANYBLOB="0d00000000000000eafb6043535d7906fba035687100000000000000000000000000000000050000000000000000000000"]}) 03:50:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700003f068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xff0f000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2052.659463] binder: 27552:27553 transaction failed 29189/-22, size 1792-8 line 2855 03:50:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2052.713615] binder: undelivered TRANSACTION_ERROR: 29189 03:50:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000f068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2053.297608] audit: type=1326 audit(2000001046.018:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27539 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xe4000000}]}) 03:50:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_getscheduler(r1) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_ringparam={0xd}}) 03:50:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020319000000070000f0068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1a0ffffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2053.417825] binder: 27581:27582 transaction failed 29189/-22, size -1610547200-8 line 2855 [ 2053.437571] audit: type=1326 audit(2000001046.158:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27586 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0d25c400008000f661cc78e2d00000000000000200000000000000155377d56518a0f43c000000000000003a9c3e251b91fcbf51"]}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'rose0\x00'}}) r1 = socket(0xd, 0xdba282456c379908, 0xfffffffffffffe01) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000), 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'bond_slave\x00', 0x400000000000000}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0), 0x4) close(r1) [ 2053.472662] binder: undelivered TRANSACTION_ERROR: 29189 03:50:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000009068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x70c000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2053.689137] binder: 27608:27609 transaction failed 29189/-22, size 504403158265495552-8 line 2855 [ 2053.728402] binder: 27608:27609 transaction failed 29189/-22, size 504403158265495552-8 line 2855 [ 2053.734419] binder: undelivered TRANSACTION_ERROR: 29189 [ 2053.751205] binder: undelivered TRANSACTION_ERROR: 29189 [ 2054.227458] audit: type=1326 audit(2000001046.948:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27586 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000}]}) 03:50:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000a068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:47 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xc2a}, 0x8) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000000000000000000000000000000000000098dc5d17000000000000000000020036504dec197fd0a0cd4c8bc45211c7b4f938f05d4a9760a8511c42559efad84dd6cdccb11244a743ae1a4279689af299c89a580cbd28a50e20bffe2d57aed38187f5223b17967f3915df770000000000000000000000000000"]}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x140) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:50:47 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x50000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:47 executing program 2: socket$pppoe(0x18, 0x1, 0x0) socketpair$inet6(0xa, 0xf, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0xeed}, 0x8) [ 2054.337223] binder: 27627:27629 transaction failed 29189/-22, size 432345564227567616-8 line 2855 [ 2054.373357] binder: undelivered TRANSACTION_ERROR: 29189 03:50:47 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000002068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2054.398544] audit: type=1326 audit(2000001047.118:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27633 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x218, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:47 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2054.597847] binder: 27650:27652 transaction failed 29189/-22, size 18-8 line 2855 [ 2054.625107] binder: 27650:27652 transaction failed 29189/-22, size 18-8 line 2855 [ 2054.648753] binder: undelivered TRANSACTION_ERROR: 29189 [ 2054.678099] binder: undelivered TRANSACTION_ERROR: 29189 03:50:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6c}]}) 03:50:47 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000b068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:47 executing program 2: socket$pppoe(0x18, 0x1, 0x0) 03:50:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x60, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2055.155128] audit: type=1326 audit(2000001047.878:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27633 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2055.256085] binder: 27667:27670 transaction failed 29189/-22, size 1184-8 line 2855 [ 2055.283773] binder: undelivered TRANSACTION_ERROR: 29189 03:50:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000008068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0020000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:48 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000000000000000000100000000000000000000000000000000000000000"]}) [ 2055.294322] audit: type=1326 audit(2000001048.018:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27671 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:48 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x900000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2056.057221] audit: type=1326 audit(2000001048.778:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27671 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x10}]}) 03:50:48 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000000000000000000000000000000000000000000000000000000000d200000000004141967022824fe4c71c2468b7a53b0c7dc1b85de24dc994ffd2528cc74bb4f33313f0000000000000000000000000841e95d564b0daf3858343735a732be05840be03149c44d80536a5e1475ef0e2f6a715aec8f43216749839523a5d99f67750bbc135405eadac95cab64e2223f8796752928528"]}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x3, 0x1, 0xfffffffffffffff7, 0xe810, 0x800, 0x10001, 0xfffffffffffffff7}, 0x0) 03:50:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000006068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:48 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfe800000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2056.156110] audit: type=1326 audit(2000001048.878:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27710 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:49 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000100)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x1, 0x1a67, 0x80000000}}) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x505000) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xf49) ioctl$VT_RELDISP(r2, 0x5605) 03:50:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000010068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:49 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x40020000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000f068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2056.956728] audit: type=1326 audit(2000001049.678:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27710 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x8000a0ffffffff}]}) 03:50:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000005068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x51eaccb6, 0x5, 0x100, 0x8}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x2, 0xf95c, 0x5, 0x4, 0x3}, &(0x7f0000000200)=0x14) 03:50:49 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2057.067363] binder_transaction: 5 callbacks suppressed [ 2057.067383] binder: 27763:27764 transaction failed 29189/-22, size 3-8 line 2855 03:50:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x33f, 0x8, 0x1, 0x0, 0x1000, @broadcast}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2057.116457] binder_release_work: 5 callbacks suppressed [ 2057.116466] binder: undelivered TRANSACTION_ERROR: 29189 [ 2057.143505] audit: type=1326 audit(2000001049.858:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27777 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068108023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffffa0008000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d000000a9a5a9a9ec91c41300000000000000000000000000000000"]}) [ 2057.372506] binder: 27792:27793 transaction failed 29189/-22, size 7-8 line 2855 [ 2057.404547] binder: undelivered TRANSACTION_ERROR: 29189 03:50:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x68000000}]}) 03:50:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068109023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272020067653000", &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_to_team\x00', 0xfff}) 03:50:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3f00, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2057.897185] audit: type=1326 audit(2000001050.618:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27777 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2057.992546] binder: 27810:27819 transaction failed 29189/-22, size 1791001362431-8 line 2855 [ 2058.021060] binder: undelivered TRANSACTION_ERROR: 29189 03:50:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2058.054090] audit: type=1326 audit(2000001050.768:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27823 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000006810a023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2058.145662] binder: 27831:27834 transaction failed 29189/-22, size 360287970189639680-8 line 2855 03:50:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000010c0)) read$FUSE(r1, &(0x7f00000000c0), 0x1000) [ 2058.197290] binder: undelivered TRANSACTION_ERROR: 29189 03:50:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2058.321602] binder: 27846:27847 transaction failed 29189/-22, size 301989888-8 line 2855 [ 2058.337810] binder: undelivered TRANSACTION_ERROR: 29189 03:50:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xe400}]}) 03:50:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068102023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x200000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000006810b023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2058.891096] binder: 27854:27855 transaction failed 29189/-22, size 31232-8 line 2855 [ 2058.923873] binder: undelivered TRANSACTION_ERROR: 29189 03:50:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa0010000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2059.066118] binder: 27871:27872 transaction failed 29189/-22, size 1280-8 line 2855 [ 2059.087230] binder: undelivered TRANSACTION_ERROR: 29189 03:50:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)={0x10001, 0x8, 0x711a26ba, 0x0, 0x4, 0x40, 0x8001, 0x1, 0x1, 0x1, 0x5, 0x3f, 0x0, 0x0, 0x8, 0x7, 0x3, 0x7fff, 0x800}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}) 03:50:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068105023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0040000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x600}]}) 03:50:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x100000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:52 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x39, 0x7, [0xfffffffffffffff7, 0x9, 0x7, 0x0, 0x7, 0x5, 0x20a]}}) 03:50:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100033b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2059.676148] kauditd_printk_skb: 2 callbacks suppressed [ 2059.676163] audit: type=1326 audit(2000001052.398:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27853 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2059.750093] binder: 27903:27905 transaction failed 29189/-22, size -1610350592-8 line 2855 03:50:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2059.792408] binder: undelivered TRANSACTION_ERROR: 29189 03:50:52 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x8140, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000140)=0x3f, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0d0000000000000000000000000000004c6e862300000000000000000000000000000000"]}) 03:50:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2059.853383] audit: type=1326 audit(2000001052.568:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27912 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4a0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2059.934880] binder: 27919:27920 transaction failed 29189/-22, size 76-8 line 2855 03:50:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068106023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2059.975855] binder: undelivered TRANSACTION_ERROR: 29189 03:50:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2060.114801] binder: 27934:27938 transaction failed 29189/-22, size 7493989779944505344-8 line 2855 [ 2060.142606] binder: undelivered TRANSACTION_ERROR: 29189 [ 2060.607116] audit: type=1326 audit(2000001053.328:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27912 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa00}]}) 03:50:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000050c0)={'veth1_to_team\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x15, 0x2, 0x100, "0887d19845bf22f046fc35abe8a9989d"}, 0x15, 0x2) 03:50:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfdffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0ffffffff, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068110023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000203190000000700000006810f023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2060.735226] audit: type=1326 audit(2000001053.458:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27957 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0de9ffff0000000000000000000000000000000000000500000000000000000000000000"]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 03:50:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0020000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa}]}) 03:50:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:54 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d00a3000000000000000000000000000000000000000000000000000000000000070000"]}) 03:50:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100043b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x700000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2061.535737] audit: type=1326 audit(2000001054.258:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27957 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2061.640399] audit: type=1326 audit(2000001054.358:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28001 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:54 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000000c0)={'briNg]0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x27) 03:50:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100033b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:50:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1802000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2062.432128] audit: type=1326 audit(2000001055.148:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28001 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7a00000000000000}]}) 03:50:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0409000100010100ff3ffe58", 0x1f}], 0x1) 03:50:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 03:50:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x60000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2062.557193] binder_transaction: 7 callbacks suppressed [ 2062.557213] binder: 28038:28047 transaction failed 29189/-22, size 117440512-8 line 2855 [ 2062.571074] audit: type=1326 audit(2000001055.278:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28048 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0503000100010100ff3ffe58", 0x1f}], 0x1) [ 2062.644949] binder_release_work: 7 callbacks suppressed [ 2062.644958] binder: undelivered TRANSACTION_ERROR: 29189 03:50:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x700, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2062.749320] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2062.787122] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2062.845566] binder: 28071:28073 transaction failed 29189/-22, size 1056964608-8 line 2855 [ 2062.883357] binder: undelivered TRANSACTION_ERROR: 29189 03:50:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x74000000}]}) 03:50:56 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676513001700", &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x8, 0x8, 0x3ff}}) 03:50:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050b000100010100ff3ffe58", 0x1f}], 0x1) 03:50:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x8, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2063.344211] audit: type=1326 audit(2000001056.068:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28048 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2063.415421] binder: 28082:28085 transaction failed 29189/-22, size 116-8 line 2855 03:50:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) 03:50:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2063.456141] audit: type=1326 audit(2000001056.178:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28090 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2063.459032] binder: undelivered TRANSACTION_ERROR: 29189 03:50:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b05090b0100010100ff3ffe58", 0x1f}], 0x1) 03:50:56 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000300)={0x7, 0xffffffffffffffff}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x6, 0x62001) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) poll(&(0x7f00000003c0)=[{r0}, {r1, 0x448c}, {r2, 0x1200}, {r3, 0xa}, {r4, 0x200}], 0x5, 0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x7, [0x1, 0xffffffff, 0x10001, 0x101, 0x2, 0xffff, 0x0]}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x39, 0xf, 0x3, {0x6, @ether_spec={@dev={[], 0xb}, @local, 0x9}, {"cf0a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 0x2, 0x0, [0x3, 0x6]}, @esp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0xe}, 0x3, 0x8001}, {"0dd1", @dev={[], 0x1a}, 0x9d, 0x8, [0x80, 0x7]}, 0x8, 0x6}, 0x6, [0x2, 0x2, 0x7, 0x10d8, 0x1, 0x50]}}) r6 = accept4(r5, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000240)=0x80, 0x80800) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000002c0)=0x10, 0x4) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x8001, @empty, 0xffff}, 0x1c) 03:50:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xff0f0000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2063.621848] binder: 28103:28104 transaction failed 29189/-22, size 216172782113783808-8 line 2855 03:50:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x10f15, &(0x7f00000000c0), 0x6) [ 2063.692697] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2063.703732] binder: undelivered TRANSACTION_ERROR: 29189 [ 2063.727178] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509050100010100ff3ffe58", 0x1f}], 0x1) 03:50:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfffffffe, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4c00}]}) 03:50:57 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) [ 2064.331943] binder: 28126:28131 transaction failed 29189/-22, size 67108864-8 line 2855 [ 2064.339566] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:57 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@rand_addr=0x8, @rand_addr, @local}, 0xc) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000001c0)=0xed386140000) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000000000009e2704a586b2f5854d00009be200000000000000000008000000"]}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x201, 0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) [ 2064.372915] binder: undelivered TRANSACTION_ERROR: 29189 [ 2064.373415] binder: 28126:28131 transaction failed 29189/-22, size 67108864-8 line 2855 [ 2064.393868] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 [ 2064.403395] binder: undelivered TRANSACTION_ERROR: 29189 [ 2064.405460] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2064.433625] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2064.463282] CPU: 0 PID: 28135 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2064.470677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2064.480050] Call Trace: [ 2064.482666] dump_stack+0x1c4/0x2b4 [ 2064.486348] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2064.491578] ? mark_held_locks+0x130/0x130 [ 2064.495832] ? mark_held_locks+0x130/0x130 [ 2064.500094] dump_header+0x27b/0xf72 [ 2064.503847] ? check_preemption_disabled+0x48/0x200 [ 2064.508894] ? pagefault_out_of_memory+0x197/0x197 [ 2064.513848] ? debug_smp_processor_id+0x1c/0x20 [ 2064.518542] ? perf_trace_lock+0x14d/0x7a0 [ 2064.522810] ? perf_trace_lock_acquire+0x15b/0x800 [ 2064.527777] ? zap_class+0x640/0x640 [ 2064.531535] ? perf_trace_lock+0x7a0/0x7a0 [ 2064.535803] ? debug_smp_processor_id+0x1c/0x20 [ 2064.538470] binder: 28145:28146 transaction failed 29189/-22, size 104-8 line 2855 [ 2064.540493] ? perf_trace_lock+0x14d/0x7a0 [ 2064.540513] ? graph_lock+0x170/0x170 [ 2064.540534] ? print_usage_bug+0xc0/0xc0 03:50:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2064.540553] ? zap_class+0x640/0x640 [ 2064.540585] ? find_held_lock+0x36/0x1c0 [ 2064.550324] binder: undelivered TRANSACTION_ERROR: 29189 [ 2064.552541] ? mark_held_locks+0xc7/0x130 [ 2064.552593] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2064.552621] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2064.552638] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2064.552669] ? trace_hardirqs_on+0xbd/0x310 [ 2064.573742] ? kasan_check_read+0x11/0x20 [ 2064.573772] ? ___ratelimit+0x36f/0x655 [ 2064.573794] ? __bpf_trace_preemptirq_template+0x30/0x30 03:50:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2064.573814] ? trace_hardirqs_on+0x310/0x310 [ 2064.573833] ? lock_downgrade+0x900/0x900 [ 2064.573859] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2064.583123] ? ___ratelimit+0xaa/0x655 [ 2064.583147] ? idr_get_free+0xec0/0xec0 [ 2064.583166] ? kasan_check_write+0x14/0x20 [ 2064.583185] ? do_raw_spin_lock+0xc1/0x200 [ 2064.583217] oom_kill_process.cold.27+0x10/0x903 [ 2064.583238] ? kasan_check_write+0x14/0x20 [ 2064.583268] ? do_raw_spin_lock+0xc1/0x200 [ 2064.647233] binder: 28149:28150 transaction failed 29189/-22, size -1610579968-8 line 2855 03:50:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2064.649819] ? oom_evaluate_task+0x540/0x540 [ 2064.649848] ? cgroup_procs_next+0x70/0x70 [ 2064.649878] ? _raw_spin_unlock_irq+0x60/0x80 [ 2064.656302] binder: undelivered TRANSACTION_ERROR: 29189 [ 2064.662520] ? oom_badness+0xaa0/0xaa0 [ 2064.662545] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2064.662569] ? mem_cgroup_iter_break+0x30/0x30 [ 2064.662610] ? mark_held_locks+0xc7/0x130 [ 2064.698566] out_of_memory+0xa84/0x1430 [ 2064.702577] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2064.707194] ? kasan_check_read+0x11/0x20 [ 2064.711374] ? oom_killer_disable+0x3a0/0x3a0 [ 2064.715893] ? kasan_check_write+0x14/0x20 [ 2064.720157] ? do_raw_spin_lock+0xc1/0x200 [ 2064.724433] mem_cgroup_out_of_memory+0x15e/0x210 [ 2064.729305] ? memcg_memory_event+0x40/0x40 [ 2064.733648] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2064.738612] ? page_counter_try_charge+0x1c1/0x220 [ 2064.743572] try_charge+0xc43/0x1690 [ 2064.747328] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2064.753406] ? mark_held_locks+0xc7/0x130 [ 2064.757583] ? mem_cgroup_charge_skmem+0x1cf/0x390 03:50:57 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x80, 0x80002) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xb72e, 0x0, 0x9}, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000f2ffffff00000000000000000000000000000000b060123794d63ff18f91000021a2422797ee47c951"]}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000200)=0x4) [ 2064.762533] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2064.767483] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2064.772090] ? trace_hardirqs_on+0xbd/0x310 [ 2064.776435] ? check_preemption_disabled+0x48/0x200 [ 2064.776457] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2064.776477] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2064.776498] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2064.776524] ? mark_held_locks+0xc7/0x130 [ 2064.776547] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2064.776564] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2064.776588] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2064.786736] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2064.786765] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2064.786785] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2064.786805] ? check_preemption_disabled+0x48/0x200 [ 2064.786822] ? __sk_mem_raise_allocated+0x721/0x1800 [ 2064.786850] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2064.786875] ? mem_cgroup_sk_free+0x90/0x90 [ 2064.851879] __sk_mem_raise_allocated+0x642/0x1800 [ 2064.856869] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2064.861253] ? arch_local_save_flags+0x40/0x40 [ 2064.865875] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2064.870927] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2064.875628] ? sock_kzfree_s+0x60/0x60 [ 2064.879544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2064.885135] ? sk_stream_alloc_skb+0x34b/0x970 [ 2064.889771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2064.895326] ? skb_entail+0x618/0x8c0 [ 2064.899153] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 2064.903850] __sk_mem_schedule+0x6d/0xe0 [ 2064.907931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2064.913495] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2064.918059] ? tcp_sendpage+0x60/0x60 [ 2064.921887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2064.927460] ? aa_label_sk_perm+0x46d/0x8e0 [ 2064.931837] ? find_held_lock+0x36/0x1c0 [ 2064.935943] ? mark_held_locks+0xc7/0x130 [ 2064.940130] ? __local_bh_enable_ip+0x160/0x260 [ 2064.944817] ? __local_bh_enable_ip+0x160/0x260 [ 2064.949513] ? trace_hardirqs_on+0xbd/0x310 [ 2064.953852] ? lock_release+0x970/0x970 [ 2064.957844] ? lock_sock_nested+0xe2/0x120 [ 2064.957867] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2064.957889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2064.967572] ? check_preemption_disabled+0x48/0x200 [ 2064.967591] ? lock_sock_nested+0x9a/0x120 [ 2064.967611] ? lock_sock_nested+0x9a/0x120 [ 2064.967633] ? __local_bh_enable_ip+0x160/0x260 [ 2064.967664] tcp_sendmsg+0x2f/0x50 [ 2064.967687] inet_sendmsg+0x1a1/0x690 [ 2064.967711] ? ipip_gro_receive+0x100/0x100 [ 2064.967753] ? apparmor_socket_sendmsg+0x29/0x30 [ 2064.967774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2065.013416] ? security_socket_sendmsg+0x94/0xc0 [ 2065.018200] ? ipip_gro_receive+0x100/0x100 [ 2065.022547] sock_sendmsg+0xd5/0x120 [ 2065.026275] __sys_sendto+0x3d7/0x670 [ 2065.030071] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2065.034742] ? lock_release+0x970/0x970 [ 2065.038758] ? arch_local_save_flags+0x40/0x40 [ 2065.043372] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2065.048879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2065.054423] ? put_timespec64+0x10f/0x1b0 [ 2065.058583] ? nsecs_to_jiffies+0x30/0x30 [ 2065.062751] ? do_syscall_64+0x9a/0x820 [ 2065.066727] ? do_syscall_64+0x9a/0x820 [ 2065.070701] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2065.075286] ? trace_hardirqs_on+0xbd/0x310 [ 2065.079685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2065.085244] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2065.090619] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2065.096066] __x64_sys_sendto+0xe1/0x1a0 [ 2065.100127] do_syscall_64+0x1b9/0x820 [ 2065.104010] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2065.109367] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2065.114289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2065.119140] ? trace_hardirqs_on_caller+0x310/0x310 [ 2065.124166] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2065.129202] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2065.134228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2065.139075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2065.144271] RIP: 0033:0x457569 [ 2065.147454] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2065.166354] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2065.174073] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2065.181333] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2065.188595] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2065.195855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2065.203122] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff 03:50:57 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/153, 0x99, 0x10120, &(0x7f0000000180)={0xa, 0x4e20, 0x80000001, @ipv4={[], [], @loopback}, 0xd5}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000000000600000000000000000000000000000000000000000000"]}) 03:50:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509080100010100ff3ffe58", 0x1f}], 0x1) 03:50:57 executing program 2: socket$pppoe(0x18, 0x1, 0x0) [ 2065.213524] Task in /syz4 killed as a result of limit of /syz4 [ 2065.227800] kauditd_printk_skb: 2 callbacks suppressed [ 2065.227816] audit: type=1326 audit(2000001057.948:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28138 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2065.242842] memory: usage 307124kB, limit 307200kB, failcnt 373 [ 2065.283881] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2065.296522] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2065.302699] Memory cgroup stats for /syz4: cache:120KB rss:269724KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB 03:50:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffff7f00000000}]}) 03:50:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x500, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2065.327957] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2065.343478] Memory cgroup out of memory: Kill process 28130 (syz-executor4) score 1110 or sacrifice child [ 2065.369603] Killed process 28135 (syz-executor4) total-vm:70340kB, anon-rss:4248kB, file-rss:33440kB, shmem-rss:0kB [ 2065.381382] binder: 28171:28174 transaction failed 29189/-22, size 72057594037927936-8 line 2855 [ 2065.390832] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2065.393880] oom_reaper: reaped process 28135 (syz-executor4), now anon-rss:0kB, file-rss:32672kB, shmem-rss:0kB [ 2065.423985] binder: undelivered TRANSACTION_ERROR: 29189 03:50:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) 03:50:58 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0d00000000000000000000000000000000003a63ee141dc7548b00000000000000000000e6e6ee4a2a56c966b999906ef2df0bb2d29f020fa5215258aaaa8d20b867c7e99628cba8773b153bd124213a817eff7d9cea60548e9306cc024a7d500e58f4e42e8cd8a4cd56a77e50be1b04d2a8d44b8bf016c41c02ee9f"]}) 03:50:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2065.434757] audit: type=1326 audit(2000001058.158:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28177 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x40000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2065.523686] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 [ 2065.554776] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2065.560676] CPU: 1 PID: 28183 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2065.568074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.577448] Call Trace: [ 2065.580071] dump_stack+0x1c4/0x2b4 [ 2065.583745] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2065.588970] ? mark_held_locks+0x130/0x130 [ 2065.593232] ? mark_held_locks+0x130/0x130 [ 2065.597515] dump_header+0x27b/0xf72 [ 2065.601276] ? check_preemption_disabled+0x48/0x200 [ 2065.606331] ? pagefault_out_of_memory+0x197/0x197 [ 2065.611303] ? debug_smp_processor_id+0x1c/0x20 [ 2065.615996] ? perf_trace_lock+0x14d/0x7a0 [ 2065.620264] ? perf_trace_lock_acquire+0x15b/0x800 [ 2065.625230] ? zap_class+0x640/0x640 [ 2065.628975] ? perf_trace_lock+0x7a0/0x7a0 [ 2065.633242] ? debug_smp_processor_id+0x1c/0x20 [ 2065.637940] ? perf_trace_lock+0x14d/0x7a0 [ 2065.642199] ? graph_lock+0x170/0x170 [ 2065.646031] ? print_usage_bug+0xc0/0xc0 [ 2065.650121] ? zap_class+0x640/0x640 [ 2065.653882] ? find_held_lock+0x36/0x1c0 [ 2065.657985] ? mark_held_locks+0xc7/0x130 [ 2065.660698] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2065.662170] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2065.662190] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2065.662211] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2065.662235] ? trace_hardirqs_on+0xbd/0x310 [ 2065.662260] ? kasan_check_read+0x11/0x20 [ 2065.662279] ? ___ratelimit+0x36f/0x655 [ 2065.662302] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2065.678047] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2065.681019] ? trace_hardirqs_on+0x310/0x310 [ 2065.681040] ? lock_downgrade+0x900/0x900 [ 2065.681070] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2065.681091] ? ___ratelimit+0xaa/0x655 [ 2065.681116] ? idr_get_free+0xec0/0xec0 [ 2065.733627] ? kasan_check_write+0x14/0x20 [ 2065.737891] ? do_raw_spin_lock+0xc1/0x200 [ 2065.742168] oom_kill_process.cold.27+0x10/0x903 [ 2065.746946] ? kasan_check_write+0x14/0x20 [ 2065.751203] ? do_raw_spin_lock+0xc1/0x200 [ 2065.755504] ? oom_evaluate_task+0x540/0x540 [ 2065.759956] ? cgroup_procs_next+0x70/0x70 [ 2065.764259] ? _raw_spin_unlock_irq+0x60/0x80 [ 2065.768796] ? oom_badness+0xaa0/0xaa0 [ 2065.771333] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 2065.772733] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2065.772759] ? mem_cgroup_iter_break+0x30/0x30 [ 2065.772811] ? mark_held_locks+0xc7/0x130 [ 2065.772844] out_of_memory+0xa84/0x1430 [ 2065.797259] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 2065.797589] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2065.797613] ? kasan_check_read+0x11/0x20 [ 2065.797637] ? oom_killer_disable+0x3a0/0x3a0 [ 2065.797673] ? kasan_check_write+0x14/0x20 [ 2065.822447] ? do_raw_spin_lock+0xc1/0x200 [ 2065.826751] mem_cgroup_out_of_memory+0x15e/0x210 [ 2065.831638] ? memcg_memory_event+0x40/0x40 [ 2065.835986] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2065.840954] ? page_counter_try_charge+0x1c1/0x220 [ 2065.845917] try_charge+0xc43/0x1690 [ 2065.849678] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2065.855771] ? tcp_sendmsg+0x2f/0x50 [ 2065.859514] ? sock_sendmsg+0xd5/0x120 [ 2065.863419] ? __sys_sendto+0x3d7/0x670 [ 2065.867420] ? graph_lock+0x170/0x170 [ 2065.871254] ? graph_lock+0x170/0x170 03:50:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509040000010100ff3ffe58", 0x1f}], 0x1) 03:50:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000500010100ff3ffe58", 0x1f}], 0x1) 03:50:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xff0f, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509060100010100ff3ffe58", 0x1f}], 0x1) 03:50:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b05090a0100010100ff3ffe58", 0x1f}], 0x1) [ 2065.875086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2065.880662] ? check_preemption_disabled+0x48/0x200 [ 2065.885705] ? check_preemption_disabled+0x48/0x200 [ 2065.890785] ? mark_held_locks+0xc7/0x130 [ 2065.894961] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2065.899920] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2065.904875] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2065.909493] ? rcu_read_lock_sched_held+0x108/0x120 [ 2065.914534] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2065.919687] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2065.925178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2065.930754] ? check_preemption_disabled+0x48/0x200 [ 2065.935813] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2065.940600] ? mem_cgroup_sk_free+0x90/0x90 [ 2065.944976] __sk_mem_raise_allocated+0x642/0x1800 [ 2065.949949] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2065.954300] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2065.959873] ? alloc_pages_current+0x114/0x210 [ 2065.964491] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2065.969187] ? sock_kzfree_s+0x60/0x60 [ 2065.973104] ? _copy_from_iter_full+0x2b3/0xd20 [ 2065.977851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2065.983414] ? __sk_flush_backlog+0x2f/0x40 [ 2065.987771] ? iov_iter_advance+0x1460/0x1460 [ 2065.992313] __sk_mem_schedule+0x6d/0xe0 [ 2065.996399] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2066.001972] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2066.006535] ? tcp_sendpage+0x60/0x60 [ 2066.010367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2066.015936] ? aa_label_sk_perm+0x46d/0x8e0 [ 2066.020305] ? find_held_lock+0x36/0x1c0 [ 2066.024396] ? mark_held_locks+0xc7/0x130 [ 2066.028571] ? __local_bh_enable_ip+0x160/0x260 [ 2066.033269] ? __local_bh_enable_ip+0x160/0x260 [ 2066.037971] ? trace_hardirqs_on+0xbd/0x310 [ 2066.042306] ? lock_release+0x970/0x970 [ 2066.046294] ? lock_sock_nested+0xe2/0x120 [ 2066.050561] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2066.056023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2066.061555] ? check_preemption_disabled+0x48/0x200 [ 2066.066579] ? lock_sock_nested+0x9a/0x120 [ 2066.070828] ? lock_sock_nested+0x9a/0x120 [ 2066.075059] ? __local_bh_enable_ip+0x160/0x260 [ 2066.079737] tcp_sendmsg+0x2f/0x50 [ 2066.083284] inet_sendmsg+0x1a1/0x690 [ 2066.087087] ? ipip_gro_receive+0x100/0x100 [ 2066.091442] ? apparmor_socket_sendmsg+0x29/0x30 [ 2066.096193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2066.101734] ? security_socket_sendmsg+0x94/0xc0 [ 2066.106485] ? ipip_gro_receive+0x100/0x100 [ 2066.110805] sock_sendmsg+0xd5/0x120 [ 2066.114531] __sys_sendto+0x3d7/0x670 [ 2066.118366] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2066.123040] ? lock_release+0x970/0x970 [ 2066.127019] ? arch_local_save_flags+0x40/0x40 [ 2066.131650] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2066.137129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2066.142658] ? put_timespec64+0x10f/0x1b0 [ 2066.146825] ? nsecs_to_jiffies+0x30/0x30 [ 2066.150968] ? do_syscall_64+0x9a/0x820 [ 2066.154933] ? do_syscall_64+0x9a/0x820 [ 2066.158901] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2066.163486] ? trace_hardirqs_on+0xbd/0x310 [ 2066.167800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2066.173344] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2066.178703] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2066.184173] __x64_sys_sendto+0xe1/0x1a0 [ 2066.188252] do_syscall_64+0x1b9/0x820 [ 2066.192164] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2066.197525] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2066.202455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2066.207317] ? trace_hardirqs_on_caller+0x310/0x310 [ 2066.212343] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2066.217367] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2066.222396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2066.227277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2066.232963] RIP: 0033:0x457569 [ 2066.236183] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2066.255109] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2066.262837] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2066.270118] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2066.277392] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2066.284680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2066.291963] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff [ 2066.318616] Task in /syz4 killed as a result of limit of /syz4 [ 2066.327221] memory: usage 307156kB, limit 307200kB, failcnt 386 [ 2066.333666] audit: type=1326 audit(2000001059.048:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28177 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2066.356173] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2066.362951] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2066.370013] Memory cgroup stats for /syz4: cache:120KB rss:269724KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB [ 2066.391672] Memory cgroup out of memory: Kill process 28182 (syz-executor4) score 1110 or sacrifice child [ 2066.401580] Killed process 28183 (syz-executor4) total-vm:70340kB, anon-rss:4248kB, file-rss:33436kB, shmem-rss:0kB 03:50:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x10000000}]}) 03:50:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b05090f0100010100ff3ffe58", 0x1f}], 0x1) 03:50:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffffa0040000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2066.415118] oom_reaper: reaped process 28183 (syz-executor4), now anon-rss:0kB, file-rss:32668kB, shmem-rss:0kB 03:50:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:50:59 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "b45908eb593319848589ffcf25070791f52327947deccf8a4ccb9ddcc958b1af", "965f451fc5f91df3f94463e3115f7e340e0c36e00e0a184d24c94015ef1ab310", "b54fe66bc7a9c3df6baefed7204a2cd341d676b9df4684fbb655df7121f0f29e", "fc8c7883bfb9553e4f5ab1ca1227a7773ff729e2d68632e4acfc458be2fdfa97", "e3924931210ce70fa1e0e910c0054dc8ab820fbf7b444823cb7cc26d1558716a", "68aabaad9cd6bbb339cced73", 0x80000000, 0x3ff, 0x899, 0x7ff}}) 03:50:59 executing program 4: mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}) socket$l2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x40, 0x803, 0x2}, 0x23) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001280)={r0, &(0x7f0000000040)='!', &(0x7f0000001180)}, 0x20) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/4096}, 0x18) [ 2066.504199] binder: 28216:28223 transaction failed 29189/-22, size 416-8 line 2855 [ 2066.530905] audit: type=1326 audit(2000001059.248:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28221 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:50:59 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:50:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2066.583550] binder: undelivered TRANSACTION_ERROR: 29189 03:50:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000300010100ff3ffe58", 0x1f}], 0x1) 03:50:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffffa0020000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:50:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) close(r0) 03:50:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2066.787990] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 2066.849051] netlink: 'syz-executor0': attribute type 3 has an invalid length. 03:51:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa00000000000000}]}) 03:51:00 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x100000000, {{0xa, 0x4e21, 0x8000, @remote, 0x100000000}}, {{0xa, 0x4e23, 0x9, @local, 0x9}}}, 0x108) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:51:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509090100010100ff3ffe58", 0x1f}], 0x1) 03:51:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4002000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) [ 2067.291738] audit: type=1326 audit(2000001060.008:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28221 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x3f00000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2067.408827] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 [ 2067.428307] audit: type=1326 audit(2000001060.148:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28274 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2067.431071] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2067.459244] CPU: 0 PID: 28269 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2067.466630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.475992] Call Trace: [ 2067.478598] dump_stack+0x1c4/0x2b4 [ 2067.482249] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2067.487463] ? mark_held_locks+0x130/0x130 [ 2067.491790] ? mark_held_locks+0x130/0x130 [ 2067.496068] dump_header+0x27b/0xf72 [ 2067.499816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2067.505381] ? pagefault_out_of_memory+0x197/0x197 [ 2067.510337] ? debug_smp_processor_id+0x1c/0x20 [ 2067.515029] ? perf_trace_lock_acquire+0x15b/0x800 [ 2067.519995] ? perf_trace_lock+0x7a0/0x7a0 [ 2067.524267] ? debug_smp_processor_id+0x1c/0x20 [ 2067.528957] ? graph_lock+0x170/0x170 [ 2067.532787] ? print_usage_bug+0xc0/0xc0 [ 2067.536896] ? find_held_lock+0x36/0x1c0 [ 2067.540986] ? mark_held_locks+0xc7/0x130 [ 2067.545159] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2067.550275] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2067.555401] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2067.555423] ? trace_hardirqs_on+0xbd/0x310 [ 2067.555438] ? kasan_check_read+0x11/0x20 [ 2067.555457] ? ___ratelimit+0x36f/0x655 [ 2067.555475] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2067.555495] ? trace_hardirqs_on+0x310/0x310 [ 2067.582389] ? lock_downgrade+0x900/0x900 [ 2067.586571] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2067.591703] ? ___ratelimit+0xaa/0x655 [ 2067.595647] ? idr_get_free+0xec0/0xec0 [ 2067.599643] ? kasan_check_write+0x14/0x20 [ 2067.603903] ? do_raw_spin_lock+0xc1/0x200 [ 2067.608175] oom_kill_process.cold.27+0x10/0x903 [ 2067.612956] ? kasan_check_write+0x14/0x20 [ 2067.617220] ? do_raw_spin_lock+0xc1/0x200 [ 2067.621523] ? oom_evaluate_task+0x540/0x540 [ 2067.625958] ? cgroup_procs_next+0x70/0x70 [ 2067.630236] ? _raw_spin_unlock_irq+0x60/0x80 [ 2067.634767] ? oom_badness+0xaa0/0xaa0 [ 2067.638677] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2067.643492] ? mem_cgroup_iter_break+0x30/0x30 [ 2067.648123] ? mark_held_locks+0xc7/0x130 [ 2067.652310] out_of_memory+0xa84/0x1430 03:51:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6c000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509100100010100ff3ffe58", 0x1f}], 0x1) 03:51:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x600]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2067.656310] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2067.660915] ? kasan_check_read+0x11/0x20 [ 2067.665096] ? oom_killer_disable+0x3a0/0x3a0 [ 2067.669618] ? kasan_check_write+0x14/0x20 [ 2067.673879] ? do_raw_spin_lock+0xc1/0x200 [ 2067.678155] mem_cgroup_out_of_memory+0x15e/0x210 [ 2067.683029] ? memcg_memory_event+0x40/0x40 [ 2067.687370] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 2067.692334] ? page_counter_try_charge+0x1c1/0x220 [ 2067.697294] try_charge+0xc43/0x1690 [ 2067.701043] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2067.707123] ? tcp_sendmsg+0x2f/0x50 [ 2067.710860] ? sock_sendmsg+0xd5/0x120 [ 2067.714785] ? __sys_sendto+0x3d7/0x670 [ 2067.718803] ? graph_lock+0x170/0x170 [ 2067.722649] ? graph_lock+0x170/0x170 [ 2067.726483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2067.732059] ? check_preemption_disabled+0x48/0x200 [ 2067.737099] ? check_preemption_disabled+0x48/0x200 [ 2067.742170] ? mark_held_locks+0xc7/0x130 [ 2067.746357] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2067.751318] ? mem_cgroup_charge_skmem+0x1cf/0x390 [ 2067.756276] ? lockdep_hardirqs_on+0x421/0x5c0 03:51:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x1200]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2067.760897] ? rcu_read_lock_sched_held+0x108/0x120 [ 2067.765945] ? __sk_mem_raise_allocated+0x642/0x1800 [ 2067.771081] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2067.776569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2067.782141] ? check_preemption_disabled+0x48/0x200 [ 2067.787201] mem_cgroup_charge_skmem+0x1e4/0x390 [ 2067.791994] ? mem_cgroup_sk_free+0x90/0x90 [ 2067.796375] __sk_mem_raise_allocated+0x642/0x1800 [ 2067.801340] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2067.805697] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 03:51:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509020100010100ff3ffe58", 0x1f}], 0x1) [ 2067.811282] ? alloc_pages_current+0x114/0x210 [ 2067.815902] ? skb_page_frag_refill+0x1eb/0x6a0 [ 2067.820604] ? sock_kzfree_s+0x60/0x60 [ 2067.824531] ? _copy_from_iter_full+0x2b3/0xd20 [ 2067.829228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2067.834805] ? __sk_flush_backlog+0x2f/0x40 [ 2067.839164] ? iov_iter_advance+0x1460/0x1460 [ 2067.843702] __sk_mem_schedule+0x6d/0xe0 [ 2067.847806] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2067.853385] tcp_sendmsg_locked+0x1c86/0x3f00 [ 2067.857951] ? tcp_sendpage+0x60/0x60 [ 2067.861788] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2067.867348] ? aa_label_sk_perm+0x46d/0x8e0 [ 2067.867380] ? find_held_lock+0x36/0x1c0 [ 2067.867405] ? mark_held_locks+0xc7/0x130 [ 2067.867428] ? __local_bh_enable_ip+0x160/0x260 [ 2067.867452] ? __local_bh_enable_ip+0x160/0x260 [ 2067.889346] ? trace_hardirqs_on+0xbd/0x310 [ 2067.893693] ? lock_release+0x970/0x970 [ 2067.897728] ? lock_sock_nested+0xe2/0x120 [ 2067.902000] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2067.907486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2067.913054] ? check_preemption_disabled+0x48/0x200 [ 2067.918105] ? lock_sock_nested+0x9a/0x120 [ 2067.922374] ? lock_sock_nested+0x9a/0x120 [ 2067.926652] ? __local_bh_enable_ip+0x160/0x260 [ 2067.931375] tcp_sendmsg+0x2f/0x50 [ 2067.934943] inet_sendmsg+0x1a1/0x690 [ 2067.938787] ? ipip_gro_receive+0x100/0x100 [ 2067.943135] ? apparmor_socket_sendmsg+0x29/0x30 [ 2067.947915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2067.953479] ? security_socket_sendmsg+0x94/0xc0 [ 2067.958253] ? ipip_gro_receive+0x100/0x100 [ 2067.962600] sock_sendmsg+0xd5/0x120 [ 2067.966341] __sys_sendto+0x3d7/0x670 [ 2067.970177] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2067.974875] ? lock_release+0x970/0x970 [ 2067.978875] ? arch_local_save_flags+0x40/0x40 [ 2067.983484] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2067.989005] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2067.994570] ? put_timespec64+0x10f/0x1b0 [ 2067.998770] ? nsecs_to_jiffies+0x30/0x30 [ 2068.002937] ? do_syscall_64+0x9a/0x820 [ 2068.006910] ? do_syscall_64+0x9a/0x820 [ 2068.010882] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2068.015472] ? trace_hardirqs_on+0xbd/0x310 [ 2068.019802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2068.025341] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2068.030729] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2068.036203] __x64_sys_sendto+0xe1/0x1a0 [ 2068.040281] do_syscall_64+0x1b9/0x820 [ 2068.044187] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2068.049605] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2068.054583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2068.059428] ? trace_hardirqs_on_caller+0x310/0x310 [ 2068.064445] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2068.069460] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2068.074487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2068.079330] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2068.084512] RIP: 0033:0x457569 [ 2068.087709] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2068.106652] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2068.114379] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 2068.121659] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000003 [ 2068.128938] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 2068.136202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2068.143462] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 00000000ffffffff [ 2068.188708] Task in /syz4 killed as a result of limit of /syz4 [ 2068.199554] memory: usage 307196kB, limit 307200kB, failcnt 396 [ 2068.215092] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2068.221988] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2068.228277] Memory cgroup stats for /syz4: cache:120KB rss:269616KB rss_huge:251904KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269656KB inactive_file:4KB active_file:4KB unevictable:0KB [ 2068.249874] Memory cgroup out of memory: Kill process 28268 (syz-executor4) score 1110 or sacrifice child [ 2068.259855] Killed process 28269 (syz-executor4) total-vm:70340kB, anon-rss:4248kB, file-rss:33524kB, shmem-rss:0kB 03:51:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000000000000}]}) 03:51:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x300]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000500010100ff3ffe58", 0x1f}], 0x1) 03:51:01 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xea1, 0x7ff, 0x8000, 0x0, 0x2, 0x8, 0xf4000, 0x81, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x10000000000, 0x0, 0x4, 0x7f, 0x8a94, 0x8001, 0x6699, 0x7fff, r2}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000000000000000000000000003e7831550000000000000000000000000000000050cc14a3681bb503c2047f8f887b691dcea8b28858ffc040e337373d63acf26f037c0b9d306c8448ad263740c57fc0ea46a81a20ad30929d916b9d66441e9fbc87659c120b4d9904fe9ede3c2f7e07c65062cb9b3e36a4ca46d0f62fd212962cb1ed73795b9f9b4c1f64e92f23f4a1fe777058dd79726463a906e74ba82a8ae3f8273a34accb51e79cec96e66d97c6c0d8119157862cbd5859f2a6b6816a697617fd0a31b21eaca959d9c8d391da0b"]}) 03:51:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2a0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2068.260122] audit: type=1326 audit(2000001060.978:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28274 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2068.273803] oom_reaper: reaped process 28269 (syz-executor4), now anon-rss:0kB, file-rss:32692kB, shmem-rss:0kB [ 2068.350620] binder_transaction: 8 callbacks suppressed [ 2068.350639] binder: 28300:28302 transaction failed 29189/-22, size 0-8 line 2855 [ 2068.382021] netlink: 'syz-executor0': attribute type 5 has an invalid length. 03:51:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x2]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2068.406237] binder_release_work: 8 callbacks suppressed [ 2068.406244] binder: undelivered TRANSACTION_ERROR: 29189 [ 2068.426089] netlink: 'syz-executor0': attribute type 5 has an invalid length. 03:51:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000800010100ff3ffe58", 0x1f}], 0x1) 03:51:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2068.481139] audit: type=1326 audit(2000001061.198:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28313 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:01 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x0, 0x2, 'client1\x00', 0x1, "4748cb2b909178bb", "3d27b58545163eda3fef9159217733c0e679f3a6bfa6ddd4e8837226adbcea93", 0x4, 0xed}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:51:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfeffffff00000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2068.530688] binder: 28319:28320 transaction failed 29189/-22, size 0-8 line 2855 [ 2068.564882] binder: undelivered TRANSACTION_ERROR: 29189 03:51:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4c000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2068.740017] binder: 28338:28339 transaction failed 29189/-22, size 0-8 line 2855 [ 2068.758523] binder: undelivered TRANSACTION_ERROR: 29189 03:51:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', r1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000280)={0x15, 0x7, 0x2, {{0x8, 'bridge0\x00'}, 0x1}}, 0x15) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3300000000000000c43c332903e43befa14e32f91a59aa473b53bf05bc4b3ac3d8949727d3a400f65d2f2aab20ced37582930a1cb60e63ed94f7b174264fffb62983a62abe67ca182a6da9ac25ebe6dc0ac2187bbcab62ebca1f43b1dcf54be00648056fd3b3277093f99f135305c67fec3d674c35ed5283999073a555351303ef9639a90004a6f22695729cd76ddcb5045b14e5f4bfca72447cf51179f47e1565d49d807bd1"]}) r4 = memfd_create(&(0x7f0000000000)='bridge0\x00', 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000140)=0x4) 03:51:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7000000}]}) 03:51:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000200010100ff3ffe58", 0x1f}], 0x1) 03:51:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4c00000000000000}]}) 03:51:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xffffffffa0010000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfdffffff00000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2069.238925] audit: type=1326 audit(2000001061.958:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28313 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2069.314472] audit: type=1326 audit(2000001062.038:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28345 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2069.323554] binder: 28351:28353 transaction failed 29189/-22, size 0-8 line 2855 03:51:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000300010100ff3ffe58", 0x1f}], 0x1) 03:51:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x4000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2069.385395] binder: undelivered TRANSACTION_ERROR: 29189 [ 2069.385873] binder: 28351:28353 transaction failed 29189/-22, size 0-8 line 2855 [ 2069.411327] binder: undelivered TRANSACTION_ERROR: 29189 03:51:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6c00000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2069.503581] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 2069.537572] binder: 28370:28371 transaction failed 29189/-22, size 0-8 line 2855 [ 2069.538278] netlink: 'syz-executor0': attribute type 3 has an invalid length. 03:51:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xf5ffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'veth0_to_bond\x00', &(0x7f00000002c0)=@ethtool_rxnfc={0x3f, 0x0, 0x3, {0x0, @tcp_ip4_spec={@multicast2, @empty, 0x4e24, 0x4e22, 0xfff}, {"d187", @remote, 0x6, 0x81, [0x5, 0xfffffffffffffffc]}, @sctp_ip4_spec={@rand_addr=0x100, @rand_addr=0x6, 0x4e22, 0x4e20, 0xffff}, {"dda8", @dev={[], 0xd}, 0x40, 0x800, [0x101, 0x1]}, 0x5, 0x1ff}, 0x7, [0x401, 0x4, 0x8, 0x2, 0x9, 0x1, 0x100000000]}}) [ 2069.547485] binder: undelivered TRANSACTION_ERROR: 29189 [ 2069.563401] binder: 28370:28371 transaction failed 29189/-22, size 0-8 line 2855 [ 2069.581996] binder: undelivered TRANSACTION_ERROR: 29189 03:51:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x1a0ffffffff]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000400010100ff3ffe58", 0x1f}], 0x1) [ 2069.698473] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 2069.707928] binder: 28382:28384 transaction failed 29189/-22, size 0-8 line 2855 [ 2069.727030] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 2069.740368] binder: undelivered TRANSACTION_ERROR: 29189 03:51:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4800}]}) 03:51:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0d00a69030658bd857760ed11b8700f72e0000000000000000000000000000000000000087eae287aad74be2dadc25a3875898acb51896a9eedcad6ddfaa462e8b76fc"]}) 03:51:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfffffffd, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x2a0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000102010100ff3ffe58", 0x1f}], 0x1) 03:51:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000380)=@ethtool_eee={0x44, 0x8, 0x6, 0x0, 0x0, 0x10000, 0x7165, 0x0, [0x6f06, 0xfffffffffffff001]}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x31, &(0x7f0000000140)=""/49}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x8, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0xdf0e) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x2, 0x4) [ 2070.234773] binder: 28401:28402 transaction failed 29189/-22, size 0-8 line 2855 [ 2070.257861] binder: 28401:28402 transaction failed 29189/-22, size 0-8 line 2855 [ 2070.270163] binder: undelivered TRANSACTION_ERROR: 29189 03:51:03 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:51:03 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) munmap(&(0x7f0000e56000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2070.284966] kauditd_printk_skb: 2 callbacks suppressed [ 2070.284981] audit: type=1326 audit(2000001063.008:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28404 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2070.324226] binder: undelivered TRANSACTION_ERROR: 29189 03:51:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050900010f010100ff3ffe58", 0x1f}], 0x1) [ 2070.372353] QAT: Invalid ioctl 03:51:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2070.404159] QAT: Invalid ioctl 03:51:03 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/92, &(0x7f0000000100)=0x5c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = dup3(r0, r0, 0x7fffc) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f00000002c0)=""/233, &(0x7f00000003c0)=0xe9) [ 2070.602796] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2070.621516] syz-executor4 cpuset=syz4 mems_allowed=0 [ 2070.647025] CPU: 0 PID: 28414 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2070.654447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2070.663814] Call Trace: [ 2070.666440] dump_stack+0x1c4/0x2b4 [ 2070.670095] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2070.675320] dump_header+0x27b/0xf72 [ 2070.679075] ? check_preemption_disabled+0x48/0x200 [ 2070.684118] ? pagefault_out_of_memory+0x197/0x197 [ 2070.689059] ? debug_smp_processor_id+0x1c/0x20 [ 2070.693731] ? perf_trace_lock+0x14d/0x7a0 [ 2070.697968] ? perf_trace_lock_acquire+0x15b/0x800 [ 2070.702892] ? zap_class+0x640/0x640 [ 2070.706614] ? perf_trace_lock+0x7a0/0x7a0 [ 2070.710854] ? debug_smp_processor_id+0x1c/0x20 [ 2070.715514] ? perf_trace_lock+0x14d/0x7a0 [ 2070.719754] ? graph_lock+0x170/0x170 [ 2070.723560] ? print_usage_bug+0xc0/0xc0 [ 2070.727629] ? zap_class+0x640/0x640 [ 2070.731335] ? perf_trace_lock+0x7a0/0x7a0 [ 2070.735584] ? find_held_lock+0x36/0x1c0 [ 2070.739651] ? mark_held_locks+0xc7/0x130 [ 2070.743799] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2070.748893] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2070.753988] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2070.758582] ? trace_hardirqs_on+0xbd/0x310 [ 2070.762912] ? kasan_check_read+0x11/0x20 [ 2070.767065] ? ___ratelimit+0x36f/0x655 [ 2070.771048] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2070.776489] ? trace_hardirqs_on+0x310/0x310 [ 2070.780892] ? lock_downgrade+0x900/0x900 [ 2070.785066] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2070.790206] ? ___ratelimit+0xaa/0x655 [ 2070.794118] ? idr_get_free+0xec0/0xec0 [ 2070.798088] ? kasan_check_write+0x14/0x20 [ 2070.802326] ? do_raw_spin_lock+0xc1/0x200 [ 2070.806592] oom_kill_process.cold.27+0x10/0x903 [ 2070.811355] ? kasan_check_write+0x14/0x20 [ 2070.815596] ? do_raw_spin_lock+0xc1/0x200 [ 2070.819827] ? oom_evaluate_task+0x540/0x540 [ 2070.824234] ? cgroup_procs_next+0x70/0x70 [ 2070.828481] ? _raw_spin_unlock_irq+0x60/0x80 [ 2070.832991] ? oom_badness+0xaa0/0xaa0 [ 2070.836889] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2070.841663] ? mem_cgroup_iter_break+0x30/0x30 [ 2070.846255] ? mark_held_locks+0xc7/0x130 [ 2070.850424] out_of_memory+0xa84/0x1430 [ 2070.854390] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2070.858995] ? kasan_check_read+0x11/0x20 [ 2070.863139] ? oom_killer_disable+0x3a0/0x3a0 [ 2070.867633] ? kasan_check_write+0x14/0x20 [ 2070.871870] ? do_raw_spin_lock+0xc1/0x200 [ 2070.876113] mem_cgroup_out_of_memory+0x15e/0x210 [ 2070.880958] ? memcg_memory_event+0x40/0x40 [ 2070.885277] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 2070.890047] ? page_counter_try_charge+0x1c1/0x220 [ 2070.895006] try_charge+0xc43/0x1690 [ 2070.898732] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 2070.904804] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 2070.909660] ? lock_downgrade+0x900/0x900 [ 2070.913802] ? check_preemption_disabled+0x48/0x200 [ 2070.918816] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2070.924602] ? kasan_check_read+0x11/0x20 [ 2070.928793] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2070.934109] ? rcu_bh_qs+0xc0/0xc0 [ 2070.937665] ? get_mem_cgroup_from_mm+0x206/0x440 [ 2070.942519] ? mem_cgroup_can_attach+0x580/0x580 [ 2070.947309] ? __lock_is_held+0xb5/0x140 [ 2070.951388] mem_cgroup_try_charge+0x5ea/0xe10 [ 2070.955966] ? mem_cgroup_protected+0xa60/0xa60 [ 2070.960650] ? kasan_check_read+0x11/0x20 [ 2070.964805] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2070.969222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2070.974760] ? check_preemption_disabled+0x48/0x200 [ 2070.979797] ? debug_smp_processor_id+0x1c/0x20 [ 2070.984472] ? perf_trace_lock+0x14d/0x7a0 [ 2070.988699] ? _raw_spin_unlock+0x2c/0x50 [ 2070.992847] ? zap_class+0x640/0x640 [ 2070.996568] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2071.002135] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2071.007064] wp_page_copy+0x46c/0x14f0 [ 2071.010959] ? graph_lock+0x170/0x170 [ 2071.014758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2071.020308] ? follow_pfn+0x2e0/0x2e0 [ 2071.024114] ? do_wp_page+0x76c/0x1390 [ 2071.028010] ? lock_downgrade+0x900/0x900 [ 2071.032177] ? kasan_check_read+0x11/0x20 [ 2071.036317] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2071.040740] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2071.045320] ? __pte_alloc_kernel+0x220/0x220 [ 2071.049807] ? __lock_acquire+0x7ec/0x4ec0 [ 2071.054069] do_wp_page+0x774/0x1390 [ 2071.057812] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2071.062472] ? __handle_mm_fault+0x1e6c/0x53e0 [ 2071.067048] ? lock_release+0x970/0x970 [ 2071.071026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2071.076581] ? check_preemption_disabled+0x48/0x200 [ 2071.081624] ? pmd_val+0x88/0x100 [ 2071.085090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2071.090649] ? kasan_check_write+0x14/0x20 [ 2071.094895] ? do_raw_spin_lock+0xc1/0x200 [ 2071.099171] __handle_mm_fault+0x2c60/0x53e0 [ 2071.103604] ? zap_class+0x640/0x640 [ 2071.107342] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 2071.112195] ? graph_lock+0x170/0x170 [ 2071.116010] ? print_usage_bug+0xc0/0xc0 [ 2071.120090] ? graph_lock+0x170/0x170 [ 2071.124419] ? handle_mm_fault+0x42a/0xc70 [ 2071.128668] ? lock_downgrade+0x900/0x900 [ 2071.132853] ? check_preemption_disabled+0x48/0x200 [ 2071.137917] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2071.143735] ? kasan_check_read+0x11/0x20 [ 2071.147902] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2071.153195] ? rcu_bh_qs+0xc0/0xc0 [ 2071.156772] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2071.162273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2071.167826] ? check_preemption_disabled+0x48/0x200 [ 2071.172867] handle_mm_fault+0x54f/0xc70 [ 2071.176950] ? __handle_mm_fault+0x53e0/0x53e0 [ 2071.181586] ? find_vma+0x34/0x190 [ 2071.185148] __do_page_fault+0x67d/0xed0 [ 2071.189242] ? mm_fault_error+0x380/0x380 [ 2071.193407] ? graph_lock+0x170/0x170 [ 2071.197221] ? __access_remote_vm+0x41b/0x4e0 [ 2071.201752] do_page_fault+0xf2/0x7e0 [ 2071.205574] ? vmalloc_sync_all+0x30/0x30 [ 2071.209764] ? error_entry+0x76/0xd0 [ 2071.213496] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2071.218523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2071.223393] ? trace_hardirqs_on_caller+0x310/0x310 [ 2071.228464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2071.233502] page_fault+0x1e/0x30 [ 2071.236967] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2071.242859] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2071.261797] RSP: 0018:ffff8801889cf948 EFLAGS: 00010206 [ 2071.267174] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 00000000000000c0 [ 2071.274480] RDX: 0000000000001000 RSI: ffff8801cd405f40 RDI: 0000000020652000 [ 2071.281758] RBP: ffff8801889cf980 R08: 0000000000000000 R09: 0000000000000040 [ 2071.289035] R10: ffffed0039a80bff R11: ffff8801cd405fff R12: 00000000206520c0 [ 2071.296327] R13: 00000000206510c0 R14: ffff8801cd405000 R15: 00007ffffffff000 [ 2071.303659] ? _copy_to_user+0xf6/0x110 [ 2071.307655] mem_rw.isra.16+0x450/0x640 [ 2071.311682] ? oom_adj_write+0x270/0x270 [ 2071.315805] ? _copy_from_user+0xdf/0x150 [ 2071.319982] ? security_file_permission+0x1c2/0x230 [ 2071.325019] mem_read+0x52/0x70 [ 2071.328320] do_iter_read+0x4a3/0x650 [ 2071.332178] vfs_readv+0x175/0x1c0 [ 2071.335774] ? compat_rw_copy_check_uvector+0x440/0x440 [ 2071.341165] ? lock_release+0x970/0x970 [ 2071.345161] ? arch_local_save_flags+0x40/0x40 [ 2071.349783] ? fget_raw+0x20/0x20 [ 2071.353266] ? kasan_check_read+0x11/0x20 [ 2071.357426] ? _copy_to_user+0xc8/0x110 [ 2071.361422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2071.366970] ? put_timespec64+0x10f/0x1b0 [ 2071.371145] do_preadv+0x1cc/0x280 [ 2071.374708] ? do_readv+0x310/0x310 [ 2071.378362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2071.383913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2071.389305] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2071.394786] __x64_sys_preadv+0x9a/0xf0 [ 2071.398786] do_syscall_64+0x1b9/0x820 [ 2071.402682] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2071.408091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2071.413029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2071.417885] ? trace_hardirqs_on_caller+0x310/0x310 [ 2071.422915] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2071.427963] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2071.433001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2071.437870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2071.443107] RIP: 0033:0x457569 [ 2071.446310] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2071.465218] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2071.472952] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2071.480227] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005 [ 2071.487515] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2071.494792] R10: 000000002000107c R11: 0000000000000246 R12: 00007fadad8626d4 [ 2071.502068] R13: 00000000004c3088 R14: 00000000004d4a40 R15: 00000000ffffffff [ 2071.512101] audit: type=1326 audit(2000001064.228:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28404 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2071.524268] Task in /syz4 killed as a result of limit of /syz4 [ 2071.542988] memory: usage 307168kB, limit 307200kB, failcnt 423 03:51:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffffa0008000}]}) 03:51:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050900010b010100ff3ffe58", 0x1f}], 0x1) 03:51:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x8000a0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:04 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x100) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x20000) renameat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="f61999438243b736b660e4378af50d219e38b8000000000000000037da000000000000000000000000000000000000000000044a417abaff3eacdd050b2719ec7fef0a7b531f6518876dd269bbe8c54a098f7a0876991d550390626783f72e5a448d2488ce380ad62214cda803105ae1fa673b4b9e569ffc07fb5df4145ae02dcb77f33f57b0a5fc7a67aced2b7163c0260506b8bad648687de087f29522608a"]}) 03:51:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x240, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2071.549255] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2071.556322] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2071.562606] Memory cgroup stats for /syz4: cache:120KB rss:272052KB rss_huge:253952KB shmem:100KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:272044KB inactive_file:4KB active_file:4KB unevictable:0KB [ 2071.617456] Memory cgroup out of memory: Kill process 28413 (syz-executor4) score 1118 or sacrifice child [ 2071.648415] Killed process 28414 (syz-executor4) total-vm:70468kB, anon-rss:6540kB, file-rss:33572kB, shmem-rss:0kB 03:51:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7a00]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2071.663930] audit: type=1326 audit(2000001064.388:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28447 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:04 executing program 2: r0 = socket$inet6(0xa, 0x20000000000f, 0xffffffffffff3498) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet(0x2, 0x5, 0x3f) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000140)=""/178, &(0x7f0000000200)=0xb2) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 2071.712818] oom_reaper: reaped process 28414 (syz-executor4), now anon-rss:0kB, file-rss:32804kB, shmem-rss:0kB 03:51:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x4a0ffffffff}]}) 03:51:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x8000a0ffffffff]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000105010100ff3ffe58", 0x1f}], 0x1) 03:51:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa00000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:04 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0xd2a8, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="25444e770b17cffef938047f0b140a6b74bbe5f040c4d37d1a0ac41e109f3017ddfc30356c86364c8b69b249528d7eb5663067f513548fd78c429737b2c1b46f5f15cf535f6832cae1043a6782549ed731896f31603e1aeb55ea24c04c8f5c4883ff793ad11f7d11b6f17e", 0x6b, 0x389f764e}], 0x1000, &(0x7f00000003c0)={[{@acl='acl'}, {@balloc_noborder='block-allocator=noborder'}, {@balloc_notest4='block-allocator=notest4'}, {@hash_tea='hash=tea'}, {@tails_off='tails=off'}, {@resize_auto='resize=auto'}, {@data_journal='data=journal'}], [{@fowner_lt={'fowner<', r1}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bridge0\x00'}}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000640)=""/210) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000000000000000000000008020000000046d3d0110020004cdbcef60000000000000000004cfa5ea2fd21d2461d26cda784428fe02c622d78311f19b4b5302b120f259b4a3e5d04ef71264ef0b8fb8a20955b84f4ad7c50eddb44caf07aa4dbde2f1d184f964e22aa7246d4784ec9a54c7b0f225ae0aad1dd3adc1372925d6577e9a253cee09e1b7eb8d4c87c10779dd64f26b2bb384e8db41860b5c7ec29f93c49c78c0a22d6e207ac84ff08422b4537e48cfb982eb2e8100f4c4d4a95105c75d931a16bab2130437b338902aa2d431c4cbd4d72992d4816257cdac1cdba4cc5a8f1b3136bcbf0d0b8b1239665ef68962ba14aead0ec6ba2e228f80dcecad6a3cdb60b2f07f63206ca1dbc96820d061e98dffc912af166b5372d5ae017d7632136f9165b9761f1143983f5567ef4ea3c7cc4207827d4aca93e88bf273246f03177741251a36547cf4841055581c5bed2976b847c2bb5069dfaf8e1b24a2e4bf05c8d8e3b611666ff92"]}) [ 2071.952112] audit: type=1326 audit(2000001064.668:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28472 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffffa0040000}]}) 03:51:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xa0040000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100050100ff3ffe58", 0x1f}], 0x1) 03:51:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0xf9, 0x0, [0x648, 0x4, 0xecf2, 0x6]}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0d93c71c950000000000000000000000000000000000000000000000000000000009000044ecade6835c2afac6a55c0bdf4e0a1188b55fa71099933b0fa4cb7348d819ab9422e3948290589cfba1b8415c5a44bd0a39a7a218801ae1607daa0a06460b89bb282ae4e53d035f78316d7878877e6dd2ae6a3437da924120516897c32fb5a47e71d3b44ec5388dec6e0facd9c4559ffef942e997e4f32210d2430e2a7c4d65f991b87ca50c6c409693de1c0a9cc4511d4b5fe636c9aaa4fc8cf5cb87d6c497200b7a881b"]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x10010, r1, 0x0) [ 2072.442587] audit: type=1326 audit(2000001065.158:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28447 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x74]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000106010100ff3ffe58", 0x1f}], 0x1) [ 2072.604344] audit: type=1326 audit(2000001065.328:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28506 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x1a0ffffffff, 0x0, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x9, 0x4, 0x8001, 0x8, 0x9, 0x3, 0x10001, 0x6}, 0xb) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={"726f7365300000a500", &(0x7f0000000100)=@ethtool_stats={0x1d, 0x4, [0x6, 0x5, 0x7, 0x10001]}}) 03:51:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xe00, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xffffffffa0040000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000110010100ff3ffe58", 0x1f}], 0x1) 03:51:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xfffffffe}]}) 03:51:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x3]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000109010100ff3ffe58", 0x1f}], 0x1) 03:51:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:06 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000280)=0x4bb0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001740)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001840)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001980)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1280}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r2, @ANYBLOB="000025bd7080fcdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="9c0102005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000100044fffffff7f7f0003000700000000002100060000000000000040000000250a80013f00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400070000000800070000000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) [ 2073.392629] audit: type=1326 audit(2000001066.108:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28506 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2073.487551] binder_transaction: 10 callbacks suppressed [ 2073.487568] binder: 28546:28555 transaction failed 29189/-22, size 0-8 line 2855 [ 2073.506959] binder_release_work: 10 callbacks suppressed [ 2073.506967] binder: undelivered TRANSACTION_ERROR: 29189 [ 2073.511463] binder: 28546:28555 transaction failed 29189/-22, size 0-8 line 2855 [ 2073.527433] binder: undelivered TRANSACTION_ERROR: 29189 03:51:06 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:51:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xffffffffa0020000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2073.537625] audit: type=1326 audit(2000001066.258:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28547 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050900010a010100ff3ffe58", 0x1f}], 0x1) 03:51:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3f00000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2073.710043] binder: 28571:28572 transaction failed 29189/-22, size 0-8 line 2855 [ 2073.732109] binder: undelivered TRANSACTION_ERROR: 29189 03:51:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1a0ffffffff}]}) 03:51:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x500000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000108010100ff3ffe58", 0x1f}], 0x1) 03:51:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1802, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2074.291480] audit: type=1326 audit(2000001067.008:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28547 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2074.376840] binder: 28589:28599 transaction failed 29189/-22, size 0-8 line 2855 [ 2074.388042] binder: undelivered TRANSACTION_ERROR: 29189 03:51:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x1200000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2074.432549] audit: type=1326 audit(2000001067.148:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28601 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000104000100ff3ffe58", 0x1f}], 0x1) [ 2074.524066] binder: 28611:28612 transaction failed 29189/-22, size 0-8 line 2855 03:51:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000109010100ff3ffe58", 0x1f}], 0x1) [ 2074.599178] binder: undelivered TRANSACTION_ERROR: 29189 03:51:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7a000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x500000000000000}]}) 03:51:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100030100ff3ffe58", 0x1f}], 0x1) 03:51:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) 03:51:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x500000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2075.274743] binder: 28632:28636 transaction failed 29189/-22, size 0-8 line 2855 [ 2075.305829] binder: undelivered TRANSACTION_ERROR: 29189 03:51:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x2000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 2075.357200] kauditd_printk_skb: 1 callbacks suppressed [ 2075.357245] audit: type=1326 audit(2000001068.078:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28642 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2075.454091] binder: 28652:28653 transaction failed 29189/-22, size 0-8 line 2855 03:51:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x800000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100030100ff3ffe58", 0x1f}], 0x1) 03:51:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4800]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2075.495617] binder: undelivered TRANSACTION_ERROR: 29189 03:51:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2075.650598] binder: 28663:28668 transaction failed 29189/-22, size 0-8 line 2855 [ 2075.674482] binder: undelivered TRANSACTION_ERROR: 29189 [ 2076.106852] audit: type=1326 audit(2000001068.828:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28642 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x100000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x91ffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2a0}]}) 03:51:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100040100ff3ffe58", 0x1f}], 0x1) [ 2076.210630] binder: 28679:28680 transaction failed 29189/-22, size 0-8 line 2855 03:51:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x600000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100050100ff3ffe58", 0x1f}], 0x1) [ 2076.242781] audit: type=1326 audit(2000001068.958:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28689 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2076.258702] binder: undelivered TRANSACTION_ERROR: 29189 03:51:09 executing program 4: socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:09 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2076.397264] binder: 28698:28702 transaction failed 29189/-22, size 0-8 line 2855 03:51:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x70c, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x0) [ 2076.444102] binder: undelivered TRANSACTION_ERROR: 29189 03:51:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100080100ff3ffe58", 0x1f}], 0x1) 03:51:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x8000a0}]}) 03:51:09 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x0) 03:51:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100020100ff3ffe58", 0x1f}], 0x1) 03:51:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffff91, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2077.039711] audit: type=1326 audit(2000001069.758:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28689 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x0) 03:51:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xffffffffa0008000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:09 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2077.190155] audit: type=1326 audit(2000001069.908:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28738 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x5000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010800ff3ffe58", 0x1f}], 0x1) 03:51:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7a]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2}]}) 03:51:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{}], 0x1) 03:51:10 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010200ff3ffe58", 0x1f}], 0x1) 03:51:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x68000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4a0ffffffff, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2077.948831] audit: type=1326 audit(2000001070.668:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28738 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{}], 0x1) 03:51:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010300ff3ffe58", 0x1f}], 0x1) 03:51:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x12000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:10 executing program 2: socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2078.085706] audit: type=1326 audit(2000001070.808:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28779 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{}], 0x1) 03:51:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x48}]}) 03:51:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4a0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:11 executing program 2: socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010400ff3ffe58", 0x1f}], 0x1) 03:51:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020219000000070000000681", 0x10}], 0x1) 03:51:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xe00000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2078.850871] audit: type=1326 audit(2000001071.568:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28779 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2078.936250] binder_transaction: 9 callbacks suppressed [ 2078.936268] binder: 28810:28811 transaction failed 29189/-22, size 0-8 line 2855 03:51:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020219000000070000000681", 0x10}], 0x1) 03:51:11 executing program 2: socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2078.983883] binder: 28810:28811 transaction failed 29189/-22, size 0-8 line 2855 [ 2078.993099] audit: type=1326 audit(2000001071.708:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28820 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2079.014926] binder_release_work: 9 callbacks suppressed [ 2079.014935] binder: undelivered TRANSACTION_ERROR: 29189 03:51:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010500ff3ffe58", 0x1f}], 0x1) 03:51:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4a0ffffffff]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2079.047307] binder: undelivered TRANSACTION_ERROR: 29189 03:51:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x8000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2079.135325] binder: 28833:28836 transaction failed 29189/-22, size 0-8 line 2855 [ 2079.173707] binder: undelivered TRANSACTION_ERROR: 29189 03:51:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7a00000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2079.315079] binder: 28845:28846 transaction failed 29189/-22, size 0-8 line 2855 [ 2079.324677] binder: 28845:28846 transaction failed 29189/-22, size 0-8 line 2855 [ 2079.326508] binder: undelivered TRANSACTION_ERROR: 29189 [ 2079.338819] binder: undelivered TRANSACTION_ERROR: 29189 [ 2079.774634] audit: type=1326 audit(2000001072.498:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28820 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x100000000000000}]}) 03:51:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000020219000000070000000681", 0x10}], 0x1) 03:51:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam}) 03:51:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010108ff3ffe58", 0x1f}], 0x1) 03:51:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4800000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x300, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2079.881226] binder: 28853:28860 transaction failed 29189/-22, size 0-8 line 2855 03:51:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam}) 03:51:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100", 0x18}], 0x1) 03:51:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x74000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2079.923489] binder: undelivered TRANSACTION_ERROR: 29189 03:51:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010105ff3ffe58", 0x1f}], 0x1) [ 2080.039514] binder: 28872:28874 transaction failed 29189/-22, size 0-8 line 2855 03:51:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x1000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam}) [ 2080.093522] binder: undelivered TRANSACTION_ERROR: 29189 [ 2080.209699] binder: 28884:28886 transaction failed 29189/-22, size 0-8 line 2855 [ 2080.245777] binder: 28884:28886 transaction failed 29189/-22, size 0-8 line 2855 [ 2080.258711] binder: undelivered TRANSACTION_ERROR: 29189 [ 2080.277857] binder: undelivered TRANSACTION_ERROR: 29189 03:51:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x200000000000000}]}) 03:51:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xc07, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100", 0x18}], 0x1) 03:51:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010106ff3ffe58", 0x1f}], 0x1) 03:51:13 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) 03:51:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6c00]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2080.716194] kauditd_printk_skb: 1 callbacks suppressed [ 2080.716209] audit: type=1326 audit(2000001073.438:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28863 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:13 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2080.811208] binder: 28899:28901 transaction failed 29189/-22, size 0-8 line 2855 [ 2080.824811] audit: type=1326 audit(2000001073.548:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28893 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050900010001010aff3ffe58", 0x1f}], 0x1) 03:51:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100", 0x18}], 0x1) [ 2080.884162] binder: undelivered TRANSACTION_ERROR: 29189 03:51:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x12]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xf5ffffff00000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2080.957557] FAULT_INJECTION: forcing a failure. [ 2080.957557] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.012542] CPU: 1 PID: 28911 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #284 [ 2081.019964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2081.029340] Call Trace: [ 2081.031972] dump_stack+0x1c4/0x2b4 [ 2081.035645] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2081.040892] should_fail.cold.4+0xa/0x17 [ 2081.045005] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2081.050144] ? zap_class+0x640/0x640 [ 2081.053889] ? perf_trace_lock+0x7a0/0x7a0 [ 2081.058149] ? graph_lock+0x170/0x170 [ 2081.061974] ? graph_lock+0x170/0x170 [ 2081.065796] ? graph_lock+0x170/0x170 [ 2081.069626] ? find_held_lock+0x36/0x1c0 [ 2081.073713] ? __lock_is_held+0xb5/0x140 [ 2081.077829] ? ___might_sleep+0x1ed/0x300 [ 2081.082019] ? arch_local_save_flags+0x40/0x40 [ 2081.086622] ? lock_release+0x970/0x970 [ 2081.090610] ? arch_local_save_flags+0x40/0x40 [ 2081.090633] ? rtnl_lock+0x17/0x20 [ 2081.098794] __should_failslab+0x124/0x180 [ 2081.103056] should_failslab+0x9/0x14 [ 2081.103077] __kmalloc+0x2d4/0x760 [ 2081.103106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2081.103123] ? old_dev_ioctl.isra.2+0x1009/0x20e0 [ 2081.103149] old_dev_ioctl.isra.2+0x1009/0x20e0 [ 2081.103169] ? perf_trace_lock+0x7a0/0x7a0 [ 2081.103186] ? add_del_if+0x140/0x140 [ 2081.103208] ? debug_smp_processor_id+0x1c/0x20 [ 2081.103267] ? _parse_integer+0x180/0x180 [ 2081.142702] ? find_held_lock+0x36/0x1c0 [ 2081.146815] ? dev_load+0xb0/0x210 [ 2081.150383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2081.155954] ? br_ioctl_deviceless_stub+0xac0/0xac0 [ 2081.160992] br_dev_ioctl+0x5a/0xe0 [ 2081.164653] dev_ifsioc+0x41d/0xa80 [ 2081.168305] ? register_gifconf+0x70/0x70 [ 2081.172486] dev_ioctl+0x698/0xcc0 [ 2081.176059] sock_ioctl+0x484/0x690 [ 2081.179709] ? routing_ioctl+0x890/0x890 [ 2081.183805] ? ksys_dup3+0x601/0x680 [ 2081.187544] ? find_held_lock+0x36/0x1c0 [ 2081.191652] ? routing_ioctl+0x890/0x890 [ 2081.196030] do_vfs_ioctl+0x1de/0x1720 [ 2081.199949] ? ioctl_preallocate+0x300/0x300 [ 2081.204377] ? __fget_light+0x2e9/0x430 [ 2081.208421] ? fget_raw+0x20/0x20 [ 2081.211914] ? __sb_end_write+0xd9/0x110 [ 2081.216003] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2081.221557] ? fput+0x130/0x1a0 [ 2081.224856] ? do_syscall_64+0x9a/0x820 [ 2081.228849] ? do_syscall_64+0x9a/0x820 [ 2081.233357] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2081.237970] ? security_file_ioctl+0x94/0xc0 [ 2081.242407] ksys_ioctl+0xa9/0xd0 [ 2081.245890] __x64_sys_ioctl+0x73/0xb0 [ 2081.249810] do_syscall_64+0x1b9/0x820 [ 2081.253715] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2081.253752] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2081.253775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2081.264069] ? trace_hardirqs_on_caller+0x310/0x310 [ 2081.264090] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2081.264111] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2081.284003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2081.288883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2081.294096] RIP: 0033:0x457569 03:51:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010110ff3ffe58", 0x1f}], 0x1) [ 2081.297323] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2081.316240] RSP: 002b:00007f13c3bcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2081.323977] RAX: ffffffffffffffda RBX: 00007f13c3bcac90 RCX: 0000000000457569 [ 2081.331277] RDX: 0000000020000040 RSI: 00000000000089f0 RDI: 0000000000000003 [ 2081.338594] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2081.345876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13c3bcb6d4 [ 2081.353158] R13: 00000000004c1f4a R14: 00000000004d2d60 R15: 0000000000000004 [ 2081.590625] audit: type=1326 audit(2000001074.308:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28893 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1a0}]}) 03:51:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x70c0000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010102ff3ffe58", 0x1f}], 0x1) 03:51:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7400000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff", 0x1c}], 0x1) 03:51:14 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4c00000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff", 0x1c}], 0x1) [ 2081.720241] audit: type=1326 audit(2000001074.438:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28945 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:14 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050900010001010fff3ffe58", 0x1f}], 0x1) 03:51:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff", 0x1c}], 0x1) 03:51:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x300000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010109ff3ffe58", 0x1f}], 0x1) 03:51:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4c]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe", 0x1e}], 0x1) 03:51:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8970, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6c000000}]}) [ 2082.517214] audit: type=1326 audit(2000001075.238:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28945 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe", 0x1e}], 0x1) 03:51:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6800]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8921, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2082.662409] audit: type=1326 audit(2000001075.378:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28986 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b050900010001010bff3ffe58", 0x1f}], 0x1) 03:51:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x5]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe", 0x1e}], 0x1) 03:51:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4}]}) 03:51:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xfffffdef}], 0x1) 03:51:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:16 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x600, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2083.427252] audit: type=1326 audit(2000001076.148:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28986 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2083.526586] audit: type=1326 audit(2000001076.248:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29026 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2083.552654] FAULT_INJECTION: forcing a failure. [ 2083.552654] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.567170] CPU: 1 PID: 29027 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2083.574577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2083.583953] Call Trace: [ 2083.586579] dump_stack+0x1c4/0x2b4 [ 2083.590266] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2083.595508] should_fail.cold.4+0xa/0x17 [ 2083.599612] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2083.604770] ? graph_lock+0x170/0x170 [ 2083.608619] ? graph_lock+0x170/0x170 [ 2083.612462] ? find_held_lock+0x36/0x1c0 [ 2083.616581] ? ___might_sleep+0x1ed/0x300 [ 2083.620770] ? arch_local_save_flags+0x40/0x40 [ 2083.625381] ? trace_hardirqs_on+0xbd/0x310 [ 2083.629754] ? _raw_spin_unlock_bh+0x30/0x40 [ 2083.634237] __should_failslab+0x124/0x180 [ 2083.638524] should_failslab+0x9/0x14 [ 2083.642353] kmem_cache_alloc_node+0x26e/0x730 [ 2083.646970] ? __local_bh_enable_ip+0x160/0x260 [ 2083.651665] ? _raw_spin_unlock_bh+0x30/0x40 [ 2083.656114] __alloc_skb+0x119/0x770 [ 2083.659862] ? skb_scrub_packet+0x490/0x490 [ 2083.664215] ? netlink_insert+0x15a/0x3f0 [ 2083.668399] ? __netlink_insert+0x13b0/0x13b0 [ 2083.672936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2083.678499] ? netlink_autobind.isra.34+0x232/0x310 [ 2083.683559] netlink_sendmsg+0xb29/0xfc0 [ 2083.687641] ? aa_path_link+0x5e0/0x5e0 [ 2083.691659] ? netlink_unicast+0x760/0x760 [ 2083.695914] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 2083.700870] ? apparmor_socket_sendmsg+0x29/0x30 [ 2083.705642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2083.711195] ? security_socket_sendmsg+0x94/0xc0 [ 2083.715970] ? netlink_unicast+0x760/0x760 [ 2083.720227] sock_sendmsg+0xd5/0x120 [ 2083.723964] sock_write_iter+0x35e/0x5c0 [ 2083.728045] ? sock_sendmsg+0x120/0x120 [ 2083.732065] do_iter_readv_writev+0x8b0/0xa80 [ 2083.736583] ? vfs_dedupe_file_range+0x670/0x670 [ 2083.741362] ? apparmor_file_permission+0x24/0x30 [ 2083.746233] ? rw_verify_area+0x118/0x360 [ 2083.750410] do_iter_write+0x185/0x5f0 [ 2083.754312] ? dup_iter+0x270/0x270 [ 2083.757973] vfs_writev+0x1f1/0x360 [ 2083.761617] ? vfs_iter_write+0xb0/0xb0 [ 2083.765617] ? wait_for_completion+0x8a0/0x8a0 [ 2083.770241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2083.775799] ? __fdget_pos+0xde/0x200 [ 2083.779617] ? __fdget_raw+0x20/0x20 [ 2083.783341] ? __sb_end_write+0xd9/0x110 [ 2083.787432] do_writev+0x11a/0x310 [ 2083.790994] ? vfs_writev+0x360/0x360 [ 2083.794812] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2083.800291] __x64_sys_writev+0x75/0xb0 [ 2083.804289] do_syscall_64+0x1b9/0x820 [ 2083.808191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2083.813569] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2083.818514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2083.823378] ? trace_hardirqs_on_caller+0x310/0x310 [ 2083.828411] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2083.833443] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2083.838486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2083.843354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2083.848554] RIP: 0033:0x457569 [ 2083.851767] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:51:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x1a0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a3, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4c00]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x40049409, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2083.870684] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2083.878442] RAX: ffffffffffffffda RBX: 00007fadad861c90 RCX: 0000000000457569 [ 2083.885729] RDX: 0000000000000001 RSI: 0000000020fb5ff0 RDI: 0000000000000003 [ 2083.893008] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2083.900284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2083.907567] R13: 00000000004c30b5 R14: 00000000004d9078 R15: 0000000000000004 03:51:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x3f00]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2084.040612] binder_transaction: 11 callbacks suppressed [ 2084.040632] binder: 29045:29046 transaction failed 29189/-22, size 0-8 line 2855 [ 2084.106599] binder_release_work: 11 callbacks suppressed [ 2084.106619] binder: undelivered TRANSACTION_ERROR: 29189 03:51:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xe4}]}) 03:51:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0045878, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:17 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x48]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x33fe0}], 0x1) 03:51:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4002, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2084.318226] audit: type=1326 audit(2000001077.038:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29026 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2084.410603] binder: 29061:29067 transaction failed 29189/-22, size 0-8 line 2855 [ 2084.422546] FAULT_INJECTION: forcing a failure. [ 2084.422546] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.434598] CPU: 1 PID: 29066 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #284 [ 2084.441981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2084.449563] binder: undelivered TRANSACTION_ERROR: 29189 [ 2084.451340] Call Trace: 03:51:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2084.451374] dump_stack+0x1c4/0x2b4 [ 2084.451410] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2084.459017] binder: 29061:29067 transaction failed 29189/-22, size 0-8 line 2855 [ 2084.459469] should_fail.cold.4+0xa/0x17 [ 2084.459494] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2084.467316] binder: undelivered TRANSACTION_ERROR: 29189 [ 2084.468320] ? graph_lock+0x170/0x170 [ 2084.468348] ? save_stack+0xa9/0xd0 [ 2084.479942] ? kasan_kmalloc+0xc7/0xe0 [ 2084.490508] ? find_held_lock+0x36/0x1c0 [ 2084.490560] ? ___might_sleep+0x1ed/0x300 [ 2084.510065] ? arch_local_save_flags+0x40/0x40 [ 2084.514706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2084.520301] __should_failslab+0x124/0x180 [ 2084.524557] should_failslab+0x9/0x14 [ 2084.528376] kmem_cache_alloc_node_trace+0x270/0x740 [ 2084.533518] __kmalloc_node_track_caller+0x33/0x70 [ 2084.538489] __kmalloc_reserve.isra.39+0x41/0xe0 [ 2084.543289] __alloc_skb+0x155/0x770 [ 2084.547036] ? skb_scrub_packet+0x490/0x490 [ 2084.549751] audit: type=1326 audit(2000001077.158:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29068 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2084.551406] ? netlink_insert+0x15a/0x3f0 [ 2084.551431] ? __netlink_insert+0x13b0/0x13b0 [ 2084.551465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2084.551487] ? netlink_autobind.isra.34+0x232/0x310 [ 2084.591570] netlink_sendmsg+0xb29/0xfc0 [ 2084.595641] ? aa_path_link+0x5e0/0x5e0 [ 2084.599610] ? netlink_unicast+0x760/0x760 [ 2084.603833] ? aa_sock_msg_perm.isra.12+0xba/0x160 03:51:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6000000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2084.608759] ? apparmor_socket_sendmsg+0x29/0x30 [ 2084.613520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2084.619062] ? security_socket_sendmsg+0x94/0xc0 [ 2084.623839] ? netlink_unicast+0x760/0x760 [ 2084.628096] sock_sendmsg+0xd5/0x120 [ 2084.631849] sock_write_iter+0x35e/0x5c0 [ 2084.635932] ? sock_sendmsg+0x120/0x120 [ 2084.639946] do_iter_readv_writev+0x8b0/0xa80 [ 2084.644488] ? vfs_dedupe_file_range+0x670/0x670 [ 2084.649283] ? apparmor_file_permission+0x24/0x30 [ 2084.654154] ? rw_verify_area+0x118/0x360 03:51:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891f, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2084.658327] do_iter_write+0x185/0x5f0 [ 2084.662235] ? dup_iter+0x270/0x270 [ 2084.665875] ? proc_cwd_link+0x1d0/0x1d0 [ 2084.669936] vfs_writev+0x1f1/0x360 [ 2084.673559] ? vfs_iter_write+0xb0/0xb0 [ 2084.677547] ? wait_for_completion+0x8a0/0x8a0 [ 2084.682147] ? __lock_is_held+0xb5/0x140 [ 2084.686273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2084.691835] ? __fdget_pos+0xde/0x200 [ 2084.695667] ? __fdget_raw+0x20/0x20 [ 2084.699402] ? __sb_end_write+0xd9/0x110 [ 2084.703488] do_writev+0x11a/0x310 [ 2084.707054] ? vfs_writev+0x360/0x360 [ 2084.710891] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2084.716367] __x64_sys_writev+0x75/0xb0 [ 2084.720374] do_syscall_64+0x1b9/0x820 [ 2084.724284] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2084.729668] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2084.734610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2084.739487] ? trace_hardirqs_on_caller+0x310/0x310 [ 2084.744545] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2084.749596] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2084.754645] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:51:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2084.759517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2084.764766] RIP: 0033:0x457569 [ 2084.767982] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2084.786899] RSP: 002b:00007fadad861c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2084.794624] RAX: ffffffffffffffda RBX: 00007fadad861c90 RCX: 0000000000457569 [ 2084.801905] RDX: 0000000000000001 RSI: 0000000020fb5ff0 RDI: 0000000000000003 03:51:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5460, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6800000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2084.809205] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2084.816497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadad8626d4 [ 2084.823780] R13: 00000000004c30b5 R14: 00000000004d9078 R15: 0000000000000004 [ 2084.860535] binder: 29086:29087 transaction failed 29189/-22, size 0-8 line 2855 [ 2084.887937] binder: 29086:29087 transaction failed 29189/-22, size 0-8 line 2855 [ 2084.899201] binder: undelivered TRANSACTION_ERROR: 29189 [ 2084.906158] binder: undelivered TRANSACTION_ERROR: 29189 03:51:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x700000000000000}]}) 03:51:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xf}], 0x1) 03:51:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xa0010000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x2, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xe000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:17 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc020660b, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2085.304576] binder: 29096:29106 transaction failed 29189/-22, size 0-8 line 2855 [ 2085.325184] binder: undelivered TRANSACTION_ERROR: 29189 03:51:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x7ffff000}], 0x1) 03:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3f000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8990, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2085.495978] binder: 29121:29122 transaction failed 29189/-22, size 0-8 line 2855 [ 2085.515663] binder: 29121:29122 transaction failed 29189/-22, size 0-8 line 2855 [ 2085.530282] binder: undelivered TRANSACTION_ERROR: 29189 [ 2085.537450] binder: undelivered TRANSACTION_ERROR: 29189 03:51:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7a000000}]}) 03:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="00f0ff7f02021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x48000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xfffffffffffffdef}], 0x1) 03:51:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891e, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa00, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2086.144537] kauditd_printk_skb: 2 callbacks suppressed [ 2086.144552] audit: type=1326 audit(2000001078.868:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29108 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2086.216875] binder: 29139:29142 transaction failed 29189/-22, size 0-8 line 2855 03:51:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xfdef}], 0x1) 03:51:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x68]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2086.250298] audit: type=1326 audit(2000001078.968:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29147 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2086.264023] binder: undelivered TRANSACTION_ERROR: 29189 03:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="effdffff02021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x4020940d, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2086.421468] binder: 29157:29162 transaction failed 29189/-22, size 0-8 line 2855 03:51:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffff00000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xc0}], 0x1) [ 2086.466636] binder: undelivered TRANSACTION_ERROR: 29189 03:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="0f00000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5421, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3}]}) 03:51:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xa0008000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xec0}], 0x1) 03:51:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x600000000000000, @remote, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2087.047208] audit: type=1326 audit(2000001079.768:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29147 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="c00e000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2087.154927] audit: type=1326 audit(2000001079.878:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29189 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x4000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8995, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x600000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x2000001f}], 0x1) 03:51:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x700]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0045878, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="c000000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2087.945856] audit: type=1326 audit(2000001080.668:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29189 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="effd000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0xffffff1f) 03:51:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7a}]}) 03:51:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x700000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x91ffffff00000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2088.077422] audit: type=1326 audit(2000001080.798:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29240 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00002002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x400000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x2) 03:51:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xff0f0000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x5000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="e03f030002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3f00000000000000}]}) 03:51:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x3) 03:51:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x3000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f02000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2088.876892] audit: type=1326 audit(2000001081.598:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29240 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x4) [ 2088.979701] audit: type=1326 audit(2000001081.698:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29289 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x7400]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1ff0000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x80fe]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2089.162125] binder_transaction: 10 callbacks suppressed [ 2089.162144] binder: 29304:29305 transaction failed 29189/-22, size 0-8 line 2855 03:51:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f36e50002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2089.212742] binder_release_work: 10 callbacks suppressed [ 2089.212846] binder: undelivered TRANSACTION_ERROR: 29189 03:51:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x5000000}]}) 03:51:22 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x6c]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x5) 03:51:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4002000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000b021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2089.774647] audit: type=1326 audit(2000001082.498:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29289 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2089.855451] binder: 29322:29326 transaction failed 29189/-22, size 0-8 line 2855 03:51:22 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8920, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000003021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2089.896017] binder: undelivered TRANSACTION_ERROR: 29189 03:51:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x2a0ffffffff]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2089.929891] audit: type=1326 audit(2000001082.648:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29331 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x8) 03:51:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4a0ffffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:22 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2090.061823] binder: 29342:29344 transaction failed 29189/-22, size 0-8 line 2855 [ 2090.097784] binder: undelivered TRANSACTION_ERROR: 29189 03:51:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x48000000}]}) 03:51:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000200021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x200000000000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8927, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:23 executing program 0: r0 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000140)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0xf3}], 0x1) 03:51:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4002]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8937, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2090.779624] binder: 29365:29368 transaction failed 29189/-22, size 0-8 line 2855 [ 2090.812490] binder: undelivered TRANSACTION_ERROR: 29189 03:51:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0f000002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = geteuid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)={0x1f8, 0x0, 0x7, [{{0x3, 0x1, 0xfffffffffffffff9, 0x7, 0x3, 0x5, {0x5, 0x9, 0x4, 0x0, 0x0, 0xfff, 0x18, 0xddd, 0x4, 0x2, 0x1, r2, r3, 0x5, 0x3}}, {0x3, 0xd6e, 0x8, 0x4, 'keyring{'}}, {{0x0, 0x3, 0x8, 0x8, 0x3, 0xd6e9, {0x5, 0x7, 0x9b, 0xe62, 0x7, 0x1, 0x5, 0x4, 0xe8, 0x4f1, 0x8, r4, r5, 0x0, 0x7fff}}, {0x5, 0x0, 0x1, 0x100000000, '!'}}, {{0x2, 0x3, 0x8, 0x7, 0x6, 0x100000001, {0x6, 0x8001, 0x7fffffff, 0x5, 0x40, 0x5, 0xe25, 0x3fe000000000000, 0x4, 0x0, 0x2, r6, r7, 0xbd4, 0x4}}, {0x1, 0x0, 0xa, 0x7, '/dev/vcs#\x00'}}]}, 0x1f8) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r8 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x7, 0x2000) ioctl$TIOCGETD(r8, 0x5424, &(0x7f00000000c0)) 03:51:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0xa0020000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfe80]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5450, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2091.003145] binder: 29385:29386 transaction failed 29189/-22, size 0-8 line 2855 [ 2091.043604] binder: undelivered TRANSACTION_ERROR: 29189 03:51:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3000000}]}) 03:51:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1fe5360002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x3f000000]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x500000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2091.607577] kauditd_printk_skb: 2 callbacks suppressed [ 2091.607592] audit: type=1326 audit(2000001084.328:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29371 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x500]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f003f0002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2091.703845] binder: 29400:29401 transaction failed 29189/-22, size 0-8 line 2855 [ 2091.724011] binder: undelivered TRANSACTION_ERROR: 29189 03:51:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000013c0)={0x0, 0x9}, &(0x7f0000001400)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001440)=r1, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/dsp\x00', 0x0, 0x0) set_tid_address(&(0x7f0000001580)) openat$cgroup_subtree(r2, &(0x7f0000001500)='cgroup.subtree_control\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001540)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2000) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) sendmsg$xdp(r4, &(0x7f0000001380)={&(0x7f0000000140)={0x2c, 0x7, r5, 0xd}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000200)="5735ca0c53c54f54", 0x8}, {&(0x7f0000000240)="12d355325a3e3ed32bf93c62", 0xc}, {&(0x7f0000000280)="b3e3dcf5da7287b2ed0e8f143a864ca82a7a799106ed79", 0x17}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="53c989c4a21cfe900879f6625a6e0af88f61145d3f04", 0x16}], 0x5, 0x0, 0x0, 0x40}, 0x0) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000001480)=0x2) [ 2091.789364] audit: type=1326 audit(2000001084.508:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29411 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2091.874657] binder: 29417:29419 transaction failed 29189/-22, size 0-8 line 2855 03:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xf5ffffff00000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:24 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8930, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2091.928295] binder: undelivered TRANSACTION_ERROR: 29189 [ 2092.560301] audit: type=1326 audit(2000001085.278:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29411 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x300}]}) 03:51:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000f0002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4a0ffffffff, 0x800020, &(0x7f0000009000)}) 03:51:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\\\',\x00', 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x180280}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ba4c3662cbb978b40d88e745fafffea9da5a87cb7d582501a502f7d42dd5f9f8b0cde81b1a557a97cbd8e3ec6d18344c808b6b29f11f7e9fc90eca6a97ee900f6c3c89910fdc57951a793cac68b9f75e69bdef9ae46449dabca08627135ed16d52c5b73784686aec151a2e95c4ab299f36cd5876496cf6f11c351722f568ceaa3d7a34ba12d2cea3389437b6d1e67a6ee465ddb028165f2a615f3346fa9a6fa857c46281b02f4d193c82b8fd6b27d9beb1cb3802cf7c670c63b7c4173f52f78bee1f7743bb2a2523f936935b2a01e0a99a2e6162bc629ab8d6d82c5d25549570cd55476401e22966b7", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5960a156}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r1, 0xa01, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd29d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d52f13f5e56c6f5}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xffff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000012c0)={r3, 0xa5, "2138aeb68cfd4d7adc5cc1681ab827ceabaa2c90c0d77593317160c16c1d29709b31bdb088c593aa89d4045e317764a5455a7b30111458593a2676d779459140f6033dcd3bb8736689b8e5335adc130542e24da91a1918a466ad57e26e6d256b02cb4b0b395d6a42ceebff4ae2a664dd61b5db91ceddb8c103ca1bf39e882d0e66776b3e45c31a0d7a6949e2c3c0ba94353f7956a20680c430ad456302d3d9129e45f43f21"}, &(0x7f00000014c0)=0xad) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x70) ioctl(r4, 0x4000008907, &(0x7f00000012c0)) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=""/4096, 0x1000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) inotify_init() writev(r5, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:25 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8994, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2092.651596] binder: 29443:29444 transaction failed 29189/-22, size 0-8 line 2855 03:51:25 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5452, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x3f00000000000000, 0x800020, &(0x7f0000009000)}) [ 2092.714639] audit: type=1326 audit(2000001085.438:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29453 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000004021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x7]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:25 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8971, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2092.865470] binder: 29465:29467 transaction failed 29189/-22, size 0-8 line 2855 03:51:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000001021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2093.051029] nla_parse: 12 callbacks suppressed [ 2093.051040] netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. 03:51:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6c00}]}) 03:51:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4800000000000000, 0x800020, &(0x7f0000009000)}) 03:51:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfffffffe]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:26 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00f00002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2093.511546] audit: type=1326 audit(2000001086.228:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29453 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x5]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000000101900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2093.596036] audit: type=1326 audit(2000001086.318:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29485 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2093.621970] binder: 29490:29491 transaction failed 29189/-22, size 0-8 line 2855 03:51:26 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8942, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xd) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xa0040000, 0x800020, &(0x7f0000009000)}) 03:51:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x8000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffffa0010000}]}) 03:51:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00e53602021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r1, r2}) 03:51:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x48000000, 0x800020, &(0x7f0000009000)}) 03:51:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x70c]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2094.379919] audit: type=1326 audit(2000001087.098:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29485 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2094.465276] binder_transaction: 1 callbacks suppressed [ 2094.465294] binder: 29529:29533 transaction failed 29189/-22, size 0-8 line 2855 03:51:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000f0002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfffffffd]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2094.536778] audit: type=1326 audit(2000001087.258:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29538 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2094.559511] binder: 29529:29533 transaction failed 29189/-22, size 0-8 line 2855 03:51:27 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0036e502021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8923, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x700000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6800000000000000}]}) 03:51:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003f02021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:28 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x80000000000004) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f0000ffff03ba5307f32dc1741e045183f019f1bd1900000007000000068100023b0509000100010100ff3ffe58", 0x2e}], 0x1) 03:51:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7000000, 0x800020, &(0x7f0000009000)}) [ 2095.300688] audit: type=1326 audit(2000001088.018:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29538 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2095.374411] binder: 29568:29571 transaction failed 29189/-22, size 0-8 line 2855 03:51:28 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b1, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000f02021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x1a0ffffffff, 0x800020, &(0x7f0000009000)}) 03:51:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) fcntl$setflags(r0, 0x2, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) [ 2095.435291] audit: type=1326 audit(2000001088.158:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29576 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfdffffff00000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:28 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5451, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2095.587987] binder: 29592:29593 transaction failed 29189/-22, size 0-8 line 2855 03:51:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x48, 0x800020, &(0x7f0000009000)}) [ 2095.760216] binder: 29602:29604 transaction failed 29189/-22, size 0-8 line 2855 03:51:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7400}]}) 03:51:29 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xfffffffffffff2c1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x70, 0xfff, 0x9, 0xbb, 0x7, 0x0, 0x81, 0x0, 0x1, 0x2, 0x1, 0xe9b, 0x0, 0x0, 0xfffffffffffffff8, 0x7fffffff, 0x1, 0xffff, 0x80000001, 0x200, 0x11, 0x5, 0xcb, 0xb2f, 0xffff, 0x6, 0x6, 0x5, 0xa30, 0x0, 0x8, 0x1, 0x7, 0xd4, 0x5, 0xf4, 0xfffffffffffffffa, 0x0, 0x2, 0x3, @perf_config_ext={0x7fff, 0xf95}, 0xa028, 0x74c, 0x2400000000, 0x7, 0x1e0, 0x0, 0x80000000}) 03:51:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00f00002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:29 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x68, 0x800020, &(0x7f0000009000)}) 03:51:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2000000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2096.302695] binder: 29615:29616 transaction failed 29189/-22, size 0-8 line 2855 03:51:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f000000000f1900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:29 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2096.354782] binder: 29615:29616 transaction failed 29189/-22, size 0-8 line 2855 03:51:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={{0x7fffffff, 0x1, 0x4, 0x3, 0x6, 0x1}, 0x2}) 03:51:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x1000000, 0x800020, &(0x7f0000009000)}) 03:51:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1a0ffffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:29 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8949, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2096.527716] binder: 29637:29638 transaction failed 29189/-22, size 0-8 line 2855 [ 2096.552446] binder: 29637:29638 transaction failed 29189/-22, size 0-8 line 2855 [ 2097.128418] kauditd_printk_skb: 2 callbacks suppressed [ 2097.128439] audit: type=1326 audit(2000001089.848:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29614 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4000000000000000}]}) 03:51:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000f002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6800000000000000, 0x800020, &(0x7f0000009000)}) 03:51:29 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02c4babda04fc23056"], 0xf, 0x0) socket$netlink(0x10, 0x3, 0x4) 03:51:29 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8911, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xa0010000, 0x800020, &(0x7f0000009000)}) [ 2097.246399] binder: 29659:29662 transaction failed 29189/-22, size 0-8 line 2855 03:51:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00020002021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:30 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2097.321162] audit: type=1326 audit(2000001090.038:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29667 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:30 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x9) socket$netlink(0x10, 0x3, 0x2) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000200)="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", 0xfffffffffffffebe}], 0xfffffffffffffd9f) 03:51:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x18020000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x68000000, 0x800020, &(0x7f0000009000)}) 03:51:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7a00}]}) 03:51:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007500021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:30 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8992, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x88580) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0xfffffffffffffffc}, 0x2) r1 = socket$netlink(0x10, 0x3, 0x17) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4800, 0x800020, &(0x7f0000009000)}) 03:51:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x7000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2098.081606] audit: type=1326 audit(2000001090.798:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29667 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00001700021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7400000000000000, 0x800020, &(0x7f0000009000)}) [ 2098.186586] audit: type=1326 audit(2000001090.908:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29710 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:30 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00pP\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1e401, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x900]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ed00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x400000000000000, 0x800020, &(0x7f0000009000)}) 03:51:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006001021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7}]}) 03:51:31 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000)={@remote, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0), 0x1000020e) 03:51:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x700]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2098.984798] audit: type=1326 audit(2000001091.708:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29710 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4c00000000000000, 0x800020, &(0x7f0000009000)}) [ 2099.108359] audit: type=1326 audit(2000001091.828:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29754 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000501021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:31 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x4000) recvmmsg(0xffffffffffffff9c, &(0x7f0000001b00)=[{{&(0x7f00000006c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/205, 0xcd}, {&(0x7f0000001980)=""/77, 0x4d}], 0x5, &(0x7f0000001a80)=""/70, 0x46, 0x6039}, 0x9}], 0x1, 0x10020, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001b40)={@ipv4={[], [], @multicast1}, 0x4e, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6800, 0x800020, &(0x7f0000009000)}) 03:51:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffffa0008000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000a001021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:32 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x804) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2a0ffffffff}]}) 03:51:32 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530a0008000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x300, 0x800020, &(0x7f0000009000)}) 03:51:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2a0ffffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00005b01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) [ 2099.906480] audit: type=1326 audit(2000001092.628:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29754 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2099.998535] binder_transaction: 9 callbacks suppressed [ 2099.998553] binder: 29799:29803 transaction failed 29189/-22, size 0-8 line 2855 03:51:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x300000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ef00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:32 executing program 0: pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000d8afaf17cca9b9bdbeac01000000cd8700000000000000000007002e2fb682404757"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) utime(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:32 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00pP\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2100.070643] audit: type=1326 audit(2000001092.788:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29809 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6c, 0x800020, &(0x7f0000009000)}) 03:51:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000e201021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2100.234627] binder: 29824:29825 transaction failed 29189/-22, size 0-8 line 2855 03:51:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xfeffffff00000000}]}) 03:51:33 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7a, 0x800020, &(0x7f0000009000)}) 03:51:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3f00000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x770d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x400040) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007a01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2100.827997] audit: type=1326 audit(2000001093.548:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29809 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2100.903382] binder: 29840:29844 transaction failed 29189/-22, size 0-8 line 2855 03:51:33 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2100.937198] audit: type=1326 audit(2000001093.658:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29848 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6c00000000000000, 0x800020, &(0x7f0000009000)}) 03:51:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008601021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:33 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530ffffffffa00200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:33 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e21, @local}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x10001) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000000c0)=0xb20a) 03:51:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xf5ffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2101.138940] binder: 29858:29859 transaction failed 29189/-22, size 0-8 line 2855 03:51:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3f000000}]}) 03:51:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x600000000000000, 0x800020, &(0x7f0000009000)}) 03:51:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00002601021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:34 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530008000a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000000c0)) 03:51:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2101.836911] binder: 29879:29889 transaction failed 29189/-22, size 0-8 line 2855 03:51:34 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000002a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000c201021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfeffffff00000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x2a0, 0x800020, &(0x7f0000009000)}) 03:51:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f0000000203a72b64eab9b11900000007000000068100023b0509000100010100ff4bfe58", 0xfffffffffffffe70}], 0x1) [ 2102.014661] binder: 29902:29904 transaction failed 29189/-22, size 0-8 line 2855 03:51:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7a00000000000000, 0x800020, &(0x7f0000009000)}) [ 2102.174578] binder: 29915:29916 transaction failed 29189/-22, size 0-8 line 2855 03:51:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00005501021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x700}]}) 03:51:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1f) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) write$9p(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000) 03:51:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x70c000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6c000000, 0x800020, &(0x7f0000009000)}) [ 2102.660544] kauditd_printk_skb: 2 callbacks suppressed [ 2102.660558] audit: type=1326 audit(2000001095.378:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29891 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ad01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2102.757505] binder: 29924:29929 transaction failed 29189/-22, size 0-8 line 2855 [ 2102.780440] audit: type=1326 audit(2000001095.498:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29932 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xa0008000, 0x800020, &(0x7f0000009000)}) 03:51:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1f) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfffffff5]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2102.945625] binder: 29947:29948 transaction failed 29189/-22, size 0-8 line 2855 03:51:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003800021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530a00100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x1a0, 0x800020, &(0x7f0000009000)}) [ 2103.224991] binder: 29967:29968 transaction failed 29189/-22, size 0-8 line 2855 03:51:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6}]}) 03:51:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecc, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x6, 0x7fff, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x2017) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x202, 0x0) 03:51:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xc07]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000d301021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x700, 0x800020, &(0x7f0000009000)}) 03:51:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2103.579026] audit: type=1326 audit(2000001096.298:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29932 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2103.677158] audit: type=1326 audit(2000001096.398:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29976 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003d01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00Pp\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x8000a0ffffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x12, 0x800020, &(0x7f0000009000)}) 03:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x40) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xffffffffffffff27, 0xffffffffffffffff, 0xfff, 0x80000000, 0x0, 0x4, 0x0, 0xa, 0x4, 0x100, 0x6, 0x76cb, 0x7f27, 0x2, 0x800, 0xc82, 0x1ff, 0x7, 0x8, 0x1, 0xffffffff, 0x40, 0x2, 0xd9, 0x0, 0x0, 0xfff, 0x400, 0x9, 0x10001, 0x6, 0x4, 0x2, 0x700, 0xff, 0x9, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x100000000, 0xffff, 0x1, 0x2, 0x2, 0x9}, r1, 0x8, r2, 0x9) socket$kcm(0x29, 0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4101b) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008f00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000e07000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xe400000000000000}]}) 03:51:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x400000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000e01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4c, 0x800020, &(0x7f0000009000)}) 03:51:37 executing program 0: io_setup(0xfffffffffffffff7, &(0x7f0000000080)=0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = epoll_create1(0x40080001) r4 = memfd_create(&(0x7f0000001280)='\x00', 0x6) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001340)=0x14) r6 = syz_open_dev$usb(&(0x7f00000013c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x200102) r7 = syz_open_dev$rtc(&(0x7f0000001440)='/dev/rtc#\x00', 0x6, 0x10000) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001540)='/dev/rtc0\x00', 0x401, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/ion\x00', 0x20002, 0x0) r10 = openat(0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x8000, 0x8) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_dev$vcsn(&(0x7f0000001840)='/dev/vcs#\x00', 0x80000001, 0x40) r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002880)='/dev/dsp\x00', 0x2000, 0x0) io_submit(r0, 0x7, &(0x7f0000002900)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x8738, r1, &(0x7f00000000c0)="cf402f2ba66d414e64bc065ff2dd594f403d69c2229c30ea598d32b822e11af28f1f3de5d7e27da3c6e1160479b722009b1f51ee6a55f96f00708a3e50113026b3b67cae7e0d22d6f58f08079f44880f09df75f82b83f33bbaa043675c3a41af99aec38f48d49ac7380ea08e19f3ea75a0e1bd47328e7e7cc0943656a55c3581945dd20135d7f78ef9c6953e3ffb9fa1b446ac919511661d", 0x98, 0x9, 0x0, 0x85960612047ff562, r2}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000280)="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", 0x1000, 0x1c97, 0x0, 0x3, r4}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000001380)="bb5d5cbef325", 0x6, 0x800, 0x0, 0x0, r6}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x796, r7, &(0x7f0000001480)="c052c26cb6962dbe8cf560baf73c23718a6c4dae9b9fdc43db236747d7d8a555d5d068bd29f764e0152c690dfc2a69ab5b21ace65baa714c2baf9752171ba5e9ec454420e7e87f50be06f40a2f66eeef9cc69e90eb502ccbc78947ecc177dbe5295f98a2ed59f1da35c978c10f314d7aa9b882c77859b2fb5f61a31294d706ed758890419bf92b47ab934418c73236bc87ca11906ee111d608d2cb16ad3dd67e1a96ada82e4059751ed62a019c3fb173bc5108", 0xb3, 0x400, 0x0, 0x3, r8}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000001600)="c01f6a9a6335341ad38051021361b61dfa8307bf485c0f883106c3077464477d06243a8009196b0e1d5401785fbc7b82e0d6c5a981c514cb8e1c249b15169b755b9d5ffdabe6eb9b12c3e701b492ff2445ac3a767b5b91880e9e675f74468a980d04353b18691275811a1e092432dc2818e0a78443ad31516a5ab7fe19a5e058313580c7ec046ed726b51989d13f5e3db5914af6af8a7480784e60cd758a3b3f031efd02c71adc4156b6c231ec1a5498ece11b07e9c898a95a77d1400a64", 0xbe, 0x81, 0x0, 0x3, r10}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x7, 0xfff, r11, &(0x7f0000001780)="447e6e6776584b53ce1c6a6dd8e968acd11db4f4c5b1fbeb76a9274715a7d265ae2efd51cc1f7fdad8c8148685328f5de237b205889f5692495a151333bef4c79080f4e7134600d5c64f7e1b1ad7", 0x4e, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x8, 0x5, r12, &(0x7f0000001880)="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", 0x1000, 0x200000000000, 0x0, 0x1, r13}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = socket$netlink(0x10, 0x3, 0xc) writev(r14, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2104.471619] audit: type=1326 audit(2000001097.188:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29976 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x3000000, 0x800020, &(0x7f0000009000)}) 03:51:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000000009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2104.597066] audit: type=1326 audit(2000001097.318:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30027 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ea01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) socketpair(0x4, 0x7, 0x40000000000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x3f, 0x2215, 0xfffffffffffeffff}, &(0x7f00000003c0)=0xffffffffffffff25) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0xf289, 0x6, 0x7, 0x3ff, 0x10001, 0x26cd, 0x1, 0xffffffffffffffe1, 0x1f, 0x7, 0xfffffffffffffffe, 0x5, 0xffffffffffffffff, 0x3ff]}, &(0x7f0000000300)=0x100) set_tid_address(&(0x7f00000000c0)) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xff0f]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4000000, 0x800020, &(0x7f0000009000)}) 03:51:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x300000000000000}]}) 03:51:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000bc00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x600, 0x800020, &(0x7f0000009000)}) 03:51:38 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa00000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:38 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000001a0ffffffff00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2105.390935] audit: type=1326 audit(2000001098.108:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30027 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2105.452663] binder_transaction: 8 callbacks suppressed [ 2105.452681] binder: 30066:30067 transaction failed 29189/-22, size 0-8 line 2855 03:51:38 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000000000200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00004701021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2105.489948] audit: type=1326 audit(2000001098.208:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30075 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2105.528399] binder: 30066:30067 transaction failed 29189/-22, size 0-8 line 2855 03:51:38 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x91ffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x2, 0x800020, &(0x7f0000009000)}) 03:51:38 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000001a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2105.699467] binder: 30091:30092 transaction failed 29189/-22, size 0-8 line 2855 03:51:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7400000000000000}]}) 03:51:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003300021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x5, 0x800020, &(0x7f0000009000)}) 03:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x686c791ef488c92d) r2 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x20, 0x0, 0x400, 0xe000, 0x0, 0x1f, 0x2400, 0xc, 0x6, 0x72a9, 0x9, 0x6, 0x0, 0x7, 0x8, 0x1, 0x4, 0xffffffffffffff86, 0x7fff, 0x0, 0x7ff, 0xb3, 0x9, 0x768, 0x9, 0x7, 0x0, 0x0, 0x470, 0x7, 0x7, 0x6, 0x4, 0xd4d, 0x62, 0xa000000000000, 0x0, 0x3c, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x400, 0x1, 0x2, 0x0, 0x9, 0x8000, 0x5}, r2, 0x0, r0, 0x9) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x9]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:39 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2106.288839] audit: type=1326 audit(2000001099.008:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30075 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2106.376363] binder: 30107:30114 transaction failed 29189/-22, size 0-8 line 2855 [ 2106.385402] audit: type=1326 audit(2000001099.108:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30106 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x5000000, 0x800020, &(0x7f0000009000)}) 03:51:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2a0]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000900021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) inotify_init() r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x3b7440, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f00000000c0)=""/180, &(0x7f0000000200)=0xb4) 03:51:39 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00P`\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2106.566678] binder: 30124:30125 transaction failed 29189/-22, size 0-8 line 2855 03:51:39 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4a0}]}) 03:51:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xffffffffa0040000, 0x800020, &(0x7f0000009000)}) 03:51:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1000000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006c00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:39 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00`P\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2107.252379] binder: 30145:30153 transaction failed 29189/-22, size 0-8 line 2855 03:51:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x100000, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x100) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x9, 0x10001, r3}) 03:51:40 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000002a0ffffffff00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4, 0x800020, &(0x7f0000009000)}) 03:51:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007c01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:40 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000000000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2107.445306] binder: 30168:30170 transaction failed 29189/-22, size 0-8 line 2855 03:51:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3f00}]}) 03:51:40 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1656, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x40, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000b400021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x100000000000000, 0x800020, &(0x7f0000009000)}) 03:51:40 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530ffffffffa00400", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfdffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2108.072693] kauditd_printk_skb: 2 callbacks suppressed [ 2108.072708] audit: type=1326 audit(2000001100.788:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30155 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2108.156709] binder: 30186:30187 transaction failed 29189/-22, size 0-8 line 2855 [ 2108.179842] audit: type=1326 audit(2000001100.898:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30195 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003e00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x5000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x300000000000000, 0x800020, &(0x7f0000009000)}) 03:51:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00P`\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2108.365859] binder: 30209:30210 transaction failed 29189/-22, size 0-8 line 2855 03:51:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530ffffffffa0008000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4800000000000000}]}) 03:51:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x501000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x55}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000001540)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="0364122022cc6af89937ecb01f33baba77a1dba626bfff92881698a69f6cd821511032c1aee1ecbfd8e67c594d1fc56eb22a961cdba37466077e3d86bb209670b398a4798981817c4568431fcef0d39cfb018a676f96e7056f13c5ab99d61b440bee56c0aea15e4eb6ac6ef4ae2d726d4c40d71e5b4b86092244ccc80f9dc9a1f801d88f1bcdea1cbde220bf9c1623d10c126d7a651db05d7e6b9d8ae988c056fcdae66d01d64db18161771d77996515dd9edb633aa4f8", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=r2, @ANYRESDEC, @ANYRES16=r0, @ANYRESOCT=r2], @ANYRES16=r0, @ANYRES32=r1, @ANYPTR64, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="f7008fc84d84950aab17e17a6f9b6510732b116fa4b685cb3b4f1e1a97a73b399fd57b4c9157426072c55760136fab1c427d9c27f6e30afc60f58c6aa6b97c061bcadec3c93fcbae941f3118eb9c784d611ca2df6ed8bcf716c03feba3e808bf9a441134dde1b5ee64bd37b60f916c6808a03970140249ce615029aa889561530508", @ANYRES32=0x0]], 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0), 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000300)=0x7c4) setregid(r4, r5) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000100)) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00') 03:51:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x74000000, 0x800020, &(0x7f0000009000)}) 03:51:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003600021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530a00400", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2108.968950] audit: type=1326 audit(2000001101.688:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30195 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2109.031906] audit: type=1326 audit(2000001101.748:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30230 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2109.074115] binder: 30231:30240 transaction failed 29189/-22, size 0-8 line 2855 03:51:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x12000000, 0x800020, &(0x7f0000009000)}) 03:51:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006d00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530a00200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 03:51:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xffffffffa0010000, 0x800020, &(0x7f0000009000)}) [ 2109.831618] audit: type=1326 audit(2000001102.548:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30230 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:42 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001540)='/proc/self/net/pfkey\x00', 0x402000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e21, @rand_addr=0x5}}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001580)) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000200), 0x100000000000008e) 03:51:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x600000000000000}]}) 03:51:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000f200021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:42 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1802000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xffffffffa0020000, 0x800020, &(0x7f0000009000)}) 03:51:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x8000a0ffffffff, 0x800020, &(0x7f0000009000)}) 03:51:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000dd00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:42 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530ffefffffff7f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2110.003453] audit: type=1326 audit(2000001102.718:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30289 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xd) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4a0]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000b101021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x2a0ffffffff, 0x800020, &(0x7f0000009000)}) 03:51:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4a0ffffffff}]}) 03:51:43 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:43 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0x5) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6000000, 0x800020, &(0x7f0000009000)}) 03:51:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000c00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x50000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2110.776692] audit: type=1326 audit(2000001103.498:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30289 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2110.862596] binder_transaction: 7 callbacks suppressed [ 2110.862615] binder: 30324:30325 transaction failed 29189/-22, size 0-8 line 2855 [ 2110.894402] binder: 30324:30325 transaction failed 29189/-22, size 0-8 line 2855 03:51:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007900021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:43 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530ffffffffa00100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2110.917145] audit: type=1326 audit(2000001103.638:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30336 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7a000000, 0x800020, &(0x7f0000009000)}) 03:51:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x600a80) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0), 0xe9) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x802200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 03:51:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003a00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xff0f000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2111.074827] binder: 30348:30352 transaction failed 29189/-22, size 0-8 line 2855 03:51:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400000000000000}]}) 03:51:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 0x3a36}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000100)={0x5, r2, 0x1, 0x8}) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:44 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000004a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4c000000, 0x800020, &(0x7f0000009000)}) 03:51:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000c800021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x60000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2111.691170] audit: type=1326 audit(2000001104.408:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30336 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000400021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2111.777817] binder: 30377:30379 transaction failed 29189/-22, size 0-8 line 2855 [ 2111.824354] binder: 30377:30379 transaction failed 29189/-22, size 0-8 line 2855 03:51:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x3f000000, 0x800020, &(0x7f0000009000)}) 03:51:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x4, 0x81, 0x44f, 0x0, 0x0, 0x3ff, 0x104, 0xa, 0x5, 0xb9, 0x6, 0xe2f, 0x7, 0x3f, 0x4, 0x8, 0xe2f6, 0x8, 0x80, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x5, 0x80, 0x0, 0x400, 0x4, 0x3000000000, 0x3ff, 0x0, 0x7, 0xfffffffffffffffb, 0x4e, 0x4, 0x3ff, 0x2, 0x0, 0x100000001, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x2}, 0x5000, 0x457, 0x3, 0x2543576b8cc9026f, 0xffffffffffffffb0, 0x81, 0x1}, r1, 0x2, r0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x1d) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:44 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300070e000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2111.860689] audit: type=1326 audit(2000001104.578:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30382 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00002900021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x300]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2111.995125] binder: 30392:30398 transaction failed 29189/-22, size 0-8 line 2855 03:51:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa0020000}]}) 03:51:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530008000a0ffffffff00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000dd01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x1200, 0x800020, &(0x7f0000009000)}) 03:51:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x7f, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @rand_addr=0x1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x3, 0xffffffffffffffff, 0x6, 0x10001, 0xffffffffffffffff, &(0x7f00000000c0)='teql0\x00', 0x3, 0x1085, 0x7fffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x141) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0xf, 0x1b, 0x10, "0e9432752bd863701ef04236236b9a8b6bed7cf9f5b589ed046c980ac1b34b89c8f35d5281c5595a9fb5e943a65d826aa6d29f6e55ce47086ca473104a10e955", "cbef3a669f2612a8b4e6f1b8fb7a0cd5bc24596bf9bdb7f9fddbeef80646a78a9b855dbfe7441b0d0c631425a83336ac8964eca87c4dbe4cb289c14697be30f5", "8f2642928c81f56f87c240ae28af4242cddf290e49ed4b53f967ec670d4e52bf", [0x277c9cce, 0x100000000]}) 03:51:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa0008000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00001901021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000000000100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2112.705741] binder: 30419:30421 transaction failed 29189/-22, size 0-8 line 2855 [ 2112.744535] binder: 30419:30421 transaction failed 29189/-22, size 0-8 line 2855 03:51:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x10000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x7, 0x4, 0x101, 0xfffffffffffffffd, 0x1, 0x3ff, 0x10000, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @multicast2}}, 0x6, 0x5, 0x8, 0x1000, 0x40}, 0x98) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000070e000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7a00, 0x800020, &(0x7f0000009000)}) 03:51:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa0040000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2112.947904] binder: 30439:30440 transaction failed 29189/-22, size 0-8 line 2855 03:51:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2000000}]}) 03:51:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000da01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = getuid() setuid(r1) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x2e9) 03:51:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000007fffffffefff00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x74, 0x800020, &(0x7f0000009000)}) 03:51:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3f00]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2113.532303] kauditd_printk_skb: 2 callbacks suppressed [ 2113.532320] audit: type=1326 audit(2000001106.248:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30426 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003700021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2113.607526] binder: 30456:30457 transaction failed 29189/-22, size 0-8 line 2855 [ 2113.632709] audit: type=1326 audit(2000001106.348:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30461 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x3, 0x800020, &(0x7f0000009000)}) 03:51:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x10000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x4, 0x3, 0x7f57515d}}, 0x28) 03:51:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000d701021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe00]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2114.420033] audit: type=1326 audit(2000001107.138:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30461 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000}]}) 03:51:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x500000000000000, 0x800020, &(0x7f0000009000)}) 03:51:47 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000004a0ffffffff00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007f01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x600]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00004001021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x1200000000000000, 0x800020, &(0x7f0000009000)}) 03:51:47 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2114.555734] audit: type=1326 audit(2000001107.278:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30499 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/53, 0x35) 03:51:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffff91]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x700000000000000, 0x800020, &(0x7f0000009000)}) 03:51:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x500}]}) 03:51:48 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000e07000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006f00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x20000000000, 0x10002) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x8) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x10100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x49a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5aba5020}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x79feaef1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6be}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$FUSE_IOCTL(r0, &(0x7f0000000380)={0x20, 0x0, 0x5, {0x4, 0x4, 0xc9, 0xffff}}, 0x20) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) 03:51:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x200000000000000, 0x800020, &(0x7f0000009000)}) 03:51:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x5000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2115.346954] audit: type=1326 audit(2000001108.068:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30499 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xa0020000, 0x800020, &(0x7f0000009000)}) 03:51:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00004e00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:48 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000001a0ffffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2115.515285] audit: type=1326 audit(2000001108.238:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30553 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x480000, 0x0) 03:51:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x8000a0, 0x800020, &(0x7f0000009000)}) 03:51:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4c}]}) 03:51:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000b200021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x50000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r3, 0x2, 0x9}, 0x8) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) 03:51:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x500, 0x800020, &(0x7f0000009000)}) 03:51:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000a0008000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2116.298491] audit: type=1326 audit(2000001109.018:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30553 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x16) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz1\x00') writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2116.390374] binder_transaction: 10 callbacks suppressed [ 2116.390393] binder: 30582:30592 transaction failed 29189/-22, size 0-8 line 2855 [ 2116.405136] audit: type=1326 audit(2000001109.128:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30583 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000b701021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2116.477809] binder: 30582:30592 transaction failed 29189/-22, size 0-8 line 2855 03:51:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6c00, 0x800020, &(0x7f0000009000)}) 03:51:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2116.701060] binder: 30617:30620 transaction failed 29189/-22, size 0-8 line 2855 [ 2117.190494] audit: type=1326 audit(2000001109.908:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30583 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6c00000000000000}]}) 03:51:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = semget$private(0x0, 0x2, 0x40) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000080)=""/141) 03:51:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000b301021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfe80000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000002a0ffffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7400, 0x800020, &(0x7f0000009000)}) [ 2117.276943] audit: type=1326 audit(2000001109.998:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30628 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2117.307803] binder: 30633:30639 transaction failed 29189/-22, size 0-8 line 2855 03:51:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000e100021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x3f00, 0x800020, &(0x7f0000009000)}) 03:51:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200200, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000580)={0x2, 0xf844, 0x3ff, 0xc5, &(0x7f00000003c0)=""/197, 0x6c, &(0x7f00000004c0)=""/108, 0x18, &(0x7f0000000540)=""/24}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@loopback, 0x77, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000001400000000000000018000008b0000000180ffff04000000"]) prctl$seccomp(0x16, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1, 0x81, 0x7ffe, 0x5}, {0x3, 0x101, 0x1, 0x6000000000}]}) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x100000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000000000002", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2117.511613] binder: 30654:30656 transaction failed 29189/-22, size 0-8 line 2855 03:51:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x7, 0x800020, &(0x7f0000009000)}) 03:51:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000f00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa000000}]}) 03:51:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x58000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 03:51:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000002a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x200000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2118.164057] binder: 30676:30678 transaction failed 29189/-22, size 0-8 line 2855 03:51:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00P`\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x2) r2 = getpgrp(0x0) process_vm_readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000200)=""/217, 0xd9}], 0x3, &(0x7f0000001400)=[{&(0x7f0000001440)=""/173, 0xad}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x78, 0x100, 0xc5, 0x221}, &(0x7f0000000380)=0x98) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001680)={'sit0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000015c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x7, 0x100000001}, &(0x7f00000003c0)=0x90) 03:51:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003b00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2118.209639] binder: 30676:30678 transaction failed 29189/-22, size 0-8 line 2855 03:51:51 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000ffefffffff7f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0xffffffffa0008000, 0x800020, &(0x7f0000009000)}) 03:51:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x20000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x9) fanotify_init(0x31, 0x1000) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000ac0)="b2e7334ebae470dc88895d8641d8e86f", 0x10) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/41, 0x29}], 0x3, 0x0, 0x0, 0x8}, 0x9}, {{&(0x7f0000000340)=@pptp, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/46, 0x2e}], 0x1, &(0x7f0000000440)=""/180, 0xb4, 0x1f}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)=""/83, 0x53}, {&(0x7f0000000580)=""/147, 0x93}], 0x2, &(0x7f0000000680)=""/187, 0xbb, 0x4}, 0x9}, {{&(0x7f0000000740)=@in6, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/24, 0x18}, {&(0x7f0000000800)=""/119, 0x77}], 0x2, &(0x7f00000008c0)=""/8, 0x8, 0x22}}], 0x4, 0x42, &(0x7f0000000a40)={r2, r3+10000000}) 03:51:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000d900021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2118.435223] binder: 30704:30705 transaction failed 29189/-22, size 0-8 line 2855 03:51:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x6000000}]}) 03:51:51 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000008000a0ffffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x6, 0x800020, &(0x7f0000009000)}) 03:51:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00001801021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x10]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2118.954541] kauditd_printk_skb: 2 callbacks suppressed [ 2118.954556] audit: type=1326 audit(2000001111.678:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30673 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2119.034810] binder: 30724:30732 transaction failed 29189/-22, size 0-8 line 2855 03:51:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x2000000, 0x800020, &(0x7f0000009000)}) 03:51:51 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000000009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008b00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2119.109105] audit: type=1326 audit(2000001111.828:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30735 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x10000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:51 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x5, 0x0, 0x7, r1}) r2 = dup3(r0, r0, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) write$P9_RREADDIR(r2, &(0x7f0000000340)={0x87, 0x29, 0x2, {0x7, [{{0x40, 0x3, 0x7}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x4}, 0x1ff, 0xffff, 0x7, './file0'}, {{0x0, 0x3}, 0x40, 0x529a3395, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x1, 0xb2, 0x7, './file0'}]}}, 0x87) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="dd00000080e156f54c46253f4b0039dd404d63c74e2b90525a3913f7a0db38209ee26f84d15acf8cea2a8c66cac58de213af149f010003ac124fae4b1b25fea9cd6f20332fc460ac19e0fea3d4fa4f4d869427edfad84d3622f2de840e575b920a9d335710f263c365191170aad499642d9f2ae5ba382807917888f1751dbecaf4d444d065d6fde066b1a16d4689fe0eb18fd5bce19bb8ee89da25430e69601beed2e57e6e9de9514476333a7b06cadafad6d9f95c7d9a300e178a60e73a02f9a2427a653c3366aed56a7243a84281df142bc703ed31ce5156d4e4fcf91645625f"], &(0x7f0000000100)=0xe5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r3, 0x8000, 0x1, [0x5]}, &(0x7f0000000300)=0xa) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2119.205388] binder: 30744:30746 transaction failed 29189/-22, size 0-8 line 2855 03:51:52 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x5}]}) 03:51:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4a0, 0x800020, &(0x7f0000009000)}) 03:51:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000a201021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:52 executing program 0: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="35d68f0fd82a9ce9ba74a970e53d743aaca78de10927b440ee76b9977510a2bf2272778354f37d6ef9f4b473144ebe4c477b003b32891781c744b27345c96b3cc619f859b1b098dca1e6cc3f472dd6b4447d5b4ebca8d567fa4f12886f16dab1e9fbd11e6e5436d36128f00cfa2feb9f1fb50cd888ec343d11d09608fb7c0143532e6b6e75294580a11b2a13cdd0befff2debf9e67cf09e4d4202755d553bac835dd42c91f6ff7bd6057f306f9ea52e0a0b771897e845d04ffcd164608b44df8", 0xc0}], 0x1, &(0x7f00000002c0)=[{0x78, 0x84, 0x3, "5f5431db72cd47e8776c9749246fb5670f71a88a9689a5b2b867464604ad621f81e67b2fd44a6754b96a01c738b6da6a3761f5725aa6bf90219dd32f2dbcffb6d776ebf3524073c266e91cffac208dbae08f120e9eda46b7c6c360dd487fef4188eb2e"}, {0x70, 0x1ff, 0x101, "d8bc5bf80bd6f71325cf6f501fd7b75333cc57b4ecded7204e812ee55d007ac334a18f3e53344818256f9809679ce85750dcaa8b3d4b84ab889d813693634fa3716c7f33e1d3db751d028f67a47b05f49347a6b2175dd03eed14"}], 0xe8, 0x800}, 0x20004000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000003c0)={0x5, 0x70, 0x868, 0x101, 0xfffffffeffffffff, 0x3, 0x0, 0x7ff, 0x40003, 0x1, 0x100000000, 0x7, 0xfffffffffffffffc, 0xfffffffffffff54e, 0x9, 0x10000, 0x5, 0x83, 0x800, 0x101, 0x20, 0x1ff, 0x0, 0xe886, 0x6, 0x6, 0x200, 0x5, 0x3b98, 0x0, 0x1, 0x9, 0xf, 0x7ff, 0x101, 0x40, 0x9, 0x84b7, 0x0, 0x400080, 0x1, @perf_config_ext={0x6, 0x8}, 0x2800, 0x101, 0x5, 0x5, 0xfab, 0xffff, 0x9}) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:52 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000a00200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa0010000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2119.858089] audit: type=1326 audit(2000001112.578:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30735 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ac01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:52 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x4c00, 0x800020, &(0x7f0000009000)}) [ 2120.003135] audit: type=1326 audit(2000001112.718:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30780 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:52 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x102, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$netlink(0x10, 0x3, 0xe) writev(r0, &(0x7f0000000100), 0x10000026) 03:51:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfeffffff]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00005e01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xfeffffff}]}) 03:51:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800025, &(0x7f0000009000)}) 03:51:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ba01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2120.758132] audit: type=1326 audit(2000001113.478:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30780 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00pP\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020}) [ 2120.855361] binder: undelivered TRANSACTION_ERROR: 29189 [ 2120.862113] audit: type=1326 audit(2000001113.578:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30822 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007101021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffffa0040000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000a00100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2121.045007] binder: undelivered TRANSACTION_ERROR: 29189 [ 2121.053876] binder: undelivered TRANSACTION_ERROR: 29189 03:51:54 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in6, &(0x7f0000000100)=0x80) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xa0040000}]}) 03:51:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000d901021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:54 executing program 5: socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @local, 0x2}, 0x1c) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000001000000000000000000000000000ffffffffffffffdd000000000000080000000000000078bd034fbb9e2a1b6effa2164ea1788ff141b72a7bf2ae4aaa9c0000b8dec07b9d540d", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="0000000000000200"]], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:54 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000070e000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfe800000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2121.656506] audit: type=1326 audit(2000001114.378:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30822 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:54 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000a00400", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2121.762967] audit: type=1326 audit(2000001114.478:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30866 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2121.787263] binder_transaction: 6 callbacks suppressed [ 2121.787281] binder: 30861:30868 transaction failed 29189/-22, size 56831-8 line 2855 03:51:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000380)=""/167) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000440)=0x4, &(0x7f0000000480)=0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) recvfrom$inet(r1, &(0x7f00000000c0)=""/86, 0x56, 0x100, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000240)="28d84a380b26004f0bcb6b9e2f6a32722934dca20dc7a1bc7a01ac12e2b0a3d5d38ce8c421b85f42e413c2d905bf2aeb2a24be455e5af2d65cb8a60dc1628f3057f39defaae06ec00db59c6725d573803da203c4b14debafbf839923724945412b8055b6ded7d1e86ac8e2e2b17cc2b0810d2d81bb2ec198194a0d175a3625e0f5f236107d8109341afa7ef3e815063893c38e07395ff96818e02be2bc617a18d79b94da21be5c24c7021236458c7765b29e8f0bf4c5739b33dc25aa0b2fc7fd3eedb72f1316d901d8aea7b7ef3db8ca5b488f2ae1df8643602718d41c926df121d66adc8d6b83b20edda127412f419faed8ed85e152e1e070", 0xf9) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x40050, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@fscache='fscache'}, {@noextend='noextend'}, {@afid={'afid', 0x3d, 0xfff}}, {@nodevmap='nodevmap'}], [{@measure='measure'}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 03:51:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008b01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2121.899474] binder: undelivered TRANSACTION_ERROR: 29189 03:51:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:54 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x7f, 0x2000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0xc) recvmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/175, 0xaf}], 0x5, &(0x7f0000000480)=""/16, 0x10, 0x2}, 0x40010042) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x3, 0x5, 0xff, 0x7, 'syz0\x00', 0x8}) 03:51:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000b00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2122.039745] binder: 30889:30890 transaction failed 29189/-22, size 0-8 line 2855 [ 2122.056123] binder: 30889:30890 transaction failed 29189/-22, size 0-8 line 2855 [ 2122.126637] binder: undelivered TRANSACTION_ERROR: 29189 [ 2122.132233] binder: undelivered TRANSACTION_ERROR: 29189 03:51:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4000000}]}) 03:51:55 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)={{0x10b, 0xfffffffffffffff9, 0x1ec6, 0x217, 0xd6, 0x9, 0x124, 0x3}, "337f2e3dc8ca7b03737d05cd9d108a414501fe23032e2359632aedcb", [[], [], [], [], []]}, 0x53c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x7) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000004a0ffffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00W\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa0020000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006b00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2122.561233] audit: type=1326 audit(2000001115.278:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30866 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2122.648003] binder: 30914:30916 transaction failed 29189/-22, size 0-8 line 2855 [ 2122.674639] audit: type=1326 audit(2000001115.398:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30909 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000007fffffffefff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000e701021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2122.683684] binder: undelivered TRANSACTION_ERROR: 29189 03:51:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x213, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x1}], 0x0, 0x800020, &(0x7f0000000180)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23}, 0x10) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 03:51:55 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x9000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000000000001", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2122.865067] binder: 30930:30931 Acquire 1 refcount change on invalid ref 1 ret -22 [ 2122.905350] binder: 30930:30931 unknown command 0 [ 2122.928446] binder: 30930:30931 ioctl c0306201 200000c0 returned -22 [ 2122.954145] binder: 30930:30935 Acquire 1 refcount change on invalid ref 1 ret -22 [ 2122.978243] binder: 30930:30935 unknown command 0 [ 2122.984289] binder: 30930:30935 ioctl c0306201 200000c0 returned -22 [ 2123.005820] binder: BINDER_SET_CONTEXT_MGR already set [ 2123.012234] binder: 30930:30931 ioctl 40046207 0 returned -16 03:51:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000200)={0x0, @aes128, 0x0, "9f821cb522602d76"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) pkey_alloc(0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0xfffffffffffffe34, 0x80008) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000240)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mq_timedsend(r4, &(0x7f00000004c0)="cefb335ddf197b48327c934f3b8cc640cb513141b4a573dc200e5ed4c52b2b68c27cc708c0d85cba5c66ffcaf8644b1cabd929e0b39a139e6ac84bc669e93087f149d5331a219bab0d0d3408d3dd678e87ba97afcf342ebcede10f4c967422e85e68e82719c4d4caa3db42a2d5ad141f1ec75c8a54605cb09f5fe08a2897626249db18d1880274cd7e1cf5f3bc645569014a1a2e0064aff7f89a41bc9af6575542b25413dcc60be31aa648fee0d66714", 0xb0, 0xffffffffffffffff, &(0x7f0000000380)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="f26d2e64f2ab0f0056beea00003200ba4200b80000ef6664f30f0db25c220f080fc75bf70f01cab8a7000f00d8", 0x2d}], 0x1, 0x0, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x74}]}) 03:51:56 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4a, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYRES32], 0xd6, 0x800020, &(0x7f0000000180)="71efa08f54c42dc80c99b62cd005cdd5abb04b79705a838cd4747747e2945819a391fc363415df1eb746000f89f60f4dea8a191e15a12c7db62cd0caa048070f14fb78719d4cbce7e76a7f234bee46d94d53f94ca4ff27994342674d9819624508a99f25cf234f8ed176037769351160f4f58ece414297ce9bddeb253113586c949f09aa7d2a04f8e48a88ce893a4f4da4b9044054cc5e045530d6c4a1ff4f5e72e931ba547d0c81f6ee2b7d4182a78244a01c9d44cef496230982c61a21b3503fb996a6863fc2c4c463af43fe3b4e306a557bfde656"}) 03:51:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa00]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000bf01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2123.500894] binder: 30953:30954 transaction failed 29189/-22, size 0-8 line 2855 03:51:56 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000001a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000210dcb93b4fd00000000000001000000000000000000ea4506f9ff000000000000000000000000278ab66548000620d233a1f69810c69dd85cad8520feb251275c3b492bd477dffc0b55d0963ce99886c87f70ba5fdef629c6dcc354cbfe18f07250cfe7303a963381aedca3525265d0c4728dcdd612e0d66c88e32c87b0925229daf0d30464c9a05a3bc21baac6a36fde75f95cdc7a", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00004c01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2123.672668] binder: 30967:30970 got transaction to invalid handle 03:51:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1a0]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:56 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000004a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2123.716261] binder: 30967:30970 transaction failed 29201/-22, size 0-20378032999432192 line 2855 03:51:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008901021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2123.834021] binder: 30967:30984 got transaction to invalid handle [ 2123.843389] binder: 30967:30984 transaction failed 29201/-22, size 0-20378032999432192 line 2855 [ 2123.878943] binder: undelivered TRANSACTION_ERROR: 29201 [ 2123.896232] binder: undelivered TRANSACTION_ERROR: 29201 03:51:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000fb5ff0), 0x0) 03:51:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffff00000000}]}) 03:51:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x8000a0]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000f701021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:57 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:57 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8000, 0x48000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)="277d776c616e305c706f7369785f61636c5f616363657373eb266d696d655f7479706562646576657468316d696d655f7479706500"}, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') dup2(r1, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="106308400300000000000000031a35ac884198c97c0b01d64dfaecac8ed2cbf16c9827a5901a0bda7fb741b507b96a404093973e72df078810e82597532d976ce4f66b7fad4184f857f1605aee32bb568ee85d0bf7cf1dbe48fc7f322aaaf1b60e83511a9a35f929dd161ec90c47f5b68b3f292c973a896277c47bed227a6bcdd7f2eeec7567ec76ea8af5d54d187fccf2c53242e5"], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:57 executing program 0: llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/121, 0x79) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2124.341610] kauditd_printk_skb: 2 callbacks suppressed [ 2124.341636] audit: type=1326 audit(2000001117.058:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30960 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:57 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x30202, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:57 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2124.455837] audit: type=1326 audit(2000001117.178:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31010 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200000) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000020c0)=@assoc_value={0x0}, &(0x7f0000002100)=0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001900)={0x3, r1}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000002140)={0x0, 0x8, 0x1, [0x4]}, &(0x7f0000002180)=0xa) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000003400)={0x0}, &(0x7f0000003440)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000003480)={0x0, 0x9}, &(0x7f00000034c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000004740)={0x2, 0x1, 0xffffffffffffffc0, 0x3, 0x0}, &(0x7f0000004780)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000047c0)={0x0, 0xbe, "a0d319cfb7dd2d578df27107f5938770d922892ab2cc50dfa574aac384a3cd39c0c6b9145f85182415e8d09d3eed055593617fe76cccf7454577fd50b501e13da913e1bf0248d1b7e3d5941e6851faf5a215f0f4210b268a1eed7ebcd7b0e17f5c4de4b255dc93f7f70555a044436d2d66ae8324f40abf125c0f9ae35bd7844c5f0c8581305d5c74bd21991f71d1decb5de01cb3202e0c431bebd4fd4868e2dd8f1e5237941a74e3dc7fc007ee094f4e2a49ba8ed0723a718422d1fe40cc"}, &(0x7f00000048c0)=0xc6) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000004bc0)={0x0}, &(0x7f0000004c00)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000004c40)={0x0, 0xb8, "6c7c66fa60162990a97f91a9b4a2e747c599463fab6901baab1f9da5428c46993081c2f613b972920afdc60156858ce3953c10197d770b97f31fb5e8b8de316d3ec6ae60c74afcef9144a70617ace7b3b78cbd1d55595c031a4b13adb73878c8a6b77ffac82f2e9317e4b3ad4a53c9a76bd0ea6f93f007872f661c3874c6a034f2d5c89fdaae53e9fde5b994b63161e8327e2e4d6d6fd1276f54d410e23c3651fe32235fdefde41a8865d76f82846cb00df8c03a1c86d26b"}, &(0x7f0000004d00)=0xc0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000004d40)={0x0, 0x3, 0x3, [0x276e77c3, 0xffffffff, 0x4]}, &(0x7f0000004d80)=0xe) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000005480)={0x0, 0x3}, &(0x7f00000054c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000005500)={0x0, @in={{0x2, 0x4e21, @rand_addr}}, 0x40, 0x4}, &(0x7f00000055c0)=0x90) write$P9_RFSYNC(r1, &(0x7f0000005940)={0x7, 0x33, 0x2}, 0x7) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000005600)={0x0, 0x3f, 0x1, 0x8000, 0x8, 0x6}, &(0x7f0000005640)=0x14) sendmmsg$inet_sctp(r1, &(0x7f0000005780)=[{&(0x7f0000000240)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000280)="bdde8db6c147413b791a28de81d69a93a73517f82f14fdc66ecf9ca3bf5990c7995f883e5f775cdae871cb77968055740c22b775198318ecf896fc7b6d7d446c2bf6b4972a9a7f256dbef4cf0d2e7fb0ba9383cf9d3bd36576f32c2d7028f42ee9eba9254a228efefc60c3d64dcf8db3a54b65623c117b5f4763fd334c5186d00fe62e143ae8d7aa7ba20392b2adfbd3edbc053cc44a05153d77578e74c1c4e94b037ed67e6299b6e151469b28d4f598ca03f0364ca94e16a66433ed79c088ba3a0b86dbd18ae19cf72a9447c0114b66efe08ef5601f6e398c84703bb5a134afc30bd355a6039c46650ef4509b5a485e00d0a68262a3ef6221067d6060d4a27c465dcbd3ed3ea3d677e46957fe67fdfcb2820ab91f84c4084439f28498dd3c995e9f996214dbee27a6216aaf412a21dc8d0348b8c651c0310d03926723a38e8a7ce0ff1e03a03eaf9bc7ca2b385b5e53b8c16ad77f8902684d8683c899b00ac152904097efbb022fefca5388dd1088d5b811830b8793fea6d0856238a4cceb82a661afbbcc3d5b958d48c7ad2a45ecc78caadc856a7d9a2bbd57680e75cd5343d2ce936d518e1678537b56d63f7fa8eea58e42684f6f8745f19adf7ecc0c3025ee056a37ec34ce2336c922b21570e6f554a985c98ce9e5ec553fdbe507ac78672af6d000bd489b891b9f074654d7920f4b5a2cd3d22a65be4f376c4e42c0a74781980cc58f344754720c511a8fb7e4c037d7c89939dce2e28d9bebf0ab4b591de0dd399bc4a710db7b67a6518663fa6424011e846c7b4f7e4849f89f1250ae48d1f3b51dacf515e796f21b358c0c9ab0c9898d7270a9d76e7480ea111bd63a1c3245782c1fc0c47b827564059f3444b1f66a8870aced8271ff8c6d13e16ed72134404fe382e46de7179bfdf8b9f941f8a45dd6c83ee52a532c8ac3352a6fb118bd40410720e9a207eab227753df57d0ed6559e30a824f38c6c80a8c6ff33ad91d94eb38c8ade6d84a5b5712d4d5abfd5705368a6486794168634fc6e049b40f5db82bdbfb16394618f59d28d92028066243033944bc25dd801722e7c0718c1dd13ca31ab366be1460f96d295233759724a71cf596edd4beeb8a5facbdb17721eccbeb399231a79d90d22e2ab02f6b148fe6ed29aba33e19c60eba35cf3ba13be6ff756c48808c2b48c3d9a93fa5baeaf18787518c19c5837ed13537c092e88e10d945c7bb0147f4f53ddd8e97818d2ec9e3dff97b0e4c908b574fafde2dccea25190cc9d4b9b142892693cae3e034a65257df9163443167beaaa03209c4784bed8a47bda697c94c51bf6b6fc9189c369d92718c0902352f08e6e7bc12647b6d09e17ed8decab54e257bf0885d7870866a35d5a3b1f88843e0a08ed16f939dd66361f0f34e4a4fd225e4ee127b4f163cc9fb708273c4c8f52b9f867485ae6465234b89d8422623ab15357496dfcaf06666b5532811abdb0d2e1ef149fa2535d4778b5a9bb8e3d0182b8da580f3bc10cc6c8518840830807cf19e808ea587b5edc3fce6f8fe356bcfc3c6731f73485ca5f189ccb29eeedc711ecf98cdc54a2a22f48253d044d09f1ca433e2ee233eeefc0b9d62d965792f60dea3fce8334d136b2cad8d8c33fc0c045705bc68060dd40f2a3701539199a195d718b094effed4b1c58db9ba60b4a2aac6d06df8f2c37f74d476616ec8341eb09460507d1d2cba5f6af52533881549ed465f3731af56bf9ad3a27879a7a6e1c536ec4d3eaf4afa93da7f340dc1f8d6f9cda0701a60f3b3282c30de84d190ef829ad22840c976509200de0bf2811df547a04e06da43dd8f51ca8d2e846a915efa632fc1e48a1a941e0b51ee1bd5f88425688531c62fa6129cd9be05bf123225387b6b5495cab7cb6e74985103aa4176a9628eb759aedd8e1820c7363bb52412fbe6e6be3390ff563dd2949470195d034d7a8bf8eaf14ae14eda1177fabe298f7a9703d090afaa60dbb7f6d6f51b1d16c042fcdead07ae51a35219d7392f7215d203113b7ba3b749cb0eafa349d41db4fa69a0b1e03a9ae9c6494cef35c42648217c0c082e9beb51805e2a4e1c60003903fe61eee7feaa4b84333aeea031c4a5c544960f056f6c30d4b3e07c5d2358e97afbdaa7311ed3f14cfbba109751f35085a47dd279eee94fa0a263fe752caaed3131f631e16955acfe34826a14f4b63d0e2e980a194ecf4a993339560d5f2fdf846663a82f5d0aa10e43d0f5a0146e4c64c5f7569169cd7c85fedaa153f962045b2d698ddfd4e0e49569f51ad4d86346a238e9033d081332b163aaaf7851e8cf38315b8d9dfe9155ccf325cca61bf45a215c6bd5e300371f68da24ad30de8e31aaf84c84d45cb066cd50c07adf25ab8a085ec38b8434bd9c15a04912d56e9b41d9a88630aeb4005d3b54db623238a09ed3b9f27e873a54cdde489d1d34165332ec555efa3b6d8ad76d1dc0f3b3959f7107b7fb5a222512156821c0c7229c4dc8fccaf10e0513437b6b1bb5340de6d4eeb083ac6f972ff395c6caa564715c04ae27661276c54d5e6e142703d2b6a93b6b71a182735f1e13b517f359c5e22a4ea3835d55d9a97ffe6a1e3bbbb2fda440e51670a3a2576a47ae8b8d87eec798eb680a053601c7951ce5a8b6dd5f82e4d8e4af2d55ba47463572f57375e7abf2ddbae6f04fc3570a97650d3e823f1a19b0d33257f33007b892af612ee141a2ae9019c2a68e22058922c3e926dfd3cf6303c6bd165ce24f8c182eeb55b1d42510ac44ec97061d2a51c2c5ccecd674c7f9718728c056b9c19e1a3e3fdff94b7b8f3bee095fa2ed7fc21ba397ffc087db5d95ddd9f035ff99d5ce668f53e4b60ec0ac5fb40486a851d086b5678208f9f6a4a21fdc0e067ca1bc5d1e8a1abf0f082b9bdf5861459caa3209b9df03b9eb38a794261a236e4112b0aedecc3e652042b6d24f59e3807a62095997f852d209f7b6c003e8196c6b4915a0d31e0eb818e6569dbbe0e127d4c12b5b849a359e1f40caf9711c87d7bfe0a0d4bd980ca5428c2dd21a16a56f4713acf333b777dd8aec622fdbd98efa6912164520a846948f9e49f93539a600129d1259a0f34214816600eb04efba0d2f9bc305a8c2c3c823dd21775ee426942cb72070ad98e07096ac88575e7dd59a43254d947429779c5ec6b0c8b9b8844df4b862f3e721659caf677fe96d4a753595fda6e1748dbc9cf166598f40d626750a4c4a3c9bc75fdeb3ebba4ab4be77800add1f6cac65b094de6881e68bb8523ea530a2099873557cf147a8ba7f994aefccc70effe8026c20edf19bda808b791d99be9d881bfc8d3218b5d227e9f7453db2af841ec1c9b91a0496458fccdee927617e9c911beed332c5ffbb355e3f8d50bf04b4c1125f4faa0f7b556910d72efead0d3f1ef8d4abef6bfbb79943bba918ce5527620b27113dcfa52b15a3393f58a3d90080635c63f99233df3f0fb5ed48578ce4c0d52e8b30ec2a4178f50a25cbd4b4b8a8ae6fa0235b18a606268c39d0eb62fca376110ed82c898a334e4ecd98e15dbca2a1b2bba6b67887840b01bbc455ad5b12550612a74f4e0799bc13c8a73b2f107ada9b5d905c647a204c672308c496647927f18923f3d497ff374bc494ba6c9fe529993c256cd7ea191f4c1f1c00434ae039686c90f8808396c3cf4c285f9ee2b287d7c2f40c4b9769b470b168a76f7d04176fd14340e96231ebee7dfd9f9326398643d2b300a948655bcae555c91ddbab1b26ade23ae19b8a8dcf8519faf10e7e9026192ad2a71f7b83343560015dbc1ddb2749cc2212de06e3374c138ac7aecf5a5e091b3576753efdcc959aa1b989e3ae62147cdfe8c19b1ff0ddc20982d8796b1acc9a71a713b2857cd1d5ac85897640bb14f2af88eac02ccbfb70e48866205aedfe89b48eb9561ccd3926ab07a2ed5af8474b44f061cccda101de5177f70c05a71a940d50290c796620e832fe34c94d9e63816d7debd90462fb5fcff517020208621fd08c3be67d0ce607c9f801041ea1259afc1d9093d1939a03c4633722119f050bf86879f0d14904d216067067304464c46a55cae84feae5bbb4e1ac18cb774e952efb3426e0537e88caaeffd29f36d8a11b828fc42dae098a867b27641e60a3af29e3ac0b13d8af51e109e0e6710c56f72c6e819ff6fc41df1eaee5c80a58696282044ab7fe38650ec30ee6709913780da17af6321de6e3f7093e4a95c271a4da6c9b2e1fda9d519cc6ce43fad8aab4dc15c7103489b46b8ee2eb94724aec9a70ee67123e7bc5e4b9c61bea61577c2bbe3eef946c9f4c25ecffbb881649bee1e97f242f7172baf9595b4638dc3a90d7f6be5ec91e069f21f5aceba6e338edb1ceaa138402554e33d6b2cc988d2300e08ea95acf7a253aa5c76576aaa2c6da57ec0373a19b958d57ffa12f759c282446445a00022604a9e0300136814b028dd4c138d486174f72f3ba52195ad40a449b4279b6ea6b72a4f828e55a94296bdb5c3588f59b9f103cba09cdd16b60cc8af1ac2fbd8a7fda5000fee0c3bc78ce44005332b3d84610a864f94e9ba2fd37eb9baa5bf43626967c260491e9486cc46bc678b6f9e0420cf34cbd14e4d955cc6053dfcc0825bbdf5fb75c9dc53cd420e1d5977325429368cf147cdc9f096fa994b8cc93bc6e0575c7e96f7174eb44cf50876124b42e922924e6c796799f26785e2bc1c240bf3f62507d02dc23bfa3e6f73b49add2115e9ae874de7b2651e79e4de0514794d3a0de50bf286f18ecf37b119aa51d52a0ec476e5150df0863f59b1e159cec65306f4ca75bb967a82b8b3342c85394830c7b9c2592232e360fced9761f324f24bd8a7a3ac2b3af692b6cec7c546bcea5ad677858bcb220e66ea2ca9166485319896d32ba408e7d05038d0fc186fa04a9ae6bb8df3226f5512aecbd23186ab90d9c2821066429eafab46e647680caa5801b168a14f4f0b381bbe7a39d1cd20b46ce0df0067dc3384c48f7c6700f8dc3680349847ea198568ebbbdd077e8f1f604c5399fbaae331bb25703c803073ac0de645c3deac6ac7e57f58458476e38ec2ae63c791d2beff5e11f61a81d28986ce05089dcb3fd33c1102e884eabc34110be069b03066767ca1f98acd438becec859c35f76b30a8544598a346fa6dfd984a1bf30287d5b510c571eada48cf794b10bd6b31a35f0a6ffa074561c0b4976a26da1131ace2b3f1ed51938bc9b34b945c33702c8be11857037f65e6dccfb0dc69e2fd2921e201238db99257d127d69cbf4b52efa8aa9e1ade2913bb14615e10a06cfa305a90f336d86ac3d7a91f4514f3f14eb9b14b0c63345cebeb30fb8fa719feb8dcb724dea4b47bb27b30fd2a5d7a6e5de3aaa104ba4a3ad1572c81c3f3b4de7eda9957d825c02f77a01d0cb1bb5de4ad5e1f4a3fcdecebf8eff53bd532ef7050ad863ef5895b6c4b9f01eb01522cc6ce33fb5da30c4df46ebd1fbfcf49082ac3fe984008b090de44f7a2433466653416f6a277343f6c37f32418cf5428b265f391750228c0a3f9e5994e708048db333e8650f34e1daab8d96fbd05ec9d5704b49039748dcdabf446b4d4754f748b3bc3bfb9fac965570ccb7769cfc7c4e1974055387d6809e6d3b617008721850677a6740e36eff1a9cc1343382bf59defc6401c646441199d97dd48e79a9aa6406826bd8a7cc3d796d4585a389c43375fcb98f265dd8503f6ea2bb2b177b87902ef763e678246ed0b9ea85b9194825cf511418988b388d40a820bce709c220d8d9a990bcdbbc72e386ffb4ad1a4", 0x1000}, {&(0x7f0000001280)="2067bec561e9ee7832d1405701e52d33a1d9f1fdd5492ea519e68571cf0bb6be0ca6cf9bd89128d1dc70d5be189c05ca3cc30be9b2c6709c4bbc4c75316394b2b9cd12a086a9ef65dd7474548b7b620ff829d23ee0c90e3ffb3e690f32ff42f63efbcf580ff3ad2ea1d25b42468bbba360a280cf0db09fcf9479307108875a54f5ebf3262f766b5fe1d90e0356bb4d61168eac86", 0x94}, {&(0x7f0000001340)="a28a19b184fd206ba0fa7a2d49c347b56293a75b13b277065b5bf8e47b6fd33c20e3f89efd7f04c081519ad39f3d6eb1292960210d8430a06ad0f823d37e3589825bd107826153225cff19972068a5d4a79ef67a82683142a84700ea3326ce67fd1e3d1f2fceacc27a88cbf49cc1f19f99fb46a46a16b9ab33e3d91909d2c51d4b641d023ce6a9fe2cec7d9016dc7afdaa579416829b2c86241cf050709f93db62a2339d57810b51e448165c62", 0xad}, {&(0x7f0000001400)="a014ebda5827ecc0796018ed5de05395da5ecc6aaf2abe6ad35fa5b0103469247a8a9a3f5411842b09c571f62dfc1c41a29d5ef21b118f94e5665e3bc1d8be407e148b1c73a56fed8f6beb8e6b5a6fe2a35306f1de587e6eb355a803aeaea175a6872368210446fb9fde81cb2198e0f26e3c026561ff4fce0b10eb3158093c7e316798cc134c", 0x86}, {&(0x7f00000014c0)="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", 0xfc}, {&(0x7f00000015c0)="2fad90bb3f09a80c13ab9709d59ba74985e839388343d403a69603a420ac22aa29c557ac1274e929a576eaf6cfaf0f87541331bceb16c6bde24815f5e11d7f617c00cddfd422b1604ef77963a4be8af73ec574e593df11c2b1d4136303724db9e96ff0a8bd2b185717d87e9930cc16bcab073a4b4db831712492cd358fdc479f699750d99fd26072bc9c8d9f72e53c0a21b872f1a609c9890c3c40c8d437bc9d65bafa27b015631a30e6afda0a159483de893d677e01580d66d37892a73ae6ec5f280005ac629a879051b0ca9e1509fba2e705d409c50ee86e7814b9273b97b482bf4bdb6d68aa25328c8178853ac48eed0c", 0xf2}, {&(0x7f00000016c0)="4d9c376b0c2545451f4c5102ab92dcd6f756e7adf132b2563b81a0", 0x1b}, {&(0x7f0000001700)="5293fd4a26219ec70aae458836b47176a492f2267757ad87e2fc9e1ad600d2c8055ab3ea90b1c9df0cfb15aaaf66d6df5254cc0834f9e4ae76f531ec8a71683225e911a1e3c8e6c38caf984f863c4f19414f37a4cfb7529e04384c8484640fa192e44547749189aa0d3d1626b0bf1e2f085ca707d22b06c173ae95fd5087cdfd9f4edf3e5f4d22c14769e8d267ac670ee3513f913e7b62bb81762250336a3afaf1b685d16b9147b528cf6bc18325096e50c44887f46018fa23989e5c7d5205a104ff2000f9f501f5e9432eaff579f6cc1dfefad60484cd3593ca91bc7895a19d9a223c3472d2d1b0", 0xe8}, {&(0x7f0000001800)="2cd03b3fae13927e5cda987b1834a60d63840097b8619afbe574fa200e3d6a6e955249cad5d5dadc58d761819e15e1e9672e9433fe8bb9dcc7e68f1f08043bb72c81b328b9ac7c17945b75a2fd7a2d4353e44a14afba689adc9b75902a5963b0241b370223712f911eb48e5ff0992857e2d46e75889c85233a4b66bbf7beb05bf7ae4abbbbb307ce6fedeb7b8079bd4d9e7bc4f0db1b1f2364e91a41fca3912df67a5155add1c200408d56c6866606f4df102d204ca1c2630243128ec5bef3c4db3aa35be3b71dcfdde84310e0e5f4e6276d8a5f55bc09f5b9ab872e", 0xdc}, {&(0x7f0000001900)}], 0xa, 0x0, 0x0, 0x48000}, {&(0x7f0000001a00)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001a40)="e77226c884e240c49609cb862e223290c94eb08557645881abbb03a2600b5a78a62d14ea8bc2ad110ebf6e8df9c3ad019d64c4358276c5aaeaad527369383a4e9edf9be9c5c74f753bc650789deaeee00e6bf36302f97310978d3f0045198d4160d4fa184f00689ae742997994558fdcf086b2be82898da7438095e4507da91f54b76f79b83f52556a9fdeb08e9746e5191a8eac9b91f8ee9df35dcb32f78012c01666f15e20b6ca887c8f67fc0451a3432fe827585dcec9b8f1d47db768e2837a96e363e308731a5336ff557b1b6046629cd86632b996b192fe0b78483f4944edc7fc64436f72ed1e1efb", 0xeb}, {&(0x7f0000001b40)="8bba68b26311c7e4b249a2fc1ffe30c59212432d2015bfdfdf57ca0b4fa0e6e538bccf39b2b8060045fc450c2b1cb9995c2c8180d481f0e9ac0da97b26c4258614c9c86b769cdfecdba834a65ecb0b4cc84e059c84c42e7877ba942ddb0169e32f066b9dda71ed4994840905580df0328b8b7a30a727d5d4ca24fea56a6cd180583b55f25256f3e87c80ce8e4ffcfe95ed473d8b8197337daa9ce4adef2a3699487ff52f94c75119c1f16a4b8846df22ca4470d2f755922bb100f2d9ab894ce51f39bf3d2efb4cd3c2b344b5c0e24b4719015daccac4c3cdeef9221ba2f899ee6a06f5aa280117", 0xe7}, {&(0x7f0000001c40)="b47b8de12aea90e8e2e8bf13b198758d6f435a022692fb05f7f4966c512eebf367db6c99965bd867d587d5c8fbe226aeec332a1678821a3fe4052e61a216a566bdd1ff2fb11306845d919cb4fb188e0abb39d007565df43fe49e4fb26a34fa8cf29e614e", 0x64}, {&(0x7f0000001cc0)="6985d2612f47671b293135879c9120f0a78fdcfd1781c3fb192262ad14d217cf167991655e542e0d2b8ed58b862f23c355da2ab6fe8c2d5576df0148ca772cf9ff696addde19a1f98a403d1b49c0ab968bac02c1040ef82894493721586371e7e75f9118598ea08ffcb8bbc32530cd02d9b06335f94f063c488d32d9f0a3d9267f0db9567dfcb56daaf6de2f5438db230a870f6a4c4e5174327ab800f276430ebebe6424e0406ac7d103922b1b7870d0aa0371945ba5a9871281cd0e8cfaa7a5bc1c5ee6f48c08f9736ff643689ee7fe1c96bdaf2d26caabde9fc1b1e17e5b0595d6c7681169", 0xe6}, {&(0x7f0000001dc0)="9cbd267b4a1159692036f8cf6e92ca2109c6b119469fa1e207e1039321dc2218abeeb9f836bd6a4e1ce8e32814f9b0bd265134b761233333d5aff1bcf6611bc524720393fa0ad49e502c4a6b5e992b5337baf1451f8b4f44d5aeaca7e7383bfef205c66d508cf5c16bdf06bdcaf4492d319f08269688f99b2830c6ef7c86b3bcc224398b3c92775384390206a22325980210c8b458bc597d0a588b0bce1a2a3aeef79eab71fc157c7260104a6578363c3846db2de92622619509a79dc9f8ed59e069e3378cbec204ed522b75f9025c321d8bd80a3e43b5407dfac6278756aa79eb2c565b721ae165f94a5a33c74fbc3d292fd98eb0b7e85c", 0xf8}, {&(0x7f0000001ec0)="72fa14c3cef941b94ad0e861fb40fec98083d17ae474299f5066dbfa3c51e04aa968e41f396564c9d8ac42a599d79d4d54c10dcf89f417884f540e2440d6f1b1de0b3aa89df15067ad3a7c631739031094d39cc7d99624a1b4a7008f312fede14684eda4e68d08c147a214cb34e3256016dce1c52e9c5354f81e36f67a93cc0f4e24", 0x82}, {&(0x7f0000001f80)="63b83b994687308878254848b3779fd61e6f390ca30ba9f1e4e9985735b04eb36d8d97f8d71b1233a8c156183923910a3b36c216d76afb7ee6503e2aeb5e03777954909bd87fb1cf63570eb696f18d369101c146a874a5229506abba1589fe14ede1b009d8401c65a4b3f4162dc39f38acc51df934999aef1f50c8", 0x7b}, {&(0x7f0000002000)="fab21b58841269d4c1706c33add1c46f473d86fa342f8ddfa71f5f64de09eb4ba37d779f4418c13685fdade53cef53eff6a00674f1", 0x35}], 0x8, &(0x7f00000021c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0xffffffff, 0x8000, 0x8, 0x4, r2}}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0x7a}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x9a, 0x9, r3}}], 0x90, 0x4000}, {&(0x7f0000002280)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000033c0)=[{&(0x7f00000022c0)="f7f06004866d5fd3b7842760e7e154683e517422830f01a413a3cc2c665eec0d091f348c3416827a2724d21bd9002a468b3c4aad505bcb8dfdd820c7295c980c4edd3a210025b69509c531be26bd30bec33058fd8e", 0x55}, {&(0x7f0000002340)="8ff64a150c4f309b2ece1e7133f9f6856e388c36577914d177cab2c927a66932c1ee50e395728bdad80c487dc00850aa825b777703f8740dc446fd69e2cd5dcf63de61b7f80c52f0592918f8a96f5ac631de1faff31d81f81aec6b85138918ed02ce6a3a5238a822984b24e9098d360e", 0x70}, {&(0x7f00000023c0)="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", 0x1000}], 0x3, &(0x7f0000003500)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x800e, 0x100000001, 0xffff, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x401, 0x1, 0xddc, 0x8, r5}}], 0x78, 0x1}, {&(0x7f0000003580)=@in6={0xa, 0x4e24, 0x1, @empty, 0x5}, 0x1c, &(0x7f0000004700)=[{&(0x7f00000035c0)="d6dd0440539832706529324edaab13b26c6b34e75daec5838fccb7a261bf5f145ab57a3f479e489eea313c0d99e9de223b56458745277dfc7aabc385304c39c9db2a788336bbf3d9890a2b4c0fe81fa9147b3ccb25eeeb2d8c7a", 0x5a}, {&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="bc97d6f0f4dc8cadece81d49113d5c67916c7f9014beb2bd34d0736f8798115e96b83d0f94ee83b77f6213ddebe5a24515fe115d394877a83a77643495227a1f3e05fb61cf76ccf8332e19b33b356fa94504006bb9dc46fe728787caa910dd85fd94a5843d60e2891d50ebb315850d096a92fc4592d47d3b541b516b4409ae3d953d457d042bb976a7e6e15e0b8d7ac59c86de08154784f9038a5738c85a6d106f83da4c6e842436e7876060fdd8c6b2", 0xb0}], 0x3, &(0x7f0000004900)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}, @sndinfo={0x20, 0x84, 0x2, {0x3b8e, 0x200, 0x2, 0x9, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x169829473526ad6a, 0x826a, 0x8, r7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xa8, 0x4010}, {&(0x7f00000049c0)=@in={0x2, 0x4e22, @rand_addr=0x80000001}, 0x10, &(0x7f0000004a80)=[{&(0x7f0000004a00)="876735efa4601032a6a61739ddca9d93de0bb182cea86a2847af244ec23d19b9081b7acd27cd09a491d9cc00c1f57cbd78ea1de308491abb30ec2a0c79dc3a2de4cd5eda93de85b312aca84a14971041affb06dcac2aecd9ee72dd73bd44d35e64c4d58cbb037336b2b118", 0x6b}], 0x1, 0x0, 0x0, 0x4000000}, {&(0x7f0000004ac0)=@in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @loopback}, 0x4}, 0x1c, &(0x7f0000004b80)=[{&(0x7f0000004b00)="e491e2062d741b98f259d4cb6c3d779b4619eab8949e50c413c8c8762a594a0bd429b5965fb55af01a415ef902faee2eb711f5a1c029999e3f617da97a83bdfe2efb625ce5d1afb2295a83ebc165b1363088554809950ec150", 0x59}], 0x1, &(0x7f0000004dc0)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x1483, 0x200, 0x8, 0x7, 0x4, 0x2, 0x9, r8}}, @init={0x18, 0x84, 0x0, {0x0, 0x4, 0x3, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x100000000}}, @sndrcv={0x30, 0x84, 0x1, {0xffffffffdfcbc3d4, 0x80000000, 0x3, 0x7, 0x7f, 0x4, 0x1, 0x4, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x5}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x3, 0x202, 0x8, 0x0, 0x0, 0x5, 0x8, r10}}, @init={0x18, 0x84, 0x0, {0xed, 0x3, 0x9, 0x7fff}}], 0x128, 0x800}, {&(0x7f0000004f00)=@in6={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c, &(0x7f0000005400)=[{&(0x7f0000004f40)="f0adbd480bba2fb918bdbb6231303002e61b59f810457d9d7fcc0b4f", 0x1c}, {&(0x7f0000004f80)="51d644b5e7ab2e1adb2b5311bbff8c4a6605a6cad930cf6c41e8a38ebb3398609aed3a135b581cb2972921914e3334c1a2d59d82a00fdb5a55e0caff2893fcd7c8f02dcf566ab630f5b4ece87b58b50e2044ae1b4a11bb1f7817932e019930d9bd57562d0121a47d798d23982bb2a2efb7f2f75091c4b1220d890578f3b69f00503b52f9", 0x84}, {&(0x7f0000005040)="f107599d05ae3247f3e48fe728df43a9add09c42dbc43e227cab3820ae885551864f7743374aade9d5ce1410040a359655108ab5cf02b5a90ff555a295d2fbf9dcf24a62f0dcc086ebb33aeefe7427e78523334a64356f9a27115b46a06fde7a9bc3cec9655882f96da99f21844313f30c85b8d12a37c92c90462c76c5d989b9f91f84c791a495745fee5290f0d5845171a621c584927ef69f04d898b0c7a03225f1cecb38cacb4d16d8a6842d321141d490c997", 0xb4}, {&(0x7f0000005100)="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", 0xfd}, {&(0x7f0000005200)="9669078663cc39ed40fbed4e84f991872d96e228f8bd3e0cc6b373d248e3b63f6a022875dadbf34983f39abd7f38922b45b983e319b0f6cf6b00ed16d07a32974ca3b104d83adeafd0f14265ab1149a3b5f4523b8d7d0412a5ae481d6e9accf3f8ccfd9df1b92c045c294c1a2625f3ede0b3699ee4f58149d62b44c56b4ee8045e359558aba5acb31a05ad99cd9f29134da6b1", 0x93}, {&(0x7f00000052c0)="b7d14cfc04486f17d1e8fc67d6d5b1830fb092493ff54b45708ecff4da5ae9da95a0bd95e28005cd8bce75c3de7c8965922352c9c023f3a9324c64526a2b30be61be1eb05a916a32285da82ec6aeae59ee9341888a4be02d9c3b0322cc7e0adb1e2dc45ac10fd94dca5618fe72e537a87b13d2e745173a18f59d004009290aa7e02dfac6b3be78bcc3be1774c359eed147f806e6373a64ed782a", 0x9a}, {&(0x7f0000005380)="b866af6044ba2a155f4112b689cb49911b94e05129f45dcfb94f9b467fae254935310b4b1f8461bad9c4020edd9fc293176954c61a05aceadc9ffb807d4629f1f1e40b224472c697c9adc51f466b1e024164e5f340", 0x55}], 0x7, &(0x7f0000005680)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x0, 0x7, r11}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x81, 0x1, 0xfffffffffffffffb, 0x400, 0x9, 0xfdc, 0x8, r12}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x201, 0x100000000, 0x0, r13}}, @dstaddrv6={0x20}, @authinfo={0x18, 0x84, 0x6, {0x401}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xf}}], 0x100, 0x8000}], 0x7, 0x40) socketpair(0x1b, 0x80004, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TCSETAW(r14, 0x5407, &(0x7f00000000c0)={0xe1, 0x7f, 0x7, 0xffffffff, 0x10001, 0x7, 0x8, 0x0, 0x3ff, 0x1}) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003301021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2124.602992] binder: 31018:31019 transaction failed 29189/-22, size 0-8 line 2855 [ 2124.649685] binder: 31018:31025 transaction failed 29189/-22, size 0-8 line 2855 03:51:57 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00\x00P`\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2124.690507] binder: undelivered TRANSACTION_ERROR: 29189 [ 2125.255476] audit: type=1326 audit(2000001117.978:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31010 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000cb01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:58 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xc00, 0x400) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x1, 0x100000000, 0x100000001, 0x1ff, 0x0, 0xfff, 0x4401, 0x0, 0x1, 0x100, 0x2, 0x7, 0x5, 0x3, 0x0, 0xffffffffffffff80, 0x7, 0x100, 0x6e65, 0x0, 0x7, 0x80000001, 0xfffffffffffffff9, 0x81, 0x1000, 0x20, 0x100, 0x200, 0x0, 0x0, 0x20, 0x24dd, 0xef, 0x3, 0x100000001, 0x8, 0x0, 0x800, 0x2, @perf_config_ext={0x80000001, 0x7}, 0x2a08, 0x5, 0x9, 0x5, 0x58f7, 0x80000001, 0x9}, r0, 0x8, r1, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}) 03:51:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 03:51:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x500]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:58 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000ffffffffa0008000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2125.385858] binder: 31049:31052 transaction failed 29189/-22, size 0-8 line 2855 03:51:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007b00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2125.415747] audit: type=1326 audit(2000001118.138:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31054 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:58 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000ffffffffa00200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:58 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x6) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x1, 0x10, "3e0741794acf78f3e55bd5b7b42b7cce5292963008989626eea34d01a2209d7dfd6b995ee49c4334ad6d984d845462ebeb6032e65ff9fcb8d46f8fbc526efa55", "37cf65ed650729eed6d8137e429a832810e96de69d6b951232e4c4ddbe5fd97f", [0x7fff, 0x2]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:58 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4280, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0xd000, 0xf001, 0x3, 0x8, 0x1c9}) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x240]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:58 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000000000000000f", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00003200021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:58 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2126.203001] audit: type=1326 audit(2000001118.918:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31054 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:51:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600000000000000}]}) 03:51:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x22, 0x7, 0x2, {{0x15, "637075736574942f2faa70707030766d6e6574302d"}}}, 0x22) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:59 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffffa0010000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:51:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000a900021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) signalfd(r0, &(0x7f0000000000)={0x7fffffff}, 0x8) 03:51:59 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2126.346954] binder_release_work: 6 callbacks suppressed [ 2126.346964] binder: undelivered TRANSACTION_ERROR: 29189 [ 2126.362515] audit: type=1326 audit(2000001119.078:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31102 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2126.371211] binder: undelivered TRANSACTION_ERROR: 29189 03:51:59 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x9, 0x2000) recvfrom$unix(r1, &(0x7f0000000600)=""/158, 0x9e, 0x10000, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x0, 0x7, 0x8, 0x8001, 'syz0\x00', 0x9}) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x30, 0xfffffffffffffff7, 0x2, 0x4, 0x0, 0x5, 0x7fffffff, 0x2}, &(0x7f00000000c0)={0x9533, 0x87, 0xfffffffffffffc00, 0xd8, 0x4, 0x6, 0x7, 0x34}, &(0x7f0000000100)={0x100000000, 0x7, 0xfffffffffffffffa, 0x7, 0x4, 0x1ff, 0x264, 0x9}, &(0x7f0000000200)={r3, r4/1000+10000}) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2fc) 03:51:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006b01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffff00000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2126.533023] binder: undelivered TRANSACTION_ERROR: 29189 [ 2126.543126] binder: undelivered TRANSACTION_ERROR: 29189 03:51:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 2126.693241] binder: undelivered TRANSACTION_ERROR: 29189 03:51:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x6c00000000000000}]}) 03:51:59 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:51:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x60a976e1, 0x101000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x7ff, 0x9, 0x4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000f201021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:51:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8cff, 0x2001) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x5, 0x8, 0x6, 0xfff, 0x6}, 0x14) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000140)) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x400, 0x0, 0x0, 0x0, @ib={0x1b, 0x64, 0x0, {"54f768669063ef755b3df8eeea8dace0"}, 0x1f, 0x6, 0x10000}, @in={0x2, 0x4e23, @rand_addr}}}, 0x118) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/36) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:51:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2127.136780] audit: type=1326 audit(2000001119.858:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31102 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:00 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000ffffffffa00100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2127.231484] binder_transaction: 9 callbacks suppressed [ 2127.231503] binder: 31137:31149 transaction failed 29189/-22, size 0-8 line 2855 [ 2127.260076] audit: type=1326 audit(2000001119.978:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31145 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000b100021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x121000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) [ 2127.309338] binder: 31137:31153 transaction failed 29189/-22, size 0-8 line 2855 [ 2127.340370] binder: undelivered TRANSACTION_ERROR: 29189 [ 2127.346163] binder: undelivered TRANSACTION_ERROR: 29189 03:52:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00006201021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1802]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc8040, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x8, 0x2, 0x3, 0x7f, 0xfffffffffffffffe, 0x1, 0x1, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x3, 0x5, 0x8001, 0xe444}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="36d2eab0bb0063404000000000000000000000000000000000080000000000000000000000ffd70687cd6c44ec528700789461000000000000d511e76717e9b3df3b6963050cd3293f09feda7a2da8c9141219c9b5f557599531dc6095894582026d76e50ce53fe53b1d201ac7e8a6926a16f9d3991515c43beb89578a8af4afa53a3fa7f597114cddef2ca3de8c39a08a4488e9a8ef30da8786c43318d797f2b99785ea0176eb932da6e3a963e1", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000002a576021acdc73ee576dd4a5f6dc0733961e1ed3b7378b11041ed4ca305837a33b88f24aca015266b8348d2a9dd75578f4a26b4b79cff03b81c07fe9ce2cdb1ce13b1b2fb7caa0e78d7ed402fe0a62ed940e46c491def23cffa1fde62366455cad35501de1a217a09112ff182b9c51562e74a1b455b8aaf649d7d28b9e0351064f1347c7b061db366cfabb92d4d52e9a1b9f0e78dea2ae8858678ff77d70213e778283240565f2bf4ba4e5175bb998b4f250d37f90bde808a0badb2cc246c259be2a41b1e779cced29dbe4dedc2cec03974b96d407b3da5ab3a5b07477e"]], 0x0, 0x800020, &(0x7f0000009000)}) [ 2127.527155] binder: 31169:31172 unknown command -1326788042 [ 2127.538145] binder: 31169:31172 ioctl c0306201 20008000 returned -22 [ 2127.547092] binder: 31169:31173 unknown command -1326788042 [ 2127.559661] binder: 31169:31173 ioctl c0306201 20008000 returned -22 03:52:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600}]}) 03:52:00 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000ffffffffa00400", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00002f01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = semget(0x3, 0x2, 0x8) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/37) 03:52:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="0001000000000000"]], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='ip6tnl0\x00') [ 2128.022819] audit: type=1326 audit(2000001120.738:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31145 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2128.110307] binder: 31184:31185 transaction failed 29189/-22, size 0-8 line 2855 [ 2128.129811] binder: 31184:31193 transaction failed 29189/-22, size 0-8 line 2855 [ 2128.153659] binder: undelivered TRANSACTION_ERROR: 29189 03:52:00 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000000000070e000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00009400021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2128.161246] binder: undelivered TRANSACTION_ERROR: 29189 [ 2128.184015] audit: type=1326 audit(2000001120.908:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31191 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x800000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="3fafcf63782e665c"]], 0x0, 0x800020, &(0x7f0000009000)}) 03:52:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x20) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000080)=""/72) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x402201, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000002c0)=""/58) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r3, 0xde4, 0x9, 0x9}, &(0x7f0000000280)=0x10) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = gettid() perf_event_open(&(0x7f0000000940)={0x3, 0x70, 0xfffffffffffffe01, 0x9, 0xffffffff, 0x100000000, 0x0, 0x8001, 0x10102, 0x8, 0x1, 0x1, 0x100000000, 0x1, 0x200000000000, 0x8, 0x5, 0x1, 0x6, 0x19, 0x200, 0xfffffffffffff40b, 0x9, 0x67, 0xffffffffffffffff, 0x7, 0x428, 0x4, 0xff, 0x3, 0x9, 0x0, 0x100, 0x1, 0x7, 0x6, 0x8000, 0x9, 0x0, 0x0, 0x7, @perf_config_ext={0xbe9b, 0x8}, 0x200, 0x537f, 0x100000000, 0x5, 0xb6, 0x83, 0xffffffff}, r5, 0x2, r1, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0xffffffffffffffff, @empty, 0x9}}, 0xff, 0x5, 0x8001, "fa37f659328278bf1011a5b8938f5014d180ab1f20a620207f2138ec1bd9da45a265a76e819152280aebd900cf494f3579379a061286f3023784b6975e9c2f4b6480e8bec0b453b582d5e5c7db75e6e8"}, 0xd8) bind$alg(r6, &(0x7f0000002640)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_elf32(r7, &(0x7f0000000000)=ANY=[], 0x2f2) recvmmsg(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000036c0)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000002240)={0x77359400}) writev(r4, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x0, 0x250, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000400), {[{{@uncond, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', 0x7}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xffffff00, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}, 0xd21, 0x99e1, 0x1ff, 0x4, 0x16e4, 0x6, 'team0\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x242}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @multicast2, @remote, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 03:52:01 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000008000a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001540)={@mcast2, 0x0}, &(0x7f0000001580)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000016c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x90, r2, 0x504, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x10) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff) keyctl$get_security(0x11, r4, &(0x7f0000000100)=""/5, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="006340400000000000000000000000000000007673440000000000e3ffffff000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 03:52:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x4a0}]}) 03:52:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000d401021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2102, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="4259fcb01f96fc363653d0696c47e056", 0x10) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x40000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:01 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:01 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00Pp\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008401021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2129.018381] binder: 31222:31225 transaction failed 29189/-22, size 0-134217728 line 2855 [ 2129.052186] binder: undelivered TRANSACTION_ERROR: 29189 03:52:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x101, 0x402000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r2, 0x80000, r0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="006340a8df0000000000000000000000000000000000000000000000e2ff00000000080000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020}) 03:52:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x40020000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2129.194827] binder: 31241:31248 unknown command -1472175360 [ 2129.209399] binder: 31241:31248 ioctl c0306201 20008000 returned -22 03:52:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00`P\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2129.252090] binder: 31241:31251 unknown command -1472175360 [ 2129.277842] binder: 31241:31251 ioctl c0306201 20008000 returned -22 03:52:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) socket$rds(0x15, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:52:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008c00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7a}]}) 03:52:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x100000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00\x00pP\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x60ee, 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x9, 0x6}, {0x549, 0x6}, 0x6, 0x0, 0x81}) r1 = socket$netlink(0x10, 0x3, 0xc) recvmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000200), 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/241, 0xf1}, {&(0x7f0000000600)=""/235, 0xeb}], 0x5, &(0x7f0000000780)=""/161, 0xa1, 0x9}, 0x40000040) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2129.818509] kauditd_printk_skb: 2 callbacks suppressed [ 2129.818525] audit: type=1326 audit(2000001122.538:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31230 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2129.896650] binder: 31268:31274 transaction failed 29189/-22, size 0-8 line 2855 [ 2129.918964] binder: 31268:31280 transaction failed 29189/-22, size 0-8 line 2855 03:52:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffd3f5, 0x200000) 03:52:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00007100021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2129.965642] audit: type=1326 audit(2000001122.688:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31281 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)) 03:52:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000008000a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x60]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2130.092126] binder: 31288:31291 transaction failed 29189/-22, size 0-8 line 2855 [ 2130.152655] binder: 31288:31291 transaction failed 29189/-22, size 0-8 line 2855 03:52:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000004a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000a901021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2130.741438] audit: type=1326 audit(2000001123.458:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31281 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa}]}) 03:52:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x18600) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x7, 0x400, 0x5, 0xffffffff, 0x0, 0xc75, 0x6c22ff9a, 0x400000000, 0x1f, 0x8, 0x7, 0x9}) 03:52:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffffa0020000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)=')security\x00', 0xfffffffffffffff8) keyctl$clear(0x7, r0) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$getown(r1, 0x9) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getpeername(r1, &(0x7f0000000300)=@ax25, &(0x7f0000000140)=0x80) getpeername(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000002c0)={0x9}, 0x0) 03:52:03 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000a00400", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00001b01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2130.839077] audit: type=1326 audit(2000001123.558:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31322 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2130.873552] binder: 31318:31319 transaction failed 29189/-22, size 0-8 line 2855 03:52:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000d01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:03 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:03 executing program 5: r0 = timerfd_create(0x0, 0x80800) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x4, 0x4000) ppoll(&(0x7f0000000040)=[{r0, 0x100}, {r1, 0x9000}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={0x400}, 0x8) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) accept$unix(r1, &(0x7f0000000380), &(0x7f0000000400)=0x6e) r3 = mq_open(&(0x7f0000000240)='/dev/usbmon#\x00', 0x80, 0x0, &(0x7f0000000280)={0x80000001, 0x1f, 0x0, 0x5, 0x200, 0x7ff, 0x6, 0x7}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x10, r3, 0x0) splice(r1, &(0x7f0000000000), r0, &(0x7f0000000140), 0x13d, 0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000002c0)=""/157) syz_open_procfs(r4, &(0x7f0000000200)='coredump_filter\x00') 03:52:03 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x280800, 0x0) connect$vsock_dgram(r0, &(0x7f0000000480)={0x28, 0x0, 0xfdd7e8ac34dc8c48, @my=0x0}, 0x10) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) accept(r0, &(0x7f00000003c0)=@sco, &(0x7f0000000440)=0x80) r1 = socket$netlink(0x10, 0x3, 0x12) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000280)=""/238, &(0x7f0000000380)=0xee) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x1) 03:52:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x70c0000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00002800021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2131.639042] audit: type=1326 audit(2000001124.358:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31322 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x4a0ffffffff}]}) 03:52:04 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000004a0ffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x800020, &(0x7f0000009000)}) r1 = socket(0xf, 0x7, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x5c50c0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000180)={0x75d}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x479, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x4, 0xb, 0x827, 0x2, 0x100000002, &(0x7f0000000000)='yam0\x00', 0x5, 0x1, 0x3f}) 03:52:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\\\x00', 0x2, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000000c0)) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00004301021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x8]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000f700021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:04 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000009300", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:52:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x10000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2131.832312] audit: type=1326 audit(2000001124.548:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31379 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000080)="b85ecb64cd719ebfc62abfb72b8cc76ecec4cef2b855137295c655748e6462caa499d29fda9cd446113739c3ffa914832be69c962f4c46335c672638e5e010fb1ed4ef2357332f39cbf81e92da31ba022adb6857c7df0cba98750daa3af75ab054afbb5bc546e50d826dd37f0e1bb5ffae7391303eb11bcb0ce948dcdff896c1947be77e2509b758b4a22586f12ca5b0", 0x90) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ae01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2131.968882] binder_release_work: 8 callbacks suppressed [ 2131.968891] binder: undelivered TRANSACTION_ERROR: 29189 [ 2131.994015] binder: undelivered TRANSACTION_ERROR: 29189 03:52:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x6, 0x801) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000240)={0x7b, 0x0, [0x3, 0x9, 0x2, 0x7fff]}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x100) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x8, 0x3, 0x7}, 0x187}}, 0x18) 03:52:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x68000000}]}) 03:52:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000001a0ffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000dc00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:05 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80) getsockname(0xffffffffffffff9c, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000200)=0x80) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340), 0x1000000000000257) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xb512, 0x8000) write$P9_RAUTH(r2, &(0x7f0000000080)={0x14, 0x67, 0x2, {0xc7, 0x3, 0x6}}, 0x14) 03:52:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x900000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2132.583490] audit: type=1326 audit(2000001125.308:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31379 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2132.678320] binder_transaction: 5 callbacks suppressed [ 2132.678335] binder: 31409:31416 transaction failed 29189/-22, size 65535-8 line 2855 [ 2132.698018] binder: 31409:31416 transaction failed 29189/-22, size 65535-8 line 2855 03:52:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000cc00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000a00100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3e5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x4200040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = memfd_create(&(0x7f00000004c0)="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", 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000003c0)) sendfile(r3, r4, &(0x7f0000000240), 0x20000102000007) fallocate(r3, 0x10, 0x200, 0x400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086610, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000001300)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000001180)=""/128, 0x80}, {&(0x7f0000001200)=""/195, 0xc3}], 0x3, &(0x7f0000000480)=""/158, 0x9e}}], 0x1, 0x0, &(0x7f0000001b80)={0x77359400}) r6 = socket$netlink(0x10, 0x3, 0xc) writev(r6, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2132.718405] audit: type=1326 audit(2000001125.438:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31420 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2132.754710] binder: undelivered TRANSACTION_ERROR: 29189 [ 2132.764096] binder: undelivered TRANSACTION_ERROR: 29189 03:52:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x8) 03:52:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3f000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ba00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000a00200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2132.936103] binder: 31437:31439 ioctl c0045516 20000000 returned -22 [ 2132.987849] EXT4-fs warning (device sda1): ext4_resize_begin:46: There are errors in the filesystem, so online resizing is not allowed [ 2133.019983] binder: 31437:31448 ioctl c0045516 20000000 returned -22 [ 2133.518052] audit: type=1326 audit(2000001126.238:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31420 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x5}]}) 03:52:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000a00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:06 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000ffffffffa00100", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x208001) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x6, 0x10001, 0x0, 0x3, 0x0, 0x3f, 0x40480, 0x8, 0x4, 0x401, 0x0, 0x100000000, 0x1863, 0x0, 0x10001, 0x2, 0x4, 0x9, 0x400, 0x5, 0x4, 0x6bd4, 0x0, 0x100, 0x3, 0x7ff, 0x800, 0x9, 0x5, 0x70, 0x5, 0x1, 0x2, 0x7, 0x6, 0x4, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000000), 0xf}, 0x8000, 0x5, 0x0, 0x6, 0xef6, 0x9, 0x9}, r1, 0xd, r2, 0x3) 03:52:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2133.610359] binder: 31456:31457 transaction failed 29189/-22, size 0-8 line 2855 [ 2133.620137] audit: type=1326 audit(2000001126.338:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31460 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:06 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2133.658912] binder: 31456:31457 transaction failed 29189/-22, size 0-8 line 2855 [ 2133.660418] binder: undelivered TRANSACTION_ERROR: 29189 [ 2133.683994] binder: undelivered TRANSACTION_ERROR: 29189 03:52:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00004f01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2133.711093] EXT4-fs warning (device sda1): ext4_resize_begin:46: There are errors in the filesystem, so online resizing is not allowed 03:52:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0x0, 0xef, 0x4, 0x4, 0x100000000}) r1 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 03:52:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:06 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000000000200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000600021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2133.909979] binder: 31482:31488 transaction failed 29189/-22, size -3126805166449388032-531899333975 line 2855 [ 2133.960074] binder: undelivered TRANSACTION_ERROR: 29189 03:52:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00Pp\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000fa01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x500000000000000}]}) 03:52:07 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x5e07, 0x3, 0x8, 0xd5, 0x0, 0x745a, 0x10001, 0xfffffffffffffffa, 0x4f5, 0x1, 0x1000000000000}, 0xb) 03:52:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x6]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2134.508264] binder: 31502:31503 transaction failed 29189/-22, size 0-8 line 2855 [ 2134.536676] binder: 31502:31503 transaction failed 29189/-22, size 0-8 line 2855 [ 2134.537922] binder: undelivered TRANSACTION_ERROR: 29189 03:52:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000fe00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2134.566576] binder: undelivered TRANSACTION_ERROR: 29189 03:52:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x218]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/82, 0x52}, {&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000240)=""/80, 0x50}], 0x5, 0x13) 03:52:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xb0, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd77}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xac}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004801}, 0x804) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x200, 0x0) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) accept4(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80, 0x800) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2134.744027] binder: 31526:31528 transaction failed 29189/-22, size 0-8 line 2855 03:52:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008500021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2134.806659] binder: 31526:31528 transaction failed 29189/-22, size 0-8 line 2855 [ 2134.851412] binder: undelivered TRANSACTION_ERROR: 29189 03:52:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00000000000000}]}) 03:52:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe00000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d6300009063084000000000000000003d1fe9b76dbc8a0ca7bb2824fba7a4d0fa7ccc59474b94e8a66b2063cc1f3caaa45ac59a4231de8c75bd6b3a35df19f00ea1cb710b46912c0a4fa45fc402680d1fb52927c407e95c1f612d53612b6a84c8c5043f4660bfeb6f970c81f82768281b9980fa8723f1c098998e49a8b4d3867435dd2cbd92a1ab8e9043"], 0x0, 0x800020, &(0x7f00000000c0)}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/218, 0xda, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r2, 0x4) 03:52:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000ee01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:08 executing program 0: [ 2135.355163] kauditd_printk_skb: 2 callbacks suppressed [ 2135.355178] audit: type=1326 audit(2000001128.078:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31515 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2135.452594] binder: 31554:31558 unknown command 1074291600 [ 2135.463822] binder: 31554:31558 ioctl c0306201 20008000 returned -22 [ 2135.478147] audit: type=1326 audit(2000001128.198:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31559 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000f02021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:08 executing program 0: 03:52:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000ffffffffa00080", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2135.507217] binder: 31554:31558 unknown command 1074291600 [ 2135.532177] binder: 31554:31558 ioctl c0306201 20008000 returned -22 03:52:08 executing program 5: syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="a31e50b12cdccbf33492fe508287459320584c15006d619414e0b48f5652522eb9e89a4588bd56d428aa101692d70c107c8ef0c874dbf5748114d28949c0337e28e44c0b94597a900825e9ce0f07b3674e95a04654288c92193a0fa681436f8958a4dbc32d0c686734054e8fbce2f3886ac2a3e744d2979447ee9096bc02eb0ff9484cfef6fe0c326b00c842b571abb86244e854c939502bf2bed076dab4646c97cee933c0732c771e6b4d1ddbf81a39002d4cfa99b9bbb6826a2230e8bf15045e5acea2de3a8396c72b0524c8631ffa80", 0xd1, 0x81}], 0x400, &(0x7f00000002c0)='/dev/binder#\x00') r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="a991282339c7ce07633e2c2361b7fefe9b0440000000e50d6300000de99ae6aa0b74dd26"], 0xc, 0x0, &(0x7f0000000040)="1f93a6d602cbf444d610cefb"}) r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x1f, 0x202000) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={&(0x7f0000000340)=[0x40, 0x7fffffff, 0x7, 0xfffffffffffffff7, 0x70], 0x5, 0x6, 0x8, 0x4, 0xc5e1, 0x2, {0x1, 0x9, 0x13, 0x3, 0x8000, 0x0, 0x6, 0x100000001, 0x8, 0x0, 0x51d, 0x80000000, 0x841, 0x4, "df165c66e6132e31dbc8788521ddf3bdc4c8d9ce3ec567fa21d4c76604d70a9d"}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x5000, 0x104000}) eventfd(0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000600)={0x1, &(0x7f00000004c0)=""/23, &(0x7f00000005c0)=[{0x5b, 0xb4, 0x4, &(0x7f0000000500)=""/180}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) kcmp(r2, r3, 0x6, r1, r1) setxattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.opaque\x00', &(0x7f00000006c0)='/dev/binder#\x00', 0xd, 0x2) 03:52:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x218]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000fc01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2135.745089] binder: 31576:31577 unknown command 589861289 [ 2135.753398] binder: 31576:31577 ioctl c0306201 200000c0 returned -22 [ 2135.794359] binder: 31576:31577 ioctl 4010ae67 20000000 returned -22 [ 2135.807975] binder: 31576:31577 transaction failed 29189/-22, size 0-8 line 2855 [ 2135.828490] binder: 31576:31584 unknown command 589861289 [ 2135.834755] binder: 31576:31584 ioctl c0306201 200000c0 returned -22 [ 2135.842655] binder: 31576:31577 ioctl 4010ae67 20000000 returned -22 03:52:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xe4000000}]}) 03:52:09 executing program 0: 03:52:09 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000000001a000", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00008c01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x900000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:09 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x80) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2cb) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@local, @remote}, &(0x7f00000001c0)=0x8) [ 2136.276124] audit: type=1326 audit(2000001128.998:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31559 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:09 executing program 0: 03:52:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xffffffffffffff6e, 0x0, &(0x7f0000004fbc), 0x5a, 0x800020}) [ 2136.396345] audit: type=1326 audit(2000001129.118:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31601 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:09 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00s\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00005c00021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x4000000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:09 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000ffffffffa00200", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x6c000000}]}) 03:52:09 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) bind$bt_rfcomm(r0, &(0x7f00000002c0)={0x1f, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}}, 0xa) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000600)=@file={0x1, './file0/file1\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)}], 0x1, &(0x7f0000000400)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x0, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0xfff, 0x0, 0x10000, 0x1000, 0x101}) ioctl$VT_RELDISP(r2, 0x5605) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20000) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 03:52:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 03:52:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000f400021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:09 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00`P\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x6000000000000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 2137.183984] audit: type=1326 audit(2000001129.908:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31601 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2137.275683] binder_release_work: 3 callbacks suppressed [ 2137.275691] binder: undelivered TRANSACTION_ERROR: 29189 [ 2137.300718] binder: undelivered TRANSACTION_ERROR: 29189 [ 2137.317898] audit: type=1326 audit(2000001130.038:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31640 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:10 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000ffefffffff7f00", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 03:52:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00005000021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:52:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8869259b5fa5f6ca669b04fc6b85b7c4aa9c232768bcb3ec365f96a614f8e5b2823bed04e4573de284bd4d04e5245a7d3140ac122aced5dc415ab621fd677f7bd29e1588b4fb3ddc884d2d11ad4d89139ef0238bfe89a906019f6fbc2b33ef9cb8313123825caea8bca2be5767586111f8d6c4424aefeddd58b512cf56f3e896d581f7fbccfcc5b35f6a05807eae81e42ec023874f4df4176e0e5549e1df73bf55529a38340e291d6", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="e6ffff9f0f38a1e1481fffffffffff"]], 0x0, 0x800020, &(0x7f0000009000)}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x505400, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/50) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400100, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/12) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') accept$packet(r1, &(0x7f0000002fc0)={0x11, 0x0, 0x0}, &(0x7f0000003000)=0x14) accept4$packet(r1, &(0x7f0000003040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003080)=0x14, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000063c0)={0x0, @loopback, @rand_addr}, &(0x7f0000006400)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000006440)={@local, @remote, 0x0}, &(0x7f0000006480)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006580)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000006680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000066c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000006700)={@multicast2, @multicast2, 0x0}, &(0x7f0000006740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006a00)={&(0x7f00000067c0)={0x20c, r3, 0xb02, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4048040}, 0x10) 03:52:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x91ffffff00000000]}, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:52:10 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"627269646765300000008000a0ffffff", &(0x7f0000000000)=@ethtool_ringparam={0x7}}) [ 2137.783304] binder_transaction: 3 callbacks suppressed [ 2137.783323] binder: 31654:31657 transaction failed 29189/-22, size 0-0 line 2855 03:52:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000bb01021900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) [ 2137.928051] binder: 31654:31657 transaction failed 29189/-22, size 0-0 line 2855 [ 2137.998738] binder: undelivered TRANSACTION_ERROR: 29189 [ 2138.014410] binder: undelivered TRANSACTION_ERROR: 29189 [ 2138.116199] audit: type=1326 audit(2000001130.838:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31640 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 03:52:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x4c00}]}) [ 2157.815554] audit: type=1326 audit(2000001150.538:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31678 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2158.615260] audit: type=1326 audit(2000001151.338:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31678 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 2293.683242] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 156s! [ 2293.691876] Showing busy workqueues and worker pools: [ 2293.697307] workqueue events: flags=0x0 [ 2293.701628] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 [ 2293.711197] pending: defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, vmstat_shepherd, cache_reap [ 2293.723985] [ 2293.723989] ====================================================== [ 2293.723992] WARNING: possible circular locking dependency detected [ 2293.723994] 4.19.0-rc8+ #284 Not tainted [ 2293.723998] ------------------------------------------------------ [ 2293.724001] syz-executor0/31633 is trying to acquire lock: [ 2293.724003] 0000000012231d52 (console_owner){-.-.}, at: console_unlock+0x560/0x1160 [ 2293.724011] [ 2293.724014] but task is already holding lock: [ 2293.724015] 00000000d61957a3 (&(&pool->lock)->rlock){-.-.}, at: show_workqueue_state.cold.49+0xad0/0x159a [ 2293.724025] [ 2293.724027] which lock already depends on the new lock. [ 2293.724029] [ 2293.724030] [ 2293.724034] the existing dependency chain (in reverse order) is: [ 2293.724035] [ 2293.724036] -> #4 (&(&pool->lock)->rlock){-.-.}: [ 2293.724045] _raw_spin_lock+0x2d/0x40 [ 2293.724047] __queue_work+0x34c/0x1440 [ 2293.724049] queue_work_on+0x19a/0x1e0 [ 2293.724052] put_pwq+0x175/0x1c0 [ 2293.724054] put_pwq_unlocked.part.28+0x34/0x70 [ 2293.724057] destroy_workqueue+0x868/0x9c0 [ 2293.724059] tipc_topsrv_stop+0x4ad/0x6ca [ 2293.724062] tipc_exit_net+0x15/0x40 [ 2293.724064] ops_exit_list.isra.7+0xb0/0x160 [ 2293.724066] setup_net+0x56e/0x950 [ 2293.724068] copy_net_ns+0x2b1/0x4a0 [ 2293.724071] create_new_namespaces+0x6ad/0x900 [ 2293.724074] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 2293.724076] ksys_unshare+0x79c/0x10b0 [ 2293.724078] __x64_sys_unshare+0x31/0x40 [ 2293.724080] do_syscall_64+0x1b9/0x820 [ 2293.724083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2293.724084] [ 2293.724086] -> #3 (&pool->lock/1){..-.}: [ 2293.724095] _raw_spin_lock+0x2d/0x40 [ 2293.724097] __queue_work+0x34c/0x1440 [ 2293.724100] queue_work_on+0x19a/0x1e0 [ 2293.724102] tty_schedule_flip+0x14c/0x1d0 [ 2293.724104] tty_flip_buffer_push+0x15/0x20 [ 2293.724106] pty_write+0x19d/0x1f0 [ 2293.724109] n_tty_write+0xc5b/0x11a0 [ 2293.724111] tty_write+0x3f1/0x880 [ 2293.724113] __vfs_write+0x119/0x9f0 [ 2293.724115] vfs_write+0x1fc/0x560 [ 2293.724117] ksys_write+0x101/0x260 [ 2293.724120] __x64_sys_write+0x73/0xb0 [ 2293.724122] do_syscall_64+0x1b9/0x820 [ 2293.724125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2293.724126] [ 2293.724127] -> #2 (&(&port->lock)->rlock){-.-.}: [ 2293.724136] _raw_spin_lock_irqsave+0x99/0xd0 [ 2293.724138] tty_port_tty_get+0x20/0x80 [ 2293.724141] tty_port_default_wakeup+0x15/0x40 [ 2293.724143] tty_port_tty_wakeup+0x5d/0x70 [ 2293.724145] uart_write_wakeup+0x44/0x60 [ 2293.724148] serial8250_tx_chars+0x4be/0xb60 [ 2293.724150] serial8250_handle_irq.part.23+0x1ee/0x280 [ 2293.724153] serial8250_default_handle_irq+0xc8/0x150 [ 2293.724156] serial8250_interrupt+0xfa/0x1d0 [ 2293.724158] __handle_irq_event_percpu+0x1e6/0xb00 [ 2293.724161] handle_irq_event_percpu+0xa0/0x1d0 [ 2293.724163] handle_irq_event+0xa7/0x135 [ 2293.724166] handle_edge_irq+0x227/0x880 [ 2293.724168] handle_irq+0x252/0x3d8 [ 2293.724170] do_IRQ+0x98/0x1c0 [ 2293.724172] ret_from_intr+0x0/0x1e [ 2293.724174] native_safe_halt+0x6/0x10 [ 2293.724176] default_idle+0xbf/0x490 [ 2293.724179] arch_cpu_idle+0x10/0x20 [ 2293.724181] default_idle_call+0x6d/0x90 [ 2293.724183] do_idle+0x3db/0x5b0 [ 2293.724186] cpu_startup_entry+0x10c/0x120 [ 2293.724188] start_secondary+0x447/0x5f0 [ 2293.724190] secondary_startup_64+0xa4/0xb0 [ 2293.724192] [ 2293.724197] -> #1 (&port_lock_key){-.-.}: [ 2293.724210] _raw_spin_lock_irqsave+0x99/0xd0 [ 2293.724213] serial8250_console_write+0x8dd/0xb10 [ 2293.724216] univ8250_console_write+0x5f/0x70 [ 2293.724218] console_unlock+0xcd7/0x1160 [ 2293.724220] vprintk_emit+0x33d/0x930 [ 2293.724222] vprintk_default+0x28/0x30 [ 2293.724225] vprintk_func+0x7e/0x181 [ 2293.724227] printk+0xa7/0xcf [ 2293.724229] register_console+0x7e6/0xc00 [ 2293.724231] univ8250_console_init+0x3f/0x4b [ 2293.724234] console_init+0x6ac/0x9dc [ 2293.724236] start_kernel+0x613/0x92f [ 2293.724239] x86_64_start_reservations+0x29/0x2b [ 2293.724241] x86_64_start_kernel+0x76/0x79 [ 2293.724244] secondary_startup_64+0xa4/0xb0 [ 2293.724245] [ 2293.724246] -> #0 (console_owner){-.-.}: [ 2293.724254] lock_acquire+0x1ed/0x520 [ 2293.724257] console_unlock+0x5cd/0x1160 [ 2293.724260] vprintk_emit+0x33d/0x930 [ 2293.724263] vprintk_default+0x28/0x30 [ 2293.724266] vprintk_func+0x7e/0x181 [ 2293.724268] printk+0xa7/0xcf [ 2293.724271] show_workqueue_state.cold.49+0xc6c/0x159a [ 2293.724273] wq_watchdog_timer_fn+0x6ea/0x810 [ 2293.724276] call_timer_fn+0x272/0x920 [ 2293.724278] __run_timers+0x7e5/0xc70 [ 2293.724280] run_timer_softirq+0x88/0xb0 [ 2293.724283] __do_softirq+0x30b/0xad8 [ 2293.724285] irq_exit+0x17f/0x1c0 [ 2293.724288] smp_apic_timer_interrupt+0x1cb/0x760 [ 2293.724290] apic_timer_interrupt+0xf/0x20 [ 2293.724293] lock_acquire+0x268/0x520 [ 2293.724295] _raw_spin_lock+0x2d/0x40 [ 2293.724298] __find_get_block+0x661/0xf20 [ 2293.724300] __getblk_gfp+0x2b3/0xd50 [ 2293.724302] __bread_gfp+0x2d/0x300 [ 2293.724304] fat__get_entry+0x5a6/0xa40 [ 2293.724307] fat_search_long+0x33b/0x1570 [ 2293.724309] vfat_find+0x16d/0x1a0 [ 2293.724311] vfat_lookup+0x107/0x640 [ 2293.724313] lookup_open+0x72e/0x1b90 [ 2293.724316] path_openat+0x15e7/0x5160 [ 2293.724318] do_filp_open+0x255/0x380 [ 2293.724320] do_sys_open+0x568/0x700 [ 2293.724323] __x64_sys_creat+0x61/0x80 [ 2293.724325] do_syscall_64+0x1b9/0x820 [ 2293.724328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2293.724329] [ 2293.724332] other info that might help us debug this: [ 2293.724333] [ 2293.724335] Chain exists of: [ 2293.724336] console_owner --> &pool->lock/1 --> &(&pool->lock)->rlock [ 2293.724348] [ 2293.724350] Possible unsafe locking scenario: [ 2293.724351] [ 2293.724354] CPU0 CPU1 [ 2293.724356] ---- ---- [ 2293.724357] lock(&(&pool->lock)->rlock); [ 2293.724363] lock(&pool->lock/1); [ 2293.724370] lock(&(&pool->lock)->rlock); [ 2293.724374] lock(console_owner); [ 2293.724379] [ 2293.724381] *** DEADLOCK *** [ 2293.724382] [ 2293.724384] 7 locks held by syz-executor0/31633: [ 2293.724386] #0: 00000000d507a4dc (&sb->s_type->i_mutex_key#22){++++}, at: path_openat+0x15c7/0x5160 [ 2293.724397] #1: 000000009a68a2e7 (&sbi->s_lock){+.+.}, at: vfat_lookup+0xf1/0x640 [ 2293.724420] #2: 0000000083a7ff16 (&(&mapping->private_lock)->rlock){+.+.}, at: __find_get_block+0x661/0xf20 [ 2293.724442] #3: 0000000005319f81 ((&wq_watchdog_timer)){+.-.}, at: call_timer_fn+0x1db/0x920 [ 2293.724453] #4: 000000005fa60ca8 (rcu_read_lock_sched){....}, at: show_workqueue_state+0x0/0x1d0 [ 2293.724463] #5: 00000000d61957a3 (&(&pool->lock)->rlock){-.-.}, at: show_workqueue_state.cold.49+0xad0/0x159a [ 2293.724474] #6: 00000000d90c3a85 (console_lock){+.+.}, at: vprintk_emit+0x322/0x930 [ 2293.724483] [ 2293.724485] stack backtrace: [ 2293.724488] CPU: 0 PID: 31633 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #284 [ 2293.724493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.724494] Call Trace: [ 2293.724496] [ 2293.724498] dump_stack+0x1c4/0x2b4 [ 2293.724501] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2293.724503] ? vprintk_func+0x85/0x181 [ 2293.724506] print_circular_bug.isra.33.cold.54+0x1bd/0x27d [ 2293.724508] ? save_trace+0xe0/0x290 [ 2293.724510] __lock_acquire+0x33e4/0x4ec0 [ 2293.724513] ? mark_held_locks+0x130/0x130 [ 2293.724515] ? put_dec+0x3b/0xf0 [ 2293.724518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2293.724520] ? debug_smp_processor_id+0x1c/0x20 [ 2293.724523] ? perf_trace_lock_acquire+0x15b/0x800 [ 2293.724525] ? format_decode+0x1b2/0xaf0 [ 2293.724528] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2293.724530] lock_acquire+0x1ed/0x520 [ 2293.724532] ? console_unlock+0x560/0x1160 [ 2293.724535] ? lock_release+0x970/0x970 [ 2293.724537] ? kasan_check_read+0x11/0x20 [ 2293.724540] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2293.724542] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2293.724545] ? kasan_check_write+0x14/0x20 [ 2293.724547] ? do_raw_spin_lock+0xc1/0x200 [ 2293.724550] console_unlock+0x5cd/0x1160 [ 2293.724552] ? console_unlock+0x560/0x1160 [ 2293.724554] ? devkmsg_read+0xbb0/0xbb0 [ 2293.724557] ? kasan_check_write+0x14/0x20 [ 2293.724559] ? trace_hardirqs_on+0x310/0x310 [ 2293.724562] ? vprintk_emit+0x322/0x930 [ 2293.724564] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2293.724567] ? vprintk_emit+0x322/0x930 [ 2293.724569] ? __down_trylock_console_sem+0x155/0x200 [ 2293.724572] vprintk_emit+0x33d/0x930 [ 2293.724574] ? wake_up_klogd+0x180/0x180 [ 2293.724576] ? graph_lock+0x170/0x170 [ 2293.724578] ? find_held_lock+0x36/0x1c0 [ 2293.724581] vprintk_default+0x28/0x30 [ 2293.724583] vprintk_func+0x7e/0x181 [ 2293.724585] ? printk+0xa7/0xcf [ 2293.724587] printk+0xa7/0xcf [ 2293.724589] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 2293.724592] ? kasan_check_write+0x14/0x20 [ 2293.724594] show_workqueue_state.cold.49+0xc6c/0x159a [ 2293.724597] ? plist_requeue+0x620/0x620 [ 2293.724599] ? print_worker_info+0x540/0x540 [ 2293.724602] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2293.724604] ? radix_tree_tag_get+0x350/0x350 [ 2293.724606] ? graph_lock+0x170/0x170 [ 2293.724609] ? __lock_acquire+0x7ec/0x4ec0 [ 2293.724611] ? __lock_acquire+0x7ec/0x4ec0 [ 2293.724613] ? find_held_lock+0x36/0x1c0 [ 2293.724616] ? wq_watchdog_timer_fn+0x5b4/0x810 [ 2293.724618] ? lock_downgrade+0x900/0x900 [ 2293.724621] ? check_preemption_disabled+0x48/0x200 [ 2293.724624] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2293.724626] ? kasan_check_read+0x11/0x20 [ 2293.724629] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2293.724631] ? rcu_bh_qs+0xc0/0xc0 [ 2293.724633] wq_watchdog_timer_fn+0x6ea/0x810 [ 2293.724636] ? show_workqueue_state+0x1d0/0x1d0 [ 2293.724638] ? graph_lock+0x170/0x170 [ 2293.724641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2293.724643] ? check_preemption_disabled+0x48/0x200 [ 2293.724646] ? graph_lock+0x170/0x170 [ 2293.724648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2293.724651] ? check_preemption_disabled+0x48/0x200 [ 2293.724654] ? check_preemption_disabled+0x48/0x200 [ 2293.724656] ? __lock_is_held+0xb5/0x140 [ 2293.724658] call_timer_fn+0x272/0x920 [ 2293.724661] ? show_workqueue_state+0x1d0/0x1d0 [ 2293.724663] ? process_timeout+0x40/0x40 [ 2293.724665] ? find_held_lock+0x36/0x1c0 [ 2293.724668] ? mark_held_locks+0xc7/0x130 [ 2293.724670] ? _raw_spin_unlock_irq+0x27/0x8 [ 2293.724675] Lost 160 message(s)! [ 2294.755805] workqueue events_long: flags=0x0 [ 2294.760231] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 [ 2294.766423] pending: br_fdb_cleanup, br_fdb_cleanup [ 2294.771836] workqueue events_power_efficient: flags=0x80 [ 2294.777302] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 [ 2294.783444] pending: neigh_periodic_work, check_lifetime, do_cache_clean [ 2294.790699] workqueue kblockd: flags=0x18 [ 2294.794896] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 [ 2294.801212] pending: blk_mq_requeue_work [ 2294.805701] workqueue ipv6_addrconf: flags=0x40008 [ 2294.810648] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 [ 2294.816621] pending: addrconf_verify_work [ 2296.883323] INFO: task jbd2/sda1-8:3078 blocked for more than 140 seconds. [ 2296.890387] Not tainted 4.19.0-rc8+ #284 [ 2296.895483] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2296.903809] jbd2/sda1-8 D17624 3078 2 0x80000000 [ 2296.909460] Call Trace: [ 2296.912070] __schedule+0x86c/0x1ed0 [ 2296.916407] ? rcu_pm_notify+0xc0/0xc0 [ 2296.920331] ? __sched_text_start+0x8/0x8 [ 2296.924898] ? prepare_to_wait+0x1b3/0x3f0 [ 2296.929157] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2296.934764] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2296.939892] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2296.944865] ? trace_hardirqs_on+0xbd/0x310 [ 2296.949203] ? kasan_check_read+0x11/0x20 [ 2296.953831] ? prepare_to_wait+0x1b3/0x3f0 [ 2296.958091] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2296.964499] schedule+0xfe/0x460 [ 2296.967891] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2296.973003] ? __schedule+0x1ed0/0x1ed0 [ 2296.977470] ? prepare_to_wait+0x1b3/0x3f0 [ 2296.981741] ? autoremove_wake_function+0x370/0x370 [ 2296.987129] ? submit_bio+0xba/0x460 [ 2296.990861] ? generic_make_request+0x15a0/0x15a0 [ 2296.996137] ? __bio_add_page+0x134/0x290 [ 2297.000329] io_schedule+0x1c/0x70 [ 2297.004280] bit_wait_io+0xf/0x90 [ 2297.007782] __wait_on_bit+0xb3/0x130 [ 2297.011606] ? bit_wait_timeout+0x210/0x210 [ 2297.016391] out_of_line_wait_on_bit+0x213/0x3c0 [ 2297.021168] ? ___might_sleep+0x1ed/0x300 [ 2297.025683] ? __wait_on_bit+0x130/0x130 [ 2297.029774] ? init_wait_var_entry+0x1a0/0x1a0 [ 2297.034834] ? __might_sleep+0x95/0x190 [ 2297.038833] __wait_on_buffer+0x71/0x90 [ 2297.042827] jbd2_journal_commit_transaction+0x6397/0x89f8 [ 2297.049462] ? journal_submit_commit_record+0xb60/0xb60 [ 2297.055258] ? __lock_acquire+0x7ec/0x4ec0 [ 2297.059526] ? mark_held_locks+0x130/0x130 [ 2297.064236] ? __update_load_avg_blocked_se+0x730/0x730 [ 2297.069629] ? __update_load_avg_se+0xb90/0xb90 [ 2297.074781] ? __lock_is_held+0xb5/0x140 [ 2297.078901] ? update_load_avg+0x387/0x2470 [ 2297.083715] ? update_load_avg+0x387/0x2470 [ 2297.088061] ? perf_trace_lock_acquire+0x15b/0x800 [ 2297.093011] ? attach_entity_load_avg+0x860/0x860 [ 2297.098897] ? debug_smp_processor_id+0x1c/0x20 [ 2297.103942] ? perf_trace_lock+0x14d/0x7a0 [ 2297.108193] ? perf_trace_lock_acquire+0x15b/0x800 [ 2297.113132] ? graph_lock+0x170/0x170 [ 2297.117429] ? zap_class+0x640/0x640 [ 2297.121169] ? graph_lock+0x170/0x170 [ 2297.125573] ? find_held_lock+0x36/0x1c0 [ 2297.129706] ? print_usage_bug+0xc0/0xc0 [ 2297.134202] ? lock_downgrade+0x900/0x900 [ 2297.138375] ? check_preemption_disabled+0x48/0x200 [ 2297.143882] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2297.149699] ? kasan_check_read+0x11/0x20 [ 2297.154475] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2297.159787] ? __lock_acquire+0x7ec/0x4ec0 [ 2297.164414] ? update_curr+0x4ec/0xbe0 [ 2297.168320] ? print_usage_bug+0xc0/0xc0 [ 2297.172387] ? graph_lock+0x170/0x170 [ 2297.176695] ? mark_held_locks+0x130/0x130 [ 2297.180968] ? __lock_is_held+0xb5/0x140 [ 2297.185402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.190961] ? print_usage_bug+0xc0/0xc0 [ 2297.195488] ? check_preemption_disabled+0x48/0x200 [ 2297.200548] ? debug_smp_processor_id+0x1c/0x20 [ 2297.205620] ? perf_trace_lock_acquire+0x15b/0x800 [ 2297.210656] ? update_load_avg+0x2470/0x2470 [ 2297.215505] ? print_usage_bug+0xc0/0xc0 [ 2297.219597] ? __lock_acquire+0x7ec/0x4ec0 [ 2297.224803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.230367] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 2297.236460] ? perf_trace_lock+0x14d/0x7a0 [ 2297.240714] ? __lock_acquire+0x7ec/0x4ec0 [ 2297.245345] ? find_held_lock+0x36/0x1c0 [ 2297.249450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.255435] ? check_preemption_disabled+0x48/0x200 [ 2297.260484] ? perf_trace_lock_acquire+0x15b/0x800 [ 2297.265795] ? compat_start_thread+0x80/0x80 [ 2297.270224] ? perf_trace_lock+0x7a0/0x7a0 [ 2297.274899] ? debug_smp_processor_id+0x1c/0x20 [ 2297.279588] ? perf_trace_lock_acquire+0x15b/0x800 [ 2297.284933] ? finish_task_switch+0x2f5/0x900 [ 2297.289447] ? __switch_to_asm+0x40/0x70 [ 2297.294032] ? graph_lock+0x170/0x170 [ 2297.297855] ? perf_trace_lock+0x7a0/0x7a0 [ 2297.302112] ? __switch_to_asm+0x40/0x70 [ 2297.306567] ? __switch_to_asm+0x40/0x70 [ 2297.310671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.316805] ? graph_lock+0x170/0x170 [ 2297.320634] ? lock_acquire+0x1ed/0x520 [ 2297.324977] ? lock_timer_base+0xbb/0x2b0 [ 2297.329144] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2297.334660] ? find_held_lock+0x36/0x1c0 [ 2297.338760] ? try_to_del_timer_sync+0xec/0x140 [ 2297.343871] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2297.349001] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2297.355109] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2297.359717] ? trace_hardirqs_on+0xbd/0x310 [ 2297.364403] ? kasan_check_read+0x11/0x20 [ 2297.368572] ? try_to_del_timer_sync+0xec/0x140 [ 2297.373697] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2297.379190] ? stub_timer+0x10/0x10 [ 2297.382849] ? del_timer_sync+0xf8/0x270 [ 2297.387389] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2297.392517] ? try_to_del_timer_sync+0xec/0x140 [ 2297.397621] ? del_timer+0x150/0x150 [ 2297.401364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.407269] kjournald2+0x26d/0xb30 [ 2297.410922] ? __bpf_trace_jbd2_end_commit+0x30/0x30 [ 2297.416462] ? __kthread_parkme+0xce/0x1a0 [ 2297.420720] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2297.426193] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2297.431321] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2297.436329] ? trace_hardirqs_on+0xbd/0x310 [ 2297.440671] ? finish_wait+0x430/0x430 [ 2297.444935] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2297.450408] ? kasan_check_write+0x14/0x20 [ 2297.455068] ? do_raw_spin_lock+0xc1/0x200 [ 2297.459335] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2297.464821] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2297.470411] ? __kthread_parkme+0xfb/0x1a0 [ 2297.475233] kthread+0x35a/0x420 [ 2297.478628] ? __bpf_trace_jbd2_end_commit+0x30/0x30 [ 2297.484698] ? kthread_bind+0x40/0x40 [ 2297.488533] ret_from_fork+0x3a/0x50 [ 2297.492549] INFO: task syz-executor0:31671 blocked for more than 140 seconds. [ 2297.500350] Not tainted 4.19.0-rc8+ #284 [ 2297.505206] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2297.513536] syz-executor0 D24952 31671 5402 0x00000004 [ 2297.519193] Call Trace: [ 2297.521798] __schedule+0x86c/0x1ed0 [ 2297.525944] ? __switch_to_asm+0x34/0x70 [ 2297.530021] ? __switch_to_asm+0x40/0x70 [ 2297.534615] ? __switch_to_asm+0x34/0x70 [ 2297.538704] ? __sched_text_start+0x8/0x8 [ 2297.542877] ? rwsem_spin_on_owner+0x264/0xa30 [ 2297.547862] ? graph_lock+0x170/0x170 [ 2297.551685] ? print_usage_bug+0xc0/0xc0 [ 2297.556311] ? __sched_text_start+0x8/0x8 [ 2297.560474] ? kasan_check_read+0x11/0x20 [ 2297.565009] ? rcu_bh_qs+0xc0/0xc0 [ 2297.568570] ? find_held_lock+0x36/0x1c0 [ 2297.572659] schedule+0xfe/0x460 [ 2297.576574] ? __schedule+0x1ed0/0x1ed0 [ 2297.580573] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2297.585545] ? trace_hardirqs_on+0xbd/0x310 [ 2297.589888] ? kasan_check_read+0x11/0x20 [ 2297.594487] ? __rwsem_down_write_failed_common+0x8db/0x1670 [ 2297.600307] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2297.606175] ? kasan_check_write+0x14/0x20 [ 2297.610432] ? do_raw_spin_lock+0xc1/0x200 [ 2297.615813] __rwsem_down_write_failed_common+0xbb9/0x1670 [ 2297.621471] ? rwsem_spin_on_owner+0xa30/0xa30 [ 2297.626519] ? __lock_acquire+0x7ec/0x4ec0 [ 2297.630786] ? mark_held_locks+0x130/0x130 [ 2297.635692] ? mntput+0x74/0xa0 [ 2297.639023] ? walk_component+0x3fe/0x25c0 [ 2297.643774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.649345] ? check_preemption_disabled+0x48/0x200 [ 2297.654943] ? debug_smp_processor_id+0x1c/0x20 [ 2297.659638] ? perf_trace_lock_acquire+0x15b/0x800 [ 2297.664945] ? debug_smp_processor_id+0x1c/0x20 [ 2297.669642] ? zap_class+0x640/0x640 [ 2297.673805] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2297.679620] ? kasan_check_read+0x11/0x20 [ 2297.684130] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.689693] ? set_nlink+0xaf/0x140 [ 2297.693730] ? graph_lock+0x170/0x170 [ 2297.697564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.703116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.709069] ? lock_acquire+0x1ed/0x520 [ 2297.713059] ? path_openat+0x15c7/0x5160 [ 2297.717572] ? lock_release+0x970/0x970 [ 2297.721568] ? arch_local_save_flags+0x40/0x40 [ 2297.726518] rwsem_down_write_failed+0xe/0x10 [ 2297.731029] ? rwsem_down_write_failed+0xe/0x10 [ 2297.736138] call_rwsem_down_write_failed+0x17/0x30 [ 2297.741179] down_write+0xa5/0x130 [ 2297.745663] ? path_openat+0x15c7/0x5160 [ 2297.749834] ? down_read+0x1d0/0x1d0 [ 2297.754009] ? __sb_end_write+0xd9/0x110 [ 2297.758093] path_openat+0x15c7/0x5160 [ 2297.761990] ? zap_class+0x640/0x640 [ 2297.766208] ? path_lookupat.isra.43+0xc00/0xc00 [ 2297.770990] ? unwind_get_return_address+0x61/0xa0 [ 2297.776374] ? expand_files.part.8+0x571/0x9a0 [ 2297.780982] ? find_held_lock+0x36/0x1c0 [ 2297.785658] ? __alloc_fd+0x347/0x6e0 [ 2297.789488] ? lock_downgrade+0x900/0x900 [ 2297.794118] ? kasan_check_read+0x11/0x20 [ 2297.798290] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2297.802708] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2297.807683] ? __lock_is_held+0xb5/0x140 [ 2297.811787] ? _raw_spin_unlock+0x2c/0x50 [ 2297.816387] ? __alloc_fd+0x347/0x6e0 [ 2297.820206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.826134] do_filp_open+0x255/0x380 [ 2297.829957] ? may_open_dev+0x100/0x100 [ 2297.834372] ? strncpy_from_user+0x3be/0x510 [ 2297.838818] ? digsig_verify+0x1530/0x1530 [ 2297.843068] ? get_unused_fd_flags+0x122/0x1a0 [ 2297.848142] ? getname_flags+0x26e/0x5a0 [ 2297.852226] ? put_timespec64+0x10f/0x1b0 [ 2297.856841] do_sys_open+0x568/0x700 [ 2297.860711] ? filp_open+0x80/0x80 [ 2297.864781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2297.870174] __x64_sys_creat+0x61/0x80 [ 2297.875056] do_syscall_64+0x1b9/0x820 [ 2297.878963] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2297.884681] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2297.889634] ? trace_hardirqs_on_caller+0x310/0x310 [ 2297.895103] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2297.900145] ? recalc_sigpending_tsk+0x180/0x180 [ 2297.905254] ? kasan_check_write+0x14/0x20 [ 2297.909522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2297.914816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2297.920023] RIP: 0033:0x457569 [ 2297.923576] Code: Bad RIP value. [ 2297.926954] RSP: 002b:00007fbab5903c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 2297.935102] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 2297.942393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 2297.950064] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 2297.957779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbab59046d4 [ 2297.965461] R13: 00000000004bdb2f R14: 00000000004cc688 R15: 00000000ffffffff [ 2297.972777] INFO: lockdep is turned off. [ 2297.977233] NMI backtrace for cpu 1 [ 2297.980885] CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #284 [ 2297.987817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.997172] Call Trace: [ 2297.999785] dump_stack+0x1c4/0x2b4 [ 2298.003430] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2298.008638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2298.014192] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 2298.018875] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 2298.024076] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 2298.029365] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2298.034567] watchdog+0xb3e/0x1050 [ 2298.038149] ? reset_hung_task_detector+0xd0/0xd0 [ 2298.043006] ? __kthread_parkme+0xce/0x1a0 [ 2298.047255] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2298.052372] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2298.057489] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2298.062086] ? trace_hardirqs_on+0xbd/0x310 [ 2298.066413] ? kasan_check_read+0x11/0x20 [ 2298.070569] ? __kthread_parkme+0xce/0x1a0 [ 2298.074813] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2298.080276] ? kasan_check_write+0x14/0x20 [ 2298.084524] ? do_raw_spin_lock+0xc1/0x200 [ 2298.088782] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2298.093898] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.099442] ? __kthread_parkme+0xfb/0x1a0 [ 2298.103693] kthread+0x35a/0x420 [ 2298.107074] ? reset_hung_task_detector+0xd0/0xd0 [ 2298.111934] ? kthread_bind+0x40/0x40 [ 2298.115766] ret_from_fork+0x3a/0x50 [ 2298.119706] Sending NMI from CPU 1 to CPUs 0: [ 2298.126357] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.083 msecs [ 2298.127255] NMI backtrace for cpu 0 [ 2298.127269] CPU: 0 PID: 31633 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #284 [ 2298.127277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.127282] RIP: 0010:__lock_acquire+0x1f4/0x4ec0 [ 2298.127295] Code: 85 c0 48 89 c3 0f 85 b3 00 00 00 45 31 ff 48 ba 00 00 00 00 00 fc ff df 48 03 94 24 90 00 00 00 31 c0 b9 0a 00 00 00 48 89 d7 48 ab 44 89 f8 c7 07 00 00 00 00 48 8b b4 24 58 03 00 00 65 48 [ 2298.127300] RSP: 0018:ffff88017353e170 EFLAGS: 00010046 [ 2298.127310] RAX: 0000000000000000 RBX: 1ffff1002e6a7cab RCX: 0000000000000006 [ 2298.127317] RDX: ffffed002e6a7c42 RSI: 0000000000000000 RDI: ffffed002e6a7c62 [ 2298.127323] RBP: ffff88017353e500 R08: 0000000000000000 R09: 0000000000000000 [ 2298.127329] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2298.127336] R13: ffffffff8939a7e0 R14: ffff88017a97a680 R15: 0000000000000000 [ 2298.127343] FS: 00007fbab5946700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 2298.127348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2298.127354] CR2: 0000001b2d524000 CR3: 000000017f881000 CR4: 00000000001426f0 [ 2298.127358] Call Trace: [ 2298.127362] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2298.127367] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2298.127371] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2298.127376] ? trace_hardirqs_off+0x310/0x310 [ 2298.127380] ? trace_hardirqs_off+0x310/0x310 [ 2298.127385] ? mark_held_locks+0x130/0x130 [ 2298.127389] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2298.127393] ? retint_kernel+0x2d/0x2d [ 2298.127398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2298.127403] ? check_preemption_disabled+0x48/0x200 [ 2298.127408] ? debug_smp_processor_id+0x1c/0x20 [ 2298.127413] ? perf_trace_lock_acquire+0x15b/0x800 [ 2298.127417] ? radix_tree_descend+0x13c/0x2e0 [ 2298.127422] ? perf_trace_lock+0x7a0/0x7a0 [ 2298.127426] ? mark_held_locks+0x130/0x130 [ 2298.127431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.127436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.127441] ? mark_page_accessed+0xcb0/0x2040 [ 2298.127446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2298.127451] ? check_preemption_disabled+0x48/0x200 [ 2298.127455] lock_acquire+0x1ed/0x520 [ 2298.127460] ? add_to_page_cache_lru+0x10b0/0x10b0 [ 2298.127464] ? lock_release+0x970/0x970 [ 2298.127469] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2298.127474] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.127478] ? mark_page_accessed+0xcb0/0x2040 [ 2298.127483] find_get_entry+0x12e/0xc40 [ 2298.127487] ? add_to_page_cache_lru+0x10b0/0x10b0 [ 2298.127492] ? __radix_tree_insert+0x8f0/0x8f0 [ 2298.127497] ? add_to_page_cache_lru+0x10b0/0x10b0 [ 2298.127501] ? lock_downgrade+0x900/0x900 [ 2298.127506] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2298.127511] ? radix_tree_lookup_slot+0xa1/0xf0 [ 2298.127516] ? __radix_tree_lookup+0x4c0/0x4c0 [ 2298.127520] ? find_get_entry+0x2f2/0xc40 [ 2298.127525] ? add_to_page_cache_lru+0x10b0/0x10b0 [ 2298.127529] ? retint_kernel+0x2d/0x2d [ 2298.127534] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2298.127538] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2298.127543] ? trace_hardirqs_off+0x310/0x310 [ 2298.127547] ? retint_kernel+0x2d/0x2d [ 2298.127552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2298.127557] ? check_preemption_disabled+0x48/0x200 [ 2298.127561] pagecache_get_page+0x12f/0xf00 [ 2298.127566] ? retint_kernel+0x2d/0x2d [ 2298.127571] ? find_get_pages_contig+0x15b0/0x15b0 [ 2298.127575] ? perf_trace_lock+0x7a0/0x7a0 [ 2298.127580] ? trace_hardirqs_off+0x310/0x310 [ 2298.127584] ? ___might_sleep+0x1ed/0x300 [ 2298.127589] ? arch_local_save_flags+0x40/0x40 [ 2298.127593] ? retint_kernel+0x2d/0x2d [ 2298.127597] ? __might_sleep+0x95/0x190 [ 2298.127602] ? pagecache_get_page+0x2d8/0xf00 [ 2298.127607] ? find_get_pages_contig+0x15b0/0x15b0 [ 2298.127611] ? lock_downgrade+0x900/0x900 [ 2298.127615] ? trace_hardirqs_on+0xbd/0x310 [ 2298.127619] ? __getblk_gfp+0x2b3/0xd50 [ 2298.127625] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2298.127630] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.127635] ? check_preemption_disabled+0x48/0x200 [ 2298.127640] __find_get_block+0x63a/0xf20 [ 2298.127644] ? trace_hardirqs_off+0x310/0x310 [ 2298.127649] ? try_to_free_buffers+0xc80/0xc80 [ 2298.127654] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2298.127658] ? unlock_page+0x2c2/0x4c0 [ 2298.127662] ? wake_up_page_bit+0x6f0/0x6f0 [ 2298.127667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.127672] ? init_page_buffers+0x433/0x570 [ 2298.127676] ? mark_buffer_dirty+0x8e0/0x8e0 [ 2298.127681] ? __getblk_gfp+0x2ea/0xd50 [ 2298.127685] __getblk_gfp+0x2b3/0xd50 [ 2298.127689] ? __find_get_block+0xf20/0xf20 [ 2298.127694] ? debug_smp_processor_id+0x1c/0x20 [ 2298.127698] ? perf_trace_lock_acquire+0x15b/0x800 [ 2298.127702] ? graph_lock+0x170/0x170 [ 2298.127708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2298.127711] __bread_gfp+0x2d/0x300 [ 2298.127716] fat__get_entry+0x5a6/0xa40 [ 2298.127720] ? arch_local_save_flags+0x40/0x40 [ 2298.127725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.127730] ? __d_lookup_rcu+0x556/0xaa0 [ 2298.127743] ? copy_overflow+0x30/0x30 [ 2298.127747] ? __mutex_lock+0x85e/0x1700 [ 2298.127752] ? vfat_lookup+0xf1/0x640 [ 2298.127756] ? d_alloc_parallel+0x8eb/0x1f40 [ 2298.127760] fat_search_long+0x33b/0x1570 [ 2298.127765] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 2298.127770] ? kasan_check_read+0x11/0x20 [ 2298.127775] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2298.127781] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2298.127786] ? fat_parse_short+0x2cc0/0x2cc0 [ 2298.127790] ? __d_lookup+0x591/0x9e0 [ 2298.127794] ? __d_lookup_rcu+0xaa0/0xaa0 [ 2298.127798] ? __d_lookup+0x5b8/0x9e0 [ 2298.127803] ? d_alloc_parallel+0x1f40/0x1f40 [ 2298.127807] ? d_lookup+0x269/0x340 [ 2298.127811] ? d_lookup+0x269/0x340 [ 2298.127815] vfat_find+0x16d/0x1a0 [ 2298.127819] vfat_lookup+0x107/0x640 [ 2298.127823] ? __lockdep_init_map+0x105/0x590 [ 2298.127828] ? vfat_find_form+0x120/0x120 [ 2298.127832] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2298.127836] ? d_lookup+0x221/0x340 [ 2298.127840] ? __d_lookup+0x9e0/0x9e0 [ 2298.127844] ? vfat_hashi+0x14d/0x390 [ 2298.127849] ? vfat_find_form+0x120/0x120 [ 2298.127853] lookup_open+0x72e/0x1b90 [ 2298.127857] ? vfs_link+0xb70/0xb70 [ 2298.127861] ? __sb_end_write+0xd9/0x110 [ 2298.127865] path_openat+0x15e7/0x5160 [ 2298.127870] ? path_lookupat.isra.43+0xc00/0xc00 [ 2298.127874] ? unwind_get_return_address+0x61/0xa0 [ 2298.127879] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2298.127884] ? expand_files.part.8+0x571/0x9a0 [ 2298.127888] ? find_held_lock+0x36/0x1c0 [ 2298.127892] ? __alloc_fd+0x347/0x6e0 [ 2298.127897] ? lock_downgrade+0x900/0x900 [ 2298.127901] ? kasan_check_read+0x11/0x20 [ 2298.127905] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2298.127910] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2298.127914] ? __lock_is_held+0xb5/0x140 [ 2298.127918] ? _raw_spin_unlock+0x2c/0x50 [ 2298.127923] ? __alloc_fd+0x347/0x6e0 [ 2298.127928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2298.127932] do_filp_open+0x255/0x380 [ 2298.127936] ? may_open_dev+0x100/0x100 [ 2298.127941] ? strncpy_from_user+0x3be/0x510 [ 2298.127945] ? digsig_verify+0x1530/0x1530 [ 2298.127950] ? get_unused_fd_flags+0x122/0x1a0 [ 2298.127954] ? getname_flags+0x26e/0x5a0 [ 2298.127958] ? put_timespec64+0x10f/0x1b0 [ 2298.127962] do_sys_open+0x568/0x700 [ 2298.127966] ? filp_open+0x80/0x80 [ 2298.127971] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2298.127976] __x64_sys_creat+0x61/0x80 [ 2298.127980] do_syscall_64+0x1b9/0x820 [ 2298.127985] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2298.127990] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2298.127994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2298.127999] ? trace_hardirqs_on_caller+0x310/0x310 [ 2298.128004] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2298.128009] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2298.128014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2298.128019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2298.128022] RIP: 0033:0x457569 [ 2298.128036] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2298.128041] RSP: 002b:00007fbab5945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 2298.128051] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 2298.128058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 2298.128064] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2298.128070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbab59466d4 [ 2298.128076] R13: 00000000004bdb2f R14: 00000000004cc688 R15: 00000000ffffffff [ 2298.137806] Kernel panic - not syncing: hung_task: blocked tasks [ 2298.961927] CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #284 [ 2298.968855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.978209] Call Trace: [ 2298.980830] dump_stack+0x1c4/0x2b4 [ 2298.984472] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2298.989681] panic+0x238/0x4e7 [ 2298.992882] ? add_taint.cold.5+0x16/0x16 [ 2298.997046] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 2299.002593] ? nmi_trigger_cpumask_backtrace+0x1c4/0x1ed [ 2299.008054] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 2299.013518] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 2299.018991] watchdog+0xb4f/0x1050 [ 2299.022554] ? reset_hung_task_detector+0xd0/0xd0 [ 2299.027419] ? __kthread_parkme+0xce/0x1a0 [ 2299.031690] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2299.036816] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2299.041941] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2299.046541] ? trace_hardirqs_on+0xbd/0x310 [ 2299.050872] ? kasan_check_read+0x11/0x20 [ 2299.055034] ? __kthread_parkme+0xce/0x1a0 [ 2299.059287] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2299.064759] ? kasan_check_write+0x14/0x20 [ 2299.069007] ? do_raw_spin_lock+0xc1/0x200 [ 2299.073266] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2299.078397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2299.083947] ? __kthread_parkme+0xfb/0x1a0 [ 2299.088195] kthread+0x35a/0x420 [ 2299.091599] ? reset_hung_task_detector+0xd0/0xd0 [ 2299.096468] ? kthread_bind+0x40/0x40 [ 2299.100310] ret_from_fork+0x3a/0x50 [ 2299.104999] Kernel Offset: disabled [ 2299.108647] Rebooting in 86400 seconds..