counters wrong 03:38:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000080)='./bus/file0\x00', 0x40, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 03:38:04 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x3f, &(0x7f0000000100)={0x0, {}, 0xffffffffffffffff, 0x0}, 0x0, 0xffffffffffffffde, &(0x7f0000000000)) 03:38:04 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x840, 0x4) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 03:38:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xca, 0x1f000000) 03:38:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1761.407829][T14951] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1761.454162][T14954] binder: 14953:14954 ERROR: BC_REGISTER_LOOPER called without request 03:38:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:04 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, &(0x7f0000000000)=0x100) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x9, 0x84) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f00000005c0)="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") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000200)) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 03:38:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [0x4b564d01, 0x0, 0x40000107], [0xc2]}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x7, 0x7fff}) 03:38:04 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x222000) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @default, 0x0, [@rose, @default, @bcast, @bcast, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x3ffff) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, 0x0, &(0x7f0000000280)=""/4096, 0x1000) sendfile(r2, r4, 0x0, 0x100000000002) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000000)) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000001280)="764b4d3cec3d73faec7d4376080f46bab00949c7c4bf3a72564584c836bca8b5b588397c8607f277635729dbe6d6d8a19e98cf7281151cebd81ac7f858dd13c9e77726a4b604b9ad2122ff321cb6c3dea092d2d63950e8b636e406d541260fe83440bc4b0746a30aafa0a0f6692921a7906b403959ea2585d697c2a2d261a9b545314adf22d5722ad751bbd79e3e5c8ec3ae98c1f713f62454836b6e9d728b95dd96a368f35cd6bba6222d6e9e65a121838a2dbf72f44c8ac25f17252571387a5ad0283cbe88fe6f238dbc09cc86f3316c7111f13718536f1fcaee57477afc180e655eb0446814e2f736f3b898b463d9dae756c1096b337208fe904d579b270a67ab3d9c7d524722aecb9768a39bed4c9f51db05eda064867f1b169a874243ee7cffa801aa13497508a856c82d8cb5920b0c3cfc8d894ab628dc7b9ca75b3a7cc409fb1b18df3066804215f92b05386f1eab6b1cf9072af56f690f8c45c7cfa8247bd2ff463cdf806f79051bbf7a769763ea3e3ad95c8636473653e64d269b348672c89d578985414e7060a308f9f94e3c0148d619e449e7232971847450f0e364366937968265f96e35b43c3e12631d0e8356fb31d2ef39f7396a2d2a0edfd6c6ecb6745e9bf600ea9c21348a071863c5f3ef369bc5a2d2b05d3f3a00b9f1adf0f77a57fdeee5bd80c230f0122270f5d0b69f282d3f50934ee9b0dbb415c8ef0e42ab4f4dded4d596b3b1b35a3e6e1691087b31d8ea3791583c597371bc6a5b81c9b7a25ef611c34a1975c0c4b00a4f20d31986baa9eec1a1bd5ba53dac1ddac507485f81e13d87b4be6f4a611239aaee8872dcaf33a57997f2d339da6805aeba6ce857596d021773b3df179c8b8180b16d4297bf80ae35c6f3423cd868302b209d67c442ccd3e98e71123abd26c83acc55e44ab374755d5b1668b9811bc2e1c662a5ffdad3916b0a235c8e3b372e9176360ca2887f389bdd750bf5634dfb985dcbce5e42d5dc9fd99730d4564cb66f410725105f8421cd97ad3ef49634bc5e9510d3120b0def79246c34dd795d47b55b88b8716bf4123a40ec31cd629eb74d8b741e928504fbf7b57b584e4055364b793b011e4499689735add9d62593b9c9e6b94439b9d65a5b1e144525fa65eed6cc92bbefbab166308e3870bc3ac1c918b47e845deecf8be5f79575f35aa186f7c11cc852cbb4534586450bc6e6881da0562b25ef2ef65553452e5b76d5c7b4a4ff9671d5f7bef48233894e6659df79fd7f5a6eedab08f5b7de1dbc6fc88dfa3c375d99f54d8d82fcc60a0db995f7a28c44c871fd29e3daf5a0710f93bfb98be18d317f9f0605c801d419afa1550be0520c483552df67ffa815e390ca6fd9e55e829c06a7bac80c24d62d7d7efaf2803de209a57d9ae4c5703df85146ee8f82f85fdde6ecf755f513a396f1a82d6940abecc4c04ef4d0ed8070f4296fe0c5bcc6d0e1705064743df23120a9825d202cfd3830b060ba3a99533356e263de3ef67fbcd6efdfff5ba90bb85d4e46dfec12decd47eab9dda06fe7f3be2882dfaab69ace53a7b19d3f62d9cfa7712908239094396d6b16309f89eaf937f96504549faea8d15cfdda6688ad8f9ea2cd323f22366eb738cfcc08823e9ba8491317642e9ad099e1299799c9977439c3fa1ce567c04380bd1ad68a1437ba35556fcccea29014b6a42030cf5c72e873aae9fcc468464e7589d90c091d3cb5b4314b2dd78c92bf4fe0f4d38d9dc69c571f6932a00406fbea6048738eb29a95e8673aa4c22c4d92c65458f10f422186a5b1d362b170495b05ddc0c089c1ff36ff242de05bfab6e2f86749cd2d6bcbf57be98cbddb5d1a919e3fb2254114178a61f4ffcf138f6d045d4110e4db083101714b78989a9c8c8f8fe9fbedeed5cd77ec3bc7a327a16d6785b955adefdaafd3258c8b2196f8420eede62cb69837185527f6b27e3f6f0ad03a8cafaf9936be97d20e1ff9be1d8568ed0b15d435c1a6c2d5c39c322016efc829a7f381323910770b6584d4e07ce31854f7cff8227fc02dea2c1d9ba2dc29dd0cd288ce2ad09a7cc5fc3bf7e96ff8bc3aa6d3168623a1a044e97fb0b16968dcbf4b8197018b50c5031a8b2ba7d40bed2e3d8bfdc9457be358c7e8f62ddc3c6495e0aed5f68a78a4a3a2fc32464f711603c47d3bcc05e2929539708cee93fd7bdaa4e3c6888a9619e5a17a38c1ae07ff184b46b1cdd581ae86465966a33ae0b69746fa7b3165ea4407dfeff14f507277a9dbdbf5aa4b452953b839071b93fc6a757ce051e202796369956831e4d38d3228d4ad259a704aa4fd946c51dd5cc8247e3d4ba1f48b6838fea953d2aa3ca73b819b46ea49ed6a157936ec5def3dda5c58cd0a717d407904101ca38844ffe336b3e28493f0192ccea08e442f8b7a4a37c006940f5afc4e689e1335412c371697482202285814c9d1752b0190969817ca193881399f34b33f43111cbfd3e7d81f148f1789194026f90f1732ef5a41a5a5ce57d425c760b9b4a752e3cd5eee1fbd21afb638e92e45aefa126ecad5d76427bb24f44d983eed553d7f3535f534e17304b3b1ece3c4404a4b31cf51c4536e57df0c1ed44e9471d8ceef79fa6baa36cb17e0ba882dccfbd2ab4284b21e9de338cb02cdeb37ccd2ebdb261bea7864ee0147363c6913e23878889676c42b9bb5869971a2da916566c68e8a5248aef8ed676331638cb50b15c92dfe7866621841057c918022f27aeedc61f1ce87f97ccc6a4554baf9474bb8663fd8bfca2ab26769ef0890746ea0ed515b2bafdb27cd89381eecbc2d477252755e509274b036075123f8d29c5e17ac9be09424bfae1c0105d62e0cb6fb45f68803e0433dd5c2b001c607104ac22ab7315f94eb136c3d5af99c9e50f7a4888da3e1c5ee86aa88cb2b8faa7ee10984aa0baa350a5839cd949ecd8f3b7b703adf323fbd30e69e5d10a0be854bb277348a4465d65c7626d0419c946b0ae719c978ca9fb6e6a7d6a70ecbabc5b5b113a6719e74a875ca018fb3e7fd493e99f0195f67254bb3097e75dfc8a62afdc5f4a9fb1e1a02cf3772339acdd1e02270af1214ed0de7f0f6828fae85ad5dac95f2a04f1da91defc8b7d490ebe058862b6d38a441959af9e91af5e642e625a69dfbc0ae22fba80aa49db8e48f3e9c2e2ae4b844eae6c77c8d37f0f10776698eb0b9afab511fb1223db1577188ec69e21b89c92d26d2ccf214fc887959d3e0a08af7744a07a4a669873cb9f963e44b9a0163eff957bfa4c3768db6751a0031aeaaf4f3f02cb717061abdc01f134e92d2d7f6d3552036abc6a1f15198add64fc9daaf237a22435b7c03ce767d2430d60f65f29e2d9a5b97c6b6b7cb760ff46990d148d37e1f1d83844595f665307b62fe9fdf58546bb1e3734aa265b76f0bf297d6d8dd6f9ce75b81a83d5fe9e47c5717e08a34f3464fe954948be08a7adaf0b4700421ebe2dd87e15ba0b95ac56568e6da62ed72fb602dcf0e659a0d5cedad43bdf73f247f68b085714d08f72d78238fb97f333937b8726c363f523e7d00e076c0904b7fd274390f2b8525575538d9f644bcce79d95098188555f25cee1a6c8bd59677a58e18a054eb90c8f2bfad8edae8d5afda8adf64719339a323e86c74bf09a1504054836e7feb4416ef9307bc5ff51d46684f7c498bb651c411420c202f31eea36f36b55b6b74bef2576fdce306c420a5ac7e03869852c67e78442c4020d290aacf8d2e47aa32f412c512ae4560345ad67660e40b092fcd6022f5dafa4407238963ffa0bb3bad18360384fe476d0711b70fae5a17421f054e00a76ac80a8f141479591dac607b64cd7d1fe6e5d8ce3a7ceb8b98c32eb803af84068a1b19f981d38ce7a4d5f8d09d19820aa62b4733d756a74acb1bba04e72dd19d5875e983627b51543a88a9df69d920105e225026d3a4388dba642f92bb34ab05b3e56fe9e40cec23f63f60d059e6dd3d47a097f90e3ab93a2911896ee1770ad9e5532bd5a884d1d632e9080e4c1e3361849a9fa4c2e63a271b00fcb7db351e65fd956d18a5c89887009f863d0ec34dfeacee3cb8fa1bc94103a76f67fc374b2a507c6dfd386aad50256c0ed50cbfe25d8fc74184c189028f31f2bd38e9692cc5445cef54274a022d77ea25c6efec747088acd13adb79aa9aab675d2dfeb1e4dad4c8211d2b8bda530ad61a10968373307e792efd2d42afd4f1e3631747dbdc718876b720a1b99b080e1c08c3ae68df006888baf852d63e3ecb171f9b3554898efc3d021f1146f38ea54cc3f863d0114ef4705673b756c1a13d8e1c35bff454fb0113935447bf8615149cc0d04b15f9106d99c0d1d757074c50c54ec66b6743caea8b5d8f3932b921ebaf83d777d8a483fd740dab09e2bb8a489f1f48618b9c3341fb5b2fef41b9af602b2b81dd338a573ef3da29e71fa2e81f1924dc2f6ab1676a38c4d330a0aae2e157930030eff7f9b92a6542ac13f48db5960048792fa84ed24fd0e3d402dd85fdb1de014fd8fc3382a3510d9b90997e7703a1768b012f8091b7ddbfdd4aaf5ff516db1b1f5620c0bdda8c41c3d709dedaa229e18f0fc79f709f4cbea7fdcfde1b9c1558290ded8bb7e9ab11f6171a8013184bd524d05db9faac90de82b5d5dffa07c438d139d987d56a4513d721f54da6e86cc94663787b17ff006a8831b0df4e9d0a81023c133ae0d9e1cdd1334a1fd84254c380d01b842c879341a5643eac214895ebe0ed71e9f632be35e6e17c843ca5b36a044976fdf9e6f76f265b36f512f27e8921819bfa5692222ed328ce731390bee7b689383d3daeddbe35d342982880e97ec30da7f9070232d20deadad3f36bc674783bc9dc4de4000dc67eea2777bea44c66ac902de871f392c90f29f985fa69ba376d3dfac9f0bcf7d634189a1dfe40af3ad8ffdc6fce6fd8dba78cb306657dd8536a81703d2ad7c5ac70282e4ae87835a1716c5766b2230e47a98c01d0d9d5fec156d232e7a73ed35bf945916a39de3bc29841e666cbe76b572d5081465734c3e9b513ae50f687709eb274ff24c0f8024cb993f6f545fc2eac3706a1c2b1b5515cdfae9cb197f982876d3b593be106032c5fd0840de680e517e3a20ac341e4cb40697b6e26f852d07bd97022d0009e163a16986a6d505aafc6e8fd74842f273e7d767c9c0de9e769ed5a3de210d4610afcaf9aa6d7fd80b4153d1f925e764754e506d8928465916b04c70cc68277433e4d1dbfc6505a900af0820832c6960605d702e0d22844a0e3d482bf8a25b17b46edc2c57ceea419a316781d38b442da701aec3f6a1433a1a07885896e0a9966aec74a643a9aa26c84d9a0fddec44b31f16449bf3ea63696f810252f8ab2afdb24d6be8a55d539b4d963f578bc950bb0693df119d29d448bc5b6078c4697217253190976d188dc384a47a8914ea24da28811135904964203a42b7c15223ed709df5e4a6a66855ca8f09aa1ed4f7187b72ad48a19cb319ec4029bedc39c118779b5041af150d86c0b2af17027160a3cc9e47ab292af6a6dbae2e076c74b118eb02a7b91b15d76eeb7b89c387916256597e1da1834c62d6a3e251854e941dbf362274257efcec4439a774d814c496b36e14787c31ab9ad48cab66526771b254420288773fd36654a72740ba2f6d31ae49832d02500022acb624f76581046b99dc09e7dc1e5476c4606ae8a53597dd9d00edee99027b11f9ab03302c3c7749c6997989ef576a8af99c95f083a1eb5841b69139213b8544591308a0e7c9095bbd5bbea423dcd") [ 1761.622072][T14968] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xcb, 0x1f000000) 03:38:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1761.773349][T14976] binder: 14974:14976 ERROR: BC_REGISTER_LOOPER called without request [ 1761.860310][T14987] kvm [14975]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:38:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xca, 0x1f000000) 03:38:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xcc, 0x1f000000) [ 1761.914550][T14997] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0a0775b00515f9c6be9a79b3fb5fa2e4ba70d7db371a8343fa7d6bbfb7b9504b4eb87de6fb13d6cb36fdc7e00d092a2d62f4317c510dc32f04ea17131650bda41ce033588850c379c315707f9718091c30eb6e0af3454a636b18c841475fdcaadc66704cd7033f169e0ea988f5679b67b5f72b68c440ab9d42acad4f5609ba5ead82bfbfa390", 0x3c) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x371}], 0x1}, 0x0) 03:38:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000, 0x20000) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='dax\x00', 0x0, 0x0) [ 1762.120375][T15011] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) getsockopt$packet_buf(r2, 0x107, 0x0, &(0x7f0000000200)=""/53, &(0x7f0000000240)=0x35) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) r4 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) bind$x25(r4, &(0x7f0000000140)={0x9, @remote={[], 0x0}}, 0x12) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') gettid() ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='/dev/snd/pcmC#D#p\x00') r5 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000007e00), 0x4000000000000f4, 0xe) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) write$P9_RREADDIR(r5, 0x0, 0x0) 03:38:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x30000000000001) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) r4 = accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) flock(r3, 0x6) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7d76}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r5, 0x9, 0xeb6, 0x8, 0x3, 0x3}, &(0x7f0000000240)=0x14) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1762.474607][T15036] input: syz0 as /devices/virtual/input/input47 03:38:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xcd, 0x1f000000) 03:38:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x2, 0xb, 0x4, 0x4000000, {0x0, 0x2710}, {0x4, 0x0, 0x9, 0x8, 0x2, 0xf94c, "57770caf"}, 0xf3b8, 0x4, @planes=&(0x7f0000000040)={0x5, 0x4, @userptr=0x80, 0xe08}, 0x4}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) 03:38:05 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000100)={0x2, 0x9}) fstat(r2, &(0x7f00000003c0)) syz_genetlink_get_family_id$nbd(0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x9, @win={{0x4, 0x0, 0x7fffffff, 0x1f}, 0x4, 0x9, &(0x7f0000000040)={{0x7, 0x6, 0x2, 0x9}}, 0x101, &(0x7f0000000080)="dbc0832337a50f751e3b08b9805775cae9df7b7cd58a76ecbdf1e60cfa95ce8fdd1c44e415ea2de747591bbc10e8d6e32564114ee7442436cd495fb030eaec583a5b565d53697e45e60568d58038f43e6f9b8e32da2a0e2e80618952dd516ec28b99f94117b68856f426de6a524c25f4ed028814057ff6018911f3", 0x401}}) fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '/dev/vhost-net\x00'}) fcntl$getflags(r2, 0x401) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000340)={0x3, 0x7, {0x55, 0x5, 0xfff, {0x2, 0x8c}, {0x1, 0x1c83fd73}, @period={0x5d, 0x40, 0x0, 0x10001, 0x100, {0x2, 0xfffffffffffffffc, 0x100000001, 0x5}, 0x6, &(0x7f0000000300)=[0x8, 0x0, 0x1, 0x2, 0x30000, 0x6]}}, {0x56, 0x7, 0x46, {0x9, 0x400}, {0xffffffff, 0x5}, @ramp={0xff, 0x1, {0x7, 0x7, 0x9, 0x74}}}}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000002c0)=0x4) [ 1762.529508][ C1] net_ratelimit: 18 callbacks suppressed [ 1762.529518][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1762.541063][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1762.613132][T15045] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1762.690946][T15051] binder: 15048:15051 ERROR: BC_REGISTER_LOOPER called without request 03:38:05 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600880, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000000c0)) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x100, 0x0) connect$inet(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1762.790074][T15062] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:06 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mq_notify(r2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) setsockopt$inet6_dccp_int(r2, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x5, 0x6, 0x4223, {0x9, 0x6, 0x62, 0x4, 0x0, 0x3f, 0x81, 0x400, 0x7, 0x0, 0x5, 0xbb, 0x0, 0x8001, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) write$P9_RREADLINK(r2, &(0x7f0000000140)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000500)) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1e1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x18004, 0x2}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="00fbbb02ff93de27b3d3ae686f0847cd0ce935d056921bfa30b80b7b2e1837f07e883a911918e7249a848670c0f6590a6aa813c11cc038804f097761e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f231a945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e3400000000000000"], 0x1, 0x1) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xd) fallocate(r2, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x4000000000000000, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2000000000000204, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xdffff034}, {0x9, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f000000c080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:38:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xce, 0x1f000000) [ 1762.929139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1762.935014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1763.015067][T15074] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1763.090083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.096718][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1763.169146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.175062][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xcd, 0x1f000000) [ 1763.249719][T15083] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000), 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xcf, 0x1f000000) 03:38:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8000, 0x200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x28}}, 0x0) [ 1763.514922][T15092] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1763.649112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.655022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1763.665214][T15097] binder: 15096:15097 ERROR: BC_REGISTER_LOOPER called without request 03:38:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd0, 0x1f000000) [ 1763.811280][T15107] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:07 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="a087699485ef1c1352320bdbf4401e970797be452f0dd49fc490d4a719059b3b534474f9973213511a31052a0cc4080368b98263e1b9a9aaeeeceba17dd17f4397303f5678f299a52a7adc687fb189f62feaec1ee0e7d3821c6a6f1225fe912b9465950a83e3ff37082ffa275b166d96ab7b9354425e2d0088ceac3d9271affee829348b9e5fedaec930a1ce764bca7b632be26371adab829ccffe08bc03b3334420402af57a2071759b1a9352112b98d1f8999a79f9227c5219d6c09c48f4bc6f401e5859d45d52c3bf3212974b5905537e311660cbf78348b50c24ff5f3b5998684f2ed0ee13d82a7b3bde0a1e54da7edc9a132b62a8a64ab706e599c24dbea5c51e4be9236484e06cde3c074e96578bfbcc176fff7d7aed21ccda0f28f94863f7d54e52b427781f0fbb247fd8ff85351970fbd7f02e6d1c5defbbff8e49d355a2ee6f02d7d51383ad45c921fedbd076c4cb23f013213094f81be72b63371f6e0d47ef6fd9791c12fbdf711633e48bbd376ac9a588c329b7dab102aab51e1e8611131c2cde95048931ba6368e6f38735c0af4ac1e708ca0274e20f962913548d6590a380dca0924dd8756a2722efba49fdbc04f274ab9f5163682f49a4daa82c3c7121e6083dbd003a382b1e47aba4fc5505ca47974457732479319669a3cc7063517a8a4883ade6ace1cf9d4c36ea5cee3fe0377281127d701eff47e37bd3f70041b2a261bb90afc80c5ad5a0d2412d57981c4770e4b58a7e799f8693ac99acf50df14c68563e608fa5fb6e9c41843ab105793bea3897812033522ceb4424f9e349915ed5b98b94c5373cb057923ab3b1b745913547c11b91e90009ec217b57e05951130d2773629fd30f284afa3fb72d5376fc44793dace6a3f976b16f38d0323001fbb8d9dd5bbd04bdc7b2b987d80975f4d6d58884f075d33735e7298ab87416283c5b8d3245dfdc62c02020423e7983708a545ebdfdbceb9b69b94d841fde073fe8f1acb4ce4c8bc446b63b8623c091b4801408c58cad78ca9ccd4594ce30e1a32934460e8814f2f07c60e406f852c6c32836cb1f7ce5b59dd3517f7b0b9d18345a58e3f6ae98037111737b4ccc909abbacc5de0daa8689a8a3c95c41814cb0f1f1a5c2a775bc9110ebe099ff17de0c6dbc44ec9ff36cb4a45aa9f6d9ed8ae0d5684ec26313bcfe3e7180c5c20194f774f4077c04429aabd1fefe1637ffd2fca068f5ba272dfacdf04fa043ac7623f7c850908814952f7ae33822925e368c7ba52b23bc994d670b22d27636a452412d08f22a25f53b4b78044c11860e29c67978ccabe90b31353ef43610b8a04e8498073c5d8b212b60c608c6f83f8e4f8568f34a047070b9dc2d01ce4d440abb89a7adc7ab1b648e7f4f357964d5c19836dcbd92161892f74610e0b08f557b547e7ba38a31ff49826b24881990b5716b88f6479fc9c918f8f150dcbfc20bc879c7a20ba906f7355a17c84c15ec1ba8893eb280c4ea83df48e3b2a7ef4e6e59978616f78935fc35cbeeee28798ead0962695997b540f1d24bd43c51f0919353c82c6a1847e96140d432bc4621ed54bcc243479ad6af982ccd4ef58071d13f448f98ee44104caa44a6a6995484fb3aefa284144431a7cfe8a43a2be88079a6cd103c06b79064bb3eb980ba370d169b30889bd28cddacb5babb7288295cde4b39bfe10b0aae146c049d1a3548e0578c0f80a7d5ab1563d1eec1ff70ef52c137f7bca3fc6438c4411c575cd6a4b33e86153dec8ba265a0887721933d17e732ebadcb0d2bb3931b9b0808ca7e45c8da190df06ba6b7fe176444285fcde5a83ad2f3ebeff9819bfe86c6d4e48db9960d462aa681068afd56bac682e5db0f0351723f691af23295cdaf0f8cc0ad4e7535e33c89792a3f2bcf43844abede6b885e94a55c292d82cd80606eb700710fa26f0d9ff0e161c5702bdf0fd9d7a3ceb99d39204d5dfef360b4bc43b256f7984ace13c0903f8adfe9d3f41f0138b684341dfa51ceaff1d1881e46c25458de869276539357f1126e0552c8cefab7be2bb8d3d99cc48010c69359b1f7556643862772154b0cbc8274ff683c9afe6b0b84e9240402337870253c9d78671e3ce2a811e51f6e8337492888f55d8e84627fa81beae2d8566af47ecc8b96c3c399978a286d4115734486f75e7c27cd3e47beb456807a68928873e2158a398fa4ef6793dde8c9227953e344850b6e40a202e55b06db1702b34d2ecd3619bb4946d21a5473d8120b7645d88549ad5fa6559da05eddcab038ba041cb5702a18c6ef6e46f8fb3ecf002e5370cc4b9698586007dd31d1ad38866693ec0bcb67613926a124b9bad546c35fffdec2dde394042664fee6e7b827aa47a6361315e508bf0ef0603012e1275dbb2746a6117af0929790a9cf1726ca1bc0c2095a5766939c00b7fee0180d909cdf0b1ae6752b867e464be7b55766b7a5e4fa0093c1aaade24098bf90802314a78747bca1cd0b851ca149256322b8b230ab89eed98d4333160f3f9a8dbeb61a6b7328f6d22b814651364bc3f36874a700f67f4f340bcb81c4e8748f9f0ce28ffb0f67348846e779fb8f15deba5515df85c576b81b08c628c69c79a799998df055ef3ff0946ebe90dcdd83e902875f86de19a1f86ca0e4b66871d4e36838f7d8a1a361bc1acdd56f4125bd53ef32ce31baef27d40ccad25d6d3dedc1733e18d7df086d1ee962862ee41f02b0280a2d15afde5131738f8df220c4d4b3731bcbf5b12371e662e3586a537ded", 0x7aa}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) 03:38:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xcf, 0x1f000000) 03:38:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2c9, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2000000000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x2}, 0x8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x10001, 0x4) dup3(r1, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) eventfd2(0x0, 0x3fffe) 03:38:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd1, 0x1f000000) 03:38:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1764.823879][T15124] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd2, 0x1f000000) 03:38:08 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0xc8, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4"}], 0xc8}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:38:08 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x130, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4a1e2a2a198ff6b9dd276c8e8e0bf127d0ed8e8fcb82ffc131650dc56d1111f5aa1741eaeb19a7f1b7233af37c415ea40223e28169e09a5d7c4789255d0257d79ece2a6b906581b240f41e70194ed39bf6b9184fc907832c2984ade5f97257869968999d8473a9e9b"}], 0x130}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:38:08 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="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", 0x7c0}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) [ 1764.999927][T15142] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1765.058896][T15145] binder: 15141:15145 ERROR: BC_REGISTER_LOOPER called without request 03:38:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:08 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="a087699485ef1c1352320bdbf4401e970797be452f0dd49fc490d4a719059b3b534474f9973213511a31052a0cc4080368b98263e1b9a9aaeeeceba17dd17f4397303f5678f299a52a7adc687fb189f62feaec1ee0e7d3821c6a6f1225fe912b9465950a83e3ff37082ffa275b166d96ab7b9354425e2d0088ceac3d9271affee829348b9e5fedaec930a1ce764bca7b632be26371adab829ccffe08bc03b3334420402af57a2071759b1a9352112b98d1f8999a79f9227c5219d6c09c48f4bc6f401e5859d45d52c3bf3212974b5905537e311660cbf78348b50c24ff5f3b5998684f2ed0ee13d82a7b3bde0a1e54da7edc9a132b62a8a64ab706e599c24dbea5c51e4be9236484e06cde3c074e96578bfbcc176fff7d7aed21ccda0f28f94863f7d54e52b427781f0fbb247fd8ff85351970fbd7f02e6d1c5defbbff8e49d355a2ee6f02d7d51383ad45c921fedbd076c4cb23f013213094f81be72b63371f6e0d47ef6fd9791c12fbdf711633e48bbd376ac9a588c329b7dab102aab51e1e8611131c2cde95048931ba6368e6f38735c0af4ac1e708ca0274e20f962913548d6590a380dca0924dd8756a2722efba49fdbc04f274ab9f5163682f49a4daa82c3c7121e6083dbd003a382b1e47aba4fc5505ca47974457732479319669a3cc7063517a8a4883ade6ace1cf9d4c36ea5cee3fe0377281127d701eff47e37bd3f70041b2a261bb90afc80c5ad5a0d2412d57981c4770e4b58a7e799f8693ac99acf50df14c68563e608fa5fb6e9c41843ab105793bea3897812033522ceb4424f9e349915ed5b98b94c5373cb057923ab3b1b745913547c11b91e90009ec217b57e05951130d2773629fd30f284afa3fb72d5376fc44793dace6a3f976b16f38d0323001fbb8d9dd5bbd04bdc7b2b987d80975f4d6d58884f075d33735e7298ab87416283c5b8d3245dfdc62c02020423e7983708a545ebdfdbceb9b69b94d841fde073fe8f1acb4ce4c8bc446b63b8623c091b4801408c58cad78ca9ccd4594ce30e1a32934460e8814f2f07c60e406f852c6c32836cb1f7ce5b59dd3517f7b0b9d18345a58e3f6ae98037111737b4ccc909abbacc5de0daa8689a8a3c95c41814cb0f1f1a5c2a775bc9110ebe099ff17de0c6dbc44ec9ff36cb4a45aa9f6d9ed8ae0d5684ec26313bcfe3e7180c5c20194f774f4077c04429aabd1fefe1637ffd2fca068f5ba272dfacdf04fa043ac7623f7c850908814952f7ae33822925e368c7ba52b23bc994d670b22d27636a452412d08f22a25f53b4b78044c11860e29c67978ccabe90b31353ef43610b8a04e8498073c5d8b212b60c608c6f83f8e4f8568f34a047070b9dc2d01ce4d440abb89a7adc7ab1b648e7f4f357964d5c19836dcbd92161892f74610e0b08f557b547e7ba38a31ff49826b24881990b5716b88f6479fc9c918f8f150dcbfc20bc879c7a20ba906f7355a17c84c15ec1ba8893eb280c4ea83df48e3b2a7ef4e6e59978616f78935fc35cbeeee28798ead0962695997b540f1d24bd43c51f0919353c82c6a1847e96140d432bc4621ed54bcc243479ad6af982ccd4ef58071d13f448f98ee44104caa44a6a6995484fb3aefa284144431a7cfe8a43a2be88079a6cd103c06b79064bb3eb980ba370d169b30889bd28cddacb5babb7288295cde4b39bfe10b0aae146c049d1a3548e0578c0f80a7d5ab1563d1eec1ff70ef52c137f7bca3fc6438c4411c575cd6a4b33e86153dec8ba265a0887721933d17e732ebadcb0d2bb3931b9b0808ca7e45c8da190df06ba6b7fe176444285fcde5a83ad2f3ebeff9819bfe86c6d4e48db9960d462aa681068afd56bac682e5db0f0351723f691af23295cdaf0f8cc0ad4e7535e33c89792a3f2bcf43844abede6b885e94a55c292d82cd80606eb700710fa26f0d9ff0e161c5702bdf0fd9d7a3ceb99d39204d5dfef360b4bc43b256f7984ace13c0903f8adfe9d3f41f0138b684341dfa51ceaff1d1881e46c25458de869276539357f1126e0552c8cefab7be2bb8d3d99cc48010c69359b1f7556643862772154b0cbc8274ff683c9afe6b0b84e9240402337870253c9d78671e3ce2a811e51f6e8337492888f55d8e84627fa81beae2d8566af47ecc8b96c3c399978a286d4115734486f75e7c27cd3e47beb456807a68928873e2158a398fa4ef6793dde8c9227953e344850b6e40a202e55b06db1702b34d2ecd3619bb4946d21a5473d8120b7645d88549ad5fa6559da05eddcab038ba041cb5702a18c6ef6e46f8fb3ecf002e5370cc4b9698586007dd31d1ad38866693ec0bcb67613926a124b9bad546c35fffdec2dde394042664fee6e7b827aa47a6361315e508bf0ef0603012e1275dbb2746a6117af0929790a9cf1726ca1bc0c2095a5766939c00b7fee0180d909cdf0b1ae6752b867e464be7b55766b7a5e4fa0093c1aaade24098bf90802314a78747bca1cd0b851ca149256322b8b230ab89eed98d4333160f3f9a8dbeb61a6b7328f6d22b814651364bc3f36874a700f67f4f340bcb81c4e8748f9f0ce28ffb0f67348846e779fb8f15deba5515df85c576b81b08c628c69c79a799998df055ef3ff0946ebe90dcdd83e902875f86de19a1f86ca0e4b66871d4e36838f7d8a1a361bc1acdd56f4125bd53ef32ce31baef27d40ccad25d6d3dedc1733e18d7df086d1ee962862ee41f02b0280a2d", 0x78e}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) 03:38:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:08 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="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", 0x7b1}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) 03:38:08 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="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", 0x7b5}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) [ 1765.232644][T15163] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:08 executing program 1: [ 1765.349306][T15169] binder: 15166:15169 ERROR: BC_REGISTER_LOOPER called without request 03:38:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:08 executing program 4: 03:38:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd3, 0x1f000000) 03:38:08 executing program 5: 03:38:08 executing program 1: [ 1765.588536][T15190] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:08 executing program 5: 03:38:08 executing program 4: 03:38:08 executing program 1: 03:38:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:09 executing program 5: 03:38:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd4, 0x1f000000) 03:38:09 executing program 4: 03:38:09 executing program 1: 03:38:09 executing program 5: 03:38:09 executing program 4: 03:38:09 executing program 1: [ 1766.160942][T15213] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1766.258683][T15216] binder: 15215:15216 ERROR: BC_REGISTER_LOOPER called without request 03:38:09 executing program 1: 03:38:09 executing program 5: [ 1766.449274][T15228] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:10 executing program 4: 03:38:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd5, 0x1f000000) 03:38:10 executing program 1: 03:38:10 executing program 5: 03:38:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:10 executing program 1: 03:38:10 executing program 4: [ 1767.077364][T15245] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:10 executing program 5: [ 1767.144292][T15247] binder: 15246:15247 ERROR: BC_REGISTER_LOOPER called without request 03:38:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd6, 0x1f000000) 03:38:10 executing program 4: 03:38:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1767.394758][T15266] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1767.422802][T15267] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1767.809128][ C1] net_ratelimit: 22 callbacks suppressed [ 1767.809134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1767.820745][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:11 executing program 1: 03:38:11 executing program 5: 03:38:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="a087699485ef1c1352320bdbf4401e970797be452f0dd49fc490d4a719059b3b534474f9973213511a31052a0cc4080368b98263e1b9a9aaeeeceba17dd17f4397303f5678f299a52a7adc687fb189f62feaec1ee0e7d3821c6a6f1225fe912b9465950a83e3ff37082ffa275b166d96ab7b9354425e2d0088ceac3d9271affee829348b9e5fedaec930a1ce764bca7b632be26371adab829ccffe08bc03b3334420402af57a2071759b1a9352112b98d1f8999a79f9227c5219d6c09c48f4bc6f401e5859d45d52c3bf3212974b5905537e311660cbf78348b50c24ff5f3b5998684f2ed0ee13d82a7b3bde0a1e54da7edc9a132b62a8a64ab706e599c24dbea5c51e4be9236484e06cde3c074e96578bfbcc176fff7d7aed21ccda0f28f94863f7d54e52b427781f0fbb247fd8ff85351970fbd7f02e6d1c5defbbff8e49d355a2ee6f02d7d51383ad45c921fedbd076c4cb23f013213094f81be72b63371f6e0d47ef6fd9791c12fbdf711633e48bbd376ac9a588c329b7dab102aab51e1e8611131c2cde95048931ba6368e6f38735c0af4ac1e708ca0274e20f962913548d6590a380dca0924dd8756a2722efba49fdbc04f274ab9f5163682f49a4daa82c3c7121e6083dbd003a382b1e47aba4fc5505ca47974457732479319669a3cc7063517a8a4883ade6ace1cf9d4c36ea5cee3fe0377281127d701eff47e37bd3f70041b2a261bb90afc80c5ad5a0d2412d57981c4770e4b58a7e799f8693ac99acf50df14c68563e608fa5fb6e9c41843ab105793bea3897812033522ceb4424f9e349915ed5b98b94c5373cb057923ab3b1b745913547c11b91e90009ec217b57e05951130d2773629fd30f284afa3fb72d5376fc44793dace6a3f976b16f38d0323001fbb8d9dd5bbd04bdc7b2b987d80975f4d6d58884f075d33735e7298ab87416283c5b8d3245dfdc62c02020423e7983708a545ebdfdbceb9b69b94d841fde073fe8f1acb4ce4c8bc446b63b8623c091b4801408c58cad78ca9ccd4594ce30e1a32934460e8814f2f07c60e406f852c6c32836cb1f7ce5b59dd3517f7b0b9d18345a58e3f6ae98037111737b4ccc909abbacc5de0daa8689a8a3c95c41814cb0f1f1a5c2a775bc9110ebe099ff17de0c6dbc44ec9ff36cb4a45aa9f6d9ed8ae0d5684ec26313bcfe3e7180c5c20194f774f4077c04429aabd1fefe1637ffd2fca068f5ba272dfacdf04fa043ac7623f7c850908814952f7ae33822925e368c7ba52b23bc994d670b22d27636a452412d08f22a25f53b4b78044c11860e29c67978ccabe90b31353ef43610b8a04e8498073c5d8b212b60c608c6f83f8e4f8568f34a047070b9dc2d01ce4d440abb89a7adc7ab1b648e7f4f357964d5c19836dcbd92161892f74610e0b08f557b547e7ba38a31ff49826b24881990b5716b88f6479fc9c918f8f150dcbfc20bc879c7a20ba906f7355a17c84c15ec1ba8893eb280c4ea83df48e3b2a7ef4e6e59978616f78935fc35cbeeee28798ead0962695997b540f1d24bd43c51f0919353c82c6a1847e96140d432bc4621ed54bcc243479ad6af982ccd4ef58071d13f448f98ee44104caa44a6a6995484fb3aefa284144431a7cfe8a43a2be88079a6cd103c06b79064bb3eb980ba370d169b30889bd28cddacb5babb7288295cde4b39bfe10b0aae146c049d1a3548e0578c0f80a7d5ab1563d1eec1ff70ef52c137f7bca3fc6438c4411c575cd6a4b33e86153dec8ba265a0887721933d17e732ebadcb0d2bb3931b9b0808ca7e45c8da190df06ba6b7fe176444285fcde5a83ad2f3ebeff9819bfe86c6d4e48db9960d462aa681068afd56bac682e5db0f0351723f691af23295cdaf0f8cc0ad4e7535e33c89792a3f2bcf43844abede6b885e94a55c292d82cd80606eb700710fa26f0d9ff0e161c5702bdf0fd9d7a3ceb99d39204d5dfef360b4bc43b256f7984ace13c0903f8adfe9d3f41f0138b684341dfa51ceaff1d1881e46c25458de869276539357f1126e0552c8cefab7be2bb8d3d99cc48010c69359b1f7556643862772154b0cbc8274ff683c9afe6b0b84e9240402337870253c9d78671e3ce2a811e51f6e8337492888f55d8e84627fa81beae2d8566af47ecc8b96c3c399978a286d4115734486f75e7c27cd3e47beb456807a68928873e2158a398fa4ef6793dde8c9227953e344850b6e40a202e55b06db1702b34d2ecd3619bb4946d21a5473d8120b7645d88549ad5fa6559da05eddcab038ba041cb5702a18c6ef6e46f8fb3ecf002e5370cc4b9698586007dd31d1ad38866693ec0bcb67613926a124b9bad546c35fffdec2dde394042664fee6e7b827aa47a6361315e508bf0ef0603012e1275dbb2746a6117af0929790a9cf1726ca1bc0c2095a5766939c00b7fee0180d909cdf0b1ae6752b867e464be7b55766b7a5e4fa0093c1aaade24098bf90802314a78747bca1cd0b851ca149256322b8b230ab89eed98d4333160f3f9a8dbeb61a6b7328f6d22b814651364bc3f36874a700f67f4f340bcb81c4e8748f9f0ce28ffb0f67348846e779fb8f15deba5515df85c576b81b08c628c69c79a799998df055ef3ff0946ebe90dcdd83e902875f86de19a1f86ca0e4b66871d4e36838f7d8a1a361bc1acdd56f4125bd53ef32ce31baef27d40ccad25d6d3dedc1733e18d7df086d1ee962862ee41f02b0280a2d15afde5131738f8df220c4d4b3731bcbf5b12371e662e3586a537ded5be98ea7", 0x7ae}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) 03:38:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd7, 0x1f000000) 03:38:11 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x158, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4a1e2a2a198ff6b9dd276c8e8e0bf127d0ed8e8fcb82ffc131650dc56d1111f5aa1741eaeb19a7f1b7233af37c415ea40223e28169e09a5d7c4789255d0257d79ece2a6b906581b240f41e70194ed39bf6b9184fc907832c2984ade5f97257869968999d8473a9e9bec1a05d31199cdf306918f875369501d6bfd8a76f80d9abf6c19834435634df6377a4d8746ec672d"}], 0x158}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:38:11 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="a087699485ef1c1352320bdbf4401e970797be452f0dd49fc490d4a719059b3b534474f9973213511a31052a0cc4080368b98263e1b9a9aaeeeceba17dd17f4397303f5678f299a52a7adc687fb189f62feaec1ee0e7d3821c6a6f1225fe912b9465950a83e3ff37082ffa275b166d96ab7b9354425e2d0088ceac3d9271affee829348b9e5fedaec930a1ce764bca7b632be26371adab829ccffe08bc03b3334420402af57a2071759b1a9352112b98d1f8999a79f9227c5219d6c09c48f4bc6f401e5859d45d52c3bf3212974b5905537e311660cbf78348b50c24ff5f3b5998684f2ed0ee13d82a7b3bde0a1e54da7edc9a132b62a8a64ab706e599c24dbea5c51e4be9236484e06cde3c074e96578bfbcc176fff7d7aed21ccda0f28f94863f7d54e52b427781f0fbb247fd8ff85351970fbd7f02e6d1c5defbbff8e49d355a2ee6f02d7d51383ad45c921fedbd076c4cb23f013213094f81be72b63371f6e0d47ef6fd9791c12fbdf711633e48bbd376ac9a588c329b7dab102aab51e1e8611131c2cde95048931ba6368e6f38735c0af4ac1e708ca0274e20f962913548d6590a380dca0924dd8756a2722efba49fdbc04f274ab9f5163682f49a4daa82c3c7121e6083dbd003a382b1e47aba4fc5505ca47974457732479319669a3cc7063517a8a4883ade6ace1cf9d4c36ea5cee3fe0377281127d701eff47e37bd3f70041b2a261bb90afc80c5ad5a0d2412d57981c4770e4b58a7e799f8693ac99acf50df14c68563e608fa5fb6e9c41843ab105793bea3897812033522ceb4424f9e349915ed5b98b94c5373cb057923ab3b1b745913547c11b91e90009ec217b57e05951130d2773629fd30f284afa3fb72d5376fc44793dace6a3f976b16f38d0323001fbb8d9dd5bbd04bdc7b2b987d80975f4d6d58884f075d33735e7298ab87416283c5b8d3245dfdc62c02020423e7983708a545ebdfdbceb9b69b94d841fde073fe8f1acb4ce4c8bc446b63b8623c091b4801408c58cad78ca9ccd4594ce30e1a32934460e8814f2f07c60e406f852c6c32836cb1f7ce5b59dd3517f7b0b9d18345a58e3f6ae98037111737b4ccc909abbacc5de0daa8689a8a3c95c41814cb0f1f1a5c2a775bc9110ebe099ff17de0c6dbc44ec9ff36cb4a45aa9f6d9ed8ae0d5684ec26313bcfe3e7180c5c20194f774f4077c04429aabd1fefe1637ffd2fca068f5ba272dfacdf04fa043ac7623f7c850908814952f7ae33822925e368c7ba52b23bc994d670b22d27636a452412d08f22a25f53b4b78044c11860e29c67978ccabe90b31353ef43610b8a04e8498073c5d8b212b60c608c6f83f8e4f8568f34a047070b9dc2d01ce4d440abb89a7adc7ab1b648e7f4f357964d5c19836dcbd92161892f74610e0b08f557b547e7ba38a31ff49826b24881990b5716b88f6479fc9c918f8f150dcbfc20bc879c7a20ba906f7355a17c84c15ec1ba8893eb280c4ea83df48e3b2a7ef4e6e59978616f78935fc35cbeeee28798ead0962695997b540f1d24bd43c51f0919353c82c6a1847e96140d432bc4621ed54bcc243479ad6af982ccd4ef58071d13f448f98ee44104caa44a6a6995484fb3aefa284144431a7cfe8a43a2be88079a6cd103c06b79064bb3eb980ba370d169b30889bd28cddacb5babb7288295cde4b39bfe10b0aae146c049d1a3548e0578c0f80a7d5ab1563d1eec1ff70ef52c137f7bca3fc6438c4411c575cd6a4b33e86153dec8ba265a0887721933d17e732ebadcb0d2bb3931b9b0808ca7e45c8da190df06ba6b7fe176444285fcde5a83ad2f3ebeff9819bfe86c6d4e48db9960d462aa681068afd56bac682e5db0f0351723f691af23295cdaf0f8cc0ad4e7535e33c89792a3f2bcf43844abede6b885e94a55c292d82cd80606eb700710fa26f0d9ff0e161c5702bdf0fd9d7a3ceb99d39204d5dfef360b4bc43b256f7984ace13c0903f8adfe9d3f41f0138b684341dfa51ceaff1d1881e46c25458de869276539357f1126e0552c8cefab7be2bb8d3d99cc48010c69359b1f7556643862772154b0cbc8274ff683c9afe6b0b84e9240402337870253c9d78671e3ce2a811e51f6e8337492888f55d8e84627fa81beae2d8566af47ecc8b96c3c399978a286d4115734486f75e7c27cd3e47beb456807a68928873e2158a398fa4ef6793dde8c9227953e344850b6e40a202e55b06db1702b34d2ecd3619bb4946d21a5473d8120b7645d88549ad5fa6559da05eddcab038ba041cb5702a18c6ef6e46f8fb3ecf002e5370cc4b9698586007dd31d1ad38866693ec0bcb67613926a124b9bad546c35fffdec2dde394042664fee6e7b827aa47a6361315e508bf0ef0603012e1275dbb2746a6117af0929790a9cf1726ca1bc0c2095a5766939c00b7fee0180d909cdf0b1ae6752b867e464be7b55766b7a5e4fa0093c1aaade24098bf90802314a78747bca1cd0b851ca149256322b8b230ab89eed98d4333160f3f9a8dbeb61a6b7328f6d22b814651364bc3f36874a700f67f4f340bcb81c4e8748f9f0ce28ffb0f67348846e779fb8f15deba5515df85c576b81b08c628c69c79a799998df055ef3ff0946ebe90dcdd83e902875f86de19a1f86ca0e4b66871d4e36838f7d8a1a361bc1acdd56f4125bd53ef32ce31baef27d40ccad25d6d3dedc1733e18d7df086d1ee962862ee41f02b0280a2d15afde5131738f8df220c4", 0x799}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) [ 1767.960524][T15276] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="a087699485ef1c1352320bdbf4401e970797be452f0dd49fc490d4a719059b3b534474f9973213511a31052a0cc4080368b98263e1b9a9aaeeeceba17dd17f4397303f5678f299a52a7adc687fb189f62feaec1ee0e7d3821c6a6f1225fe912b9465950a83e3ff37082ffa275b166d96ab7b9354425e2d0088ceac3d9271affee829348b9e5fedaec930a1ce764bca7b632be26371adab829ccffe08bc03b3334420402af57a2071759b1a9352112b98d1f8999a79f9227c5219d6c09c48f4bc6f401e5859d45d52c3bf3212974b5905537e311660cbf78348b50c24ff5f3b5998684f2ed0ee13d82a7b3bde0a1e54da7edc9a132b62a8a64ab706e599c24dbea5c51e4be9236484e06cde3c074e96578bfbcc176fff7d7aed21ccda0f28f94863f7d54e52b427781f0fbb247fd8ff85351970fbd7f02e6d1c5defbbff8e49d355a2ee6f02d7d51383ad45c921fedbd076c4cb23f013213094f81be72b63371f6e0d47ef6fd9791c12fbdf711633e48bbd376ac9a588c329b7dab102aab51e1e8611131c2cde95048931ba6368e6f38735c0af4ac1e708ca0274e20f962913548d6590a380dca0924dd8756a2722efba49fdbc04f274ab9f5163682f49a4daa82c3c7121e6083dbd003a382b1e47aba4fc5505ca47974457732479319669a3cc7063517a8a4883ade6ace1cf9d4c36ea5cee3fe0377281127d701eff47e37bd3f70041b2a261bb90afc80c5ad5a0d2412d57981c4770e4b58a7e799f8693ac99acf50df14c68563e608fa5fb6e9c41843ab105793bea3897812033522ceb4424f9e349915ed5b98b94c5373cb057923ab3b1b745913547c11b91e90009ec217b57e05951130d2773629fd30f284afa3fb72d5376fc44793dace6a3f976b16f38d0323001fbb8d9dd5bbd04bdc7b2b987d80975f4d6d58884f075d33735e7298ab87416283c5b8d3245dfdc62c02020423e7983708a545ebdfdbceb9b69b94d841fde073fe8f1acb4ce4c8bc446b63b8623c091b4801408c58cad78ca9ccd4594ce30e1a32934460e8814f2f07c60e406f852c6c32836cb1f7ce5b59dd3517f7b0b9d18345a58e3f6ae98037111737b4ccc909abbacc5de0daa8689a8a3c95c41814cb0f1f1a5c2a775bc9110ebe099ff17de0c6dbc44ec9ff36cb4a45aa9f6d9ed8ae0d5684ec26313bcfe3e7180c5c20194f774f4077c04429aabd1fefe1637ffd2fca068f5ba272dfacdf04fa043ac7623f7c850908814952f7ae33822925e368c7ba52b23bc994d670b22d27636a452412d08f22a25f53b4b78044c11860e29c67978ccabe90b31353ef43610b8a04e8498073c5d8b212b60c608c6f83f8e4f8568f34a047070b9dc2d01ce4d440abb89a7adc7ab1b648e7f4f357964d5c19836dcbd92161892f74610e0b08f557b547e7ba38a31ff49826b24881990b5716b88f6479fc9c918f8f150dcbfc20bc879c7a20ba906f7355a17c84c15ec1ba8893eb280c4ea83df48e3b2a7ef4e6e59978616f78935fc35cbeeee28798ead0962695997b540f1d24bd43c51f0919353c82c6a1847e96140d432bc4621ed54bcc243479ad6af982ccd4ef58071d13f448f98ee44104caa44a6a6995484fb3aefa284144431a7cfe8a43a2be88079a6cd103c06b79064bb3eb980ba370d169b30889bd28cddacb5babb7288295cde4b39bfe10b0aae146c049d1a3548e0578c0f80a7d5ab1563d1eec1ff70ef52c137f7bca3fc6438c4411c575cd6a4b33e86153dec8ba265a0887721933d17e732ebadcb0d2bb3931b9b0808ca7e45c8da190df06ba6b7fe176444285fcde5a83ad2f3ebeff9819bfe86c6d4e48db9960d462aa681068afd56bac682e5db0f0351723f691af23295cdaf0f8cc0ad4e7535e33c89792a3f2bcf43844abede6b885e94a55c292d82cd80606eb700710fa26f0d9ff0e161c5702bdf0fd9d7a3ceb99d39204d5dfef360b4bc43b256f7984ace13c0903f8adfe9d3f41f0138b684341dfa51ceaff1d1881e46c25458de869276539357f1126e0552c8cefab7be2bb8d3d99cc48010c69359b1f7556643862772154b0cbc8274ff683c9afe6b0b84e9240402337870253c9d78671e3ce2a811e51f6e8337492888f55d8e84627fa81beae2d8566af47ecc8b96c3c399978a286d4115734486f75e7c27cd3e47beb456807a68928873e2158a398fa4ef6793dde8c9227953e344850b6e40a202e55b06db1702b34d2ecd3619bb4946d21a5473d8120b7645d88549ad5fa6559da05eddcab038ba041cb5702a18c6ef6e46f8fb3ecf002e5370cc4b9698586007dd31d1ad38866693ec0bcb67613926a124b9bad546c35fffdec2dde394042664fee6e7b827aa47a6361315e508bf0ef0603012e1275dbb2746a6117af0929790a9cf1726ca1bc0c2095a5766939c00b7fee0180d909cdf0b1ae6752b867e464be7b55766b7a5e4fa0093c1aaade24098bf90802314a78747bca1cd0b851ca149256322b8b230ab89eed98d4333160f3f9a8dbeb61a6b7328f6d22b814651364bc3f36874a700f67f4f340bcb81c4e8748f9f0ce28ffb0f67348846e779fb8f15deba5515df85c576b81b08c628c69c79a799998df055ef3ff0946ebe90dcdd83e902875f86de19a1f86ca0e4b66871d4e36838f7d8a1a361bc1acdd56f4125bd53ef32ce31baef27d40ccad25d6d3dedc1733e18d7df086d1ee962862ee41f02b0280a2d15afde5131738f8df220c4d4b3731bcbf5b12371e662e3586a537d", 0x7a9}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) [ 1768.020938][T15282] binder: 15279:15282 ERROR: BC_REGISTER_LOOPER called without request 03:38:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:11 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="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", 0x7a7}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) 03:38:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1768.249931][T15303] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1768.410689][T15311] binder: 15309:15311 ERROR: BC_REGISTER_LOOPER called without request [ 1768.609100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.615048][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd8, 0x1f000000) 03:38:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd7, 0x1f000000) 03:38:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd4, 0x1f000000) 03:38:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1768.769093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.774943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.833059][T15320] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1768.995361][T15329] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xd9, 0x1f000000) [ 1769.054787][T15329] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000), 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:12 executing program 1: r0 = gettid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x802, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x3, 0x4) setpriority(0x1, r0, 0x0) [ 1769.169151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.175037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1769.319457][T15342] binder: BINDER_SET_CONTEXT_MGR already set [ 1769.325905][T15342] binder: 15340:15342 ioctl 40046207 0 returned -16 [ 1769.333421][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.333770][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1769.340450][T15346] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1769.384626][T15351] binder: 15347:15351 ERROR: BC_REGISTER_LOOPER called without request [ 1769.406986][T15342] binder: 15340:15342 ERROR: BC_REGISTER_LOOPER called without request 03:38:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xda, 0x1f000000) 03:38:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:12 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa8000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r1, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0xf5) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x1, 0x0, 0x0, 0x2}, 0x10) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x5, 0x8001, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) 03:38:12 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fcntl$setstatus(r0, 0x4, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) [ 1769.688230][T15362] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1769.766985][T15365] binder: 15364:15365 ioctl c0306201 0 returned -14 03:38:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xdb, 0x1f000000) [ 1769.874633][T15374] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1769.895628][T15375] overlayfs: filesystem on './file0' not supported as upperdir [ 1769.911421][T15374] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:13 executing program 1: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x50000, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x2, 0x85, 0x4, 0x3f, 0xff, 0x1ff}, @ipv6={0x2, 0x6, "958209", 0xc6, 0xc, 0x4, @mcast2, @ipv4={[], [], @loopback}, {[@fragment={0x3e, 0x0, 0xd0, 0x4, 0x0, 0x1, 0x66}], @udp={0x4e23, 0x4e23, 0xbe, 0x0, [@guehdr={0x1, 0x4, 0x461, 0x4, 0x100}, @guehdr={0x1, 0x7, 0x8001, 0x2, 0x100}, @guehdr={0x1, 0x6, 0x4, 0x40, 0x100}, @guehdr={0x1, 0x0, 0x0, 0x1000, 0x100}, @guehdr={0x2, 0x9, 0x800, 0xd3c5, 0x100, [0x80]}, @guehdr={0x1, 0xffff, 0x5, 0x80000001, 0x100}, @guehdr={0x2, 0xfff, 0x81, 0x5, 0x100, [0x80]}], "486710d8d5a643e2947a307fea8ada078f016c7f76af466e0f7ed405a8472386ae89d09646229be734a1d18b4d968db92cbcd5020a8933fc78dd74462daf921fb26d97274344738d6ab59f74b20d6fb3cdf3e641371d3e49da5eef674050bf50c7d71115a3db0d09c321e365c54b38a100aa4b00b366259112da2a8621da3beed544311f876e769c3bfe27e16f8b16edb86b"}}}}, 0xf8) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40486311}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x1) 03:38:13 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000001c0)) ftruncate(r0, 0x208200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) getresgid(0x0, &(0x7f00000008c0), &(0x7f0000000900)) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x602200, 0x7ffffe, 0x4002011, r2, 0x0) 03:38:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1770.069426][T15383] binder: 15382:15383 ioctl c0306201 20a20000 returned -14 [ 1770.090333][T15384] binder: 15382:15384 unknown command 0 [ 1770.096577][T15384] binder: 15382:15384 ioctl c0306201 20a20000 returned -22 03:38:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0800b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x400000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) [ 1770.150796][T15386] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1770.245201][ T26] audit: type=1804 audit(2000000293.350:318): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir532092540/syzkaller.1tuw3x/1423/file0/bus" dev="ramfs" ino=269548 res=1 [ 1770.364997][ T26] audit: type=1804 audit(2000000293.380:319): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir532092540/syzkaller.1tuw3x/1423/file0/bus" dev="ramfs" ino=269548 res=1 [ 1770.419724][T15399] binder: 15397:15399 ERROR: BC_REGISTER_LOOPER called without request [ 1770.435442][ T26] audit: type=1804 audit(2000000293.380:320): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir532092540/syzkaller.1tuw3x/1423/file0/bus" dev="ramfs" ino=269548 res=1 [ 1770.496329][ T26] audit: type=1804 audit(2000000293.600:321): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir532092540/syzkaller.1tuw3x/1423/file0/file0/bus" dev="ramfs" ino=269579 res=1 [ 1770.537559][ T26] audit: type=1804 audit(2000000293.600:322): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir532092540/syzkaller.1tuw3x/1423/file0/file0/bus" dev="ramfs" ino=269579 res=1 03:38:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xdc, 0x1f000000) 03:38:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0xffff, 0x20, 0x7, 0x9, 0x20], 0x5, 0x7, 0x14, 0x80, 0xffff, 0x7, {0x3ff, 0x7, 0x1, 0x1, 0x6, 0xffffffff, 0x4, 0x81, 0xffff, 0x4c, 0x10001, 0x3, 0x7, 0x0, "93b9170245645d1bfad3c7f8abd2f99d3f26eeeb244b91dbee308a1dc2ecd337"}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup2(r0, r3) recvfrom$rose(r6, &(0x7f0000000000)=""/5, 0x5, 0x0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r5, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x8188aea6, &(0x7f0000001040)) 03:38:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x24382, 0x0) r1 = socket(0x3, 0x6, 0xe4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0xfff, 0x0, 0x287f2540, 0x1ff, 0x6, 0x9, 0x100000000, 0xfffffffffffff20f, 0x5, 0x9, 0xe3, 0xfffffffffffffffd, 0x4b2, 0xe7, 0x8c]}, &(0x7f0000000400)=0x100) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r2, 0x2}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4080aea2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, r5, 0x209, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x48bb}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8d5d}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x96}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8080000000}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x14) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x7a0b5c5, 0x1, 0x1, 0x2, 0x0, 0x3f, 0x9, 0x3, 0x0, 0x4, 0x14e, 0x3, 0x9, 0x7, 0x6, 0x10}}) [ 1770.576852][ T26] audit: type=1804 audit(2000000293.600:323): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir532092540/syzkaller.1tuw3x/1423/file0/file0/bus" dev="ramfs" ino=269579 res=1 [ 1770.625649][T15408] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:13 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0xfffffffffffffffb, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r0, &(0x7f0000000040)={r2, r1, 0x4}) 03:38:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xdd, 0x1f000000) 03:38:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1770.824355][T15422] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:14 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x48100, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000440)={'rose0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0x2000008, 0x1f6) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x6685) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000140)='em0eth1.\x00', 0x9) [ 1770.917955][T15431] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1771.159919][T15443] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1771.255275][T15448] binder: 15447:15448 ERROR: BC_REGISTER_LOOPER called without request 03:38:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xde, 0x1f000000) 03:38:14 executing program 4: r0 = socket(0xa, 0x80010, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x30000001}) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) 03:38:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0x3, 0x0, 0x40, 0x0, 0x10000, 0x401, 0x9, 0x200, 0xcb34, 0x228, 0x6, 0x0, 0x841b, 0x1}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f9c2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/90, 0x5a}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) 03:38:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1771.573749][T15457] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xdf, 0x1f000000) 03:38:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe0, 0x1f000000) [ 1771.704650][T15470] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe1, 0x1f000000) [ 1771.953633][T15482] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1772.165562][T15491] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1772.246926][T15493] binder: 15492:15493 ERROR: BC_REGISTER_LOOPER called without request 03:38:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe2, 0x1f000000) 03:38:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffffef) r7 = accept4(r4, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x2) 03:38:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0x3, 0x0, 0x40, 0x0, 0x10000, 0x401, 0x9, 0x200, 0xcb34, 0x228, 0x6, 0x0, 0x841b, 0x1}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f9c2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/90, 0x5a}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) [ 1772.472820][T15506] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1772.484417][T15508] binder: 15502:15508 ERROR: BC_REGISTER_LOOPER called without request [ 1772.533246][T15514] binder: 15509:15514 ERROR: BC_REGISTER_LOOPER called without request 03:38:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe3, 0x1f000000) [ 1772.624653][T15512] sctp: [Deprecated]: syz-executor4 (pid 15512) Use of int in maxseg socket option. [ 1772.624653][T15512] Use struct sctp_assoc_value instead 03:38:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1772.711121][T15521] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1772.830620][T15512] sctp: [Deprecated]: syz-executor4 (pid 15512) Use of int in maxseg socket option. [ 1772.830620][T15512] Use struct sctp_assoc_value instead [ 1772.844080][T15531] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1772.929165][ C1] net_ratelimit: 18 callbacks suppressed [ 1772.929173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1772.940680][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe4, 0x1f000000) 03:38:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffffef) r7 = accept4(r4, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x2) [ 1773.115720][T15540] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:16 executing program 1: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x75}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x1, 0x30}, &(0x7f00000001c0)=0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'sed\x00'}, 0x2c) 03:38:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1773.318918][T15550] sctp: [Deprecated]: syz-executor4 (pid 15550) Use of int in maxseg socket option. [ 1773.318918][T15550] Use struct sctp_assoc_value instead [ 1773.333751][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1773.333808][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe5, 0x1f000000) [ 1773.364388][T15555] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1773.444399][T15555] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1773.488025][T15564] binder: 15559:15564 ERROR: BC_REGISTER_LOOPER called without request [ 1773.500024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1773.500438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1773.520464][T15563] binder: 15562:15563 ERROR: BC_REGISTER_LOOPER called without request 03:38:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1773.570309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1773.576317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1773.596648][T15568] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffffef) r7 = accept4(r4, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x2) 03:38:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe6, 0x1f000000) 03:38:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1773.713955][T15574] binder: 15573:15574 ERROR: BC_REGISTER_LOOPER called without request [ 1773.852045][T15585] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe7, 0x1f000000) [ 1773.923348][T15589] sctp: [Deprecated]: syz-executor4 (pid 15589) Use of int in maxseg socket option. [ 1773.923348][T15589] Use struct sctp_assoc_value instead 03:38:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1774.049142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.055023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1774.091347][T15597] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe8, 0x1f000000) 03:38:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffffef) r7 = accept4(r4, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x2) [ 1774.321831][T15611] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1774.375270][T15614] binder: 15613:15614 ERROR: BC_REGISTER_LOOPER called without request [ 1774.410295][T15611] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) accept4$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFALIAS={0x14, 0x1c, 'bond_slave_0\x00'}]}, 0x34}}, 0x0) 03:38:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xe9, 0x1f000000) [ 1774.491309][T15610] sctp: [Deprecated]: syz-executor4 (pid 15610) Use of int in maxseg socket option. [ 1774.491309][T15610] Use struct sctp_assoc_value instead [ 1774.579743][T15625] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffffef) accept4(r4, 0x0, 0x0, 0x0) [ 1774.620312][T15628] netlink: 'syz-executor1': attribute type 28 has an invalid length. 03:38:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1774.687634][T15632] netlink: 'syz-executor1': attribute type 28 has an invalid length. 03:38:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xea, 0x1f000000) [ 1774.796246][T15640] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1774.806504][T15634] sctp: [Deprecated]: syz-executor4 (pid 15634) Use of int in maxseg socket option. [ 1774.806504][T15634] Use struct sctp_assoc_value instead 03:38:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) ioctl(r0, 0x293d0567, &(0x7f00000000c0)="8ddc1f029e791829faed12") r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x400, 0x0) getdents64(r1, &(0x7f0000000400)=""/136, 0x88) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/127) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f0000000380)=0x5, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x200, 0x6, 0xffffffffffffff34, 0x7}) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0xcb, &(0x7f00000001c0)=[{&(0x7f0000000040)="24000000670007071dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x0, 0x0, 0x35d}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x440, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000002c0)=""/118) [ 1774.883221][T15644] binder: 15642:15644 ERROR: BC_REGISTER_LOOPER called without request 03:38:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffffef) [ 1775.098833][T15659] sctp: [Deprecated]: syz-executor4 (pid 15659) Use of int in maxseg socket option. [ 1775.098833][T15659] Use struct sctp_assoc_value instead 03:38:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xeb, 0x1f000000) 03:38:18 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x90000, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000680)="4cdd9d89d52e8481a2351c22aceba0254ecd86c7c6cf314f0ceafc", 0x1b) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}}) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) recvfrom$inet6(r1, &(0x7f0000000780)=""/67, 0x2914109394d9b8e, 0x517c3a3b6e4a8afb, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @loopback, 0xd71}, 0x1c) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x17, 0x9e, &(0x7f00000008c0)="8b557c582cfa47f9e605ea762ba915a9e527e23cbc39cd128260e6dec24ac1a1bc78398341176153242d34b2049217d3555b8e0414e86c264e7a748ed0d3cb61e889fcb775bb0b0c1b066c48d271b713d686f16473095fb8dd88afaeff343078cb2f3f93e3b0999aa049bf53ceb5c47857668470efb60f18d1cbabbd11321b81e0d3a06354126a0c2f08eabab2c74995e46b851c85915f1bdaa4000af748"}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) prlimit64(r2, 0x0, &(0x7f00000001c0)={0x0, 0x380000000000}, &(0x7f0000000200)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x10}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000400)={0xac0, 0x7fff, 0x6, 0x4, 0x2, 0x3, 0x7, 0x2, 0x3, 0xfff, 0x1}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 03:38:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) [ 1775.219482][T15666] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x15d) [ 1775.264830][T15664] EXT4-fs warning (device sda1): verify_group_input:123: Last group not full 03:38:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000013c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0}, &(0x7f0000001440)=0xc) getresgid(&(0x7f0000001480)=0x0, &(0x7f00000014c0), &(0x7f0000001500)) r7 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001640)=0xe8) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001800)={&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f00000001c0)="4f92acbeef19a3c38501058cf33b31adeef3d4b1046f6d9e9beba3886c", 0x1d}, {&(0x7f0000001300)="85c6681080b55a58608295b92a554ce1fda3f67723f9559fd3455eac4ab2dabd687f81ea23444dbdce29659d5340d1e23d5bf86073ec3ee5ad215616c60d35f3b7d37e90592e2fff5c9bbaeebd17af0b42382b9f173258c4987d", 0x5a}], 0x2, &(0x7f0000001740)=[@rights={0x28, 0x1, 0x1, [r2, r1, r2, r3, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x28, 0x1, 0x1, [r1, r3, r0, r3, r2, r1]}, @rights={0x30, 0x1, 0x1, [r1, r0, 0xffffffffffffff9c, r1, r2, r0, r2]}], 0xc0, 0x4040}, 0x8001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff7d, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1775.368798][T15680] sctp: [Deprecated]: syz-executor4 (pid 15680) Use of int in maxseg socket option. [ 1775.368798][T15680] Use struct sctp_assoc_value instead [ 1775.420641][T15677] EXT4-fs warning (device sda1): verify_group_input:123: Last group not full [ 1775.466172][T15685] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1775.483848][T15685] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xec, 0x1f000000) 03:38:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xff, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000001c0)={0x2, r2, 0x10001, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000000133a0000000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100677265000c0002000800030039000000"], 0x38}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x200) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000080)={0x0, 0x80000000, 0x100}) 03:38:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1775.756134][T15698] binder_thread_write: 1 callbacks suppressed [ 1775.756143][T15698] binder: 15697:15698 ERROR: BC_REGISTER_LOOPER called without request 03:38:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc871}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000001700)=0x2) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x28, 0x880) read$FUSE(r1, &(0x7f0000000440), 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYBLOB="080085066b0700030006"], &(0x7f0000000240)=0x1) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x3}, 0x8) shutdown(r3, 0x1) [ 1775.806350][T15700] sctp: [Deprecated]: syz-executor4 (pid 15700) Use of int in maxseg socket option. [ 1775.806350][T15700] Use struct sctp_assoc_value instead 03:38:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xed, 0x1f000000) 03:38:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x3, 0x200, 0x10000, 0x5, 0xde0, 0xfffffffffffffbff, 0x1f, 0x7, 0x1000, 0x1, 0xafb, 0x2}}) 03:38:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xee, 0x1f000000) [ 1776.250910][T15716] binder: 15713:15716 ERROR: BC_REGISTER_LOOPER called without request [ 1776.262199][T15714] sctp: [Deprecated]: syz-executor4 (pid 15714) Use of int in maxseg socket option. [ 1776.262199][T15714] Use struct sctp_assoc_value instead [ 1776.339376][T15707] sctp: [Deprecated]: syz-executor1 (pid 15707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1776.339376][T15707] Use struct sctp_sack_info instead 03:38:19 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x285) socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000aaa000)={0x2, 0x43b, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000000100), &(0x7f0000000180)=0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x8000, @empty, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r3, 0xfffffffffffffeff, 0x7ff, 0x87}, &(0x7f00000002c0)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r4) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18, 0xfffffffffffffff5, 0x8, {0x7}}, 0x18) 03:38:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000007, 0xffffffffffffff4a) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xef, 0x1f000000) 03:38:19 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="007ed943f89ca1f65f0aa910b0ab715805f9096ac04f672350e3babc644e596968f5c0fe4e4b65ae5d60ba1dda444b1fe4460b757834c5e24f7ca88d54d0158e42b57a6965e95abe9fdbf4010ffe17ca68da") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0xf, 0x1, {0x54, 0x8, 0xff, {0xfffffffffffff616, 0x8000}, {0x1f, 0x8000}, @cond=[{0x7, 0xfc, 0x5, 0x2ad, 0x79f, 0x2}, {0xffffffffffffe0dd, 0x1, 0x2, 0x53, 0x6, 0xffff}]}, {0x57, 0xffffffff, 0xa8, {0x10001, 0xfff}, {0x3ff, 0x6}, @const={0x4, {0x200, 0x800, 0x8001, 0xe175}}}}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) 03:38:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x401, &(0x7f0000000080)=0x4) ioctl$VT_RELDISP(r0, 0x5605) pwrite64(r0, &(0x7f00000000c0)="9b87ee207e1ade0ecc92322897b5fcf2672d9aff16c7504d7c28c90caca83e32e60a830fd8523e7917aa1c5cdf24f9831c7d6304dd8408195e", 0x39, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xa8d587975967e0e5, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0xffffffffffffff07}}, [0x10000, 0x8, 0x6, 0x0, 0x400, 0x5, 0x4, 0x6, 0xea28, 0xfffffffffffffff8, 0x0, 0x6, 0x3, 0x8, 0x8000]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0)=r3, 0x4) ioctl$TIOCNXCL(r1, 0x540d) r4 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000300)={0x1, r4}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000340)) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000bc0)={0x34, 0x0, &(0x7f0000000b80)}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000c00)={0x1, 0x3}) r5 = semget$private(0x0, 0x2, 0x40) semtimedop(r5, &(0x7f0000000c40)=[{0x3, 0xfffffffffffffffd, 0x800}, {0x0, 0x3ff, 0x1000}], 0x2, &(0x7f0000000c80)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000d40)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000032c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000033c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000e00)='f2fs\x00', &(0x7f0000000e40)='./file0\x00', 0x1, 0x8, &(0x7f0000003200)=[{&(0x7f0000000e80)="c828c45689559f17b164083abf451786aa298a9a11ffe632aa5f15a0c6cd939ccefffd37a93dbb6c3b2261552e961194f4e5e4b63a87f7789d5b288c3560e935c4289670d477fb5b6be79d7c6d69591f972c479182b22ae9e5500263a44b18f00ef8a655ba5b4bf7226287c193f2bb64430580b0a0027f4ff23e1afe97f14f5ce5c113f868a81f4900c9d28177d30fd53995303d99999317e3397a9a17f38ee909ae9d283aa0bcc0f8f8d26e5e84b451716e0d2ce4493094b919fcb07995ffe0bc46f2", 0xc3, 0x94}, {&(0x7f0000000f80)="1014678d2baea1601eecce53388ddb21db312125b6553bd04f24b5d18e720b06fa85033f057d2a26407d94f412e21883aef4605d29a59e61305a1e4729076421daa46d0fcc97b17002291315f7dee2e31feb85906f3493f13e1ef3c150f6911c89fb5eb473527980bfe9604436435e6d6838", 0x72, 0xad}, {&(0x7f0000001000)="610cb4fd6078ad", 0x7, 0x6}, {&(0x7f0000001040), 0x0, 0xada}, {&(0x7f0000001080)="775ea6fe34cbade65e5d648f4dd5fc9af12b70a46ed0e1cd582500df23a5146788dc6ceecd545cb20534ad2838929a0164525c2120410079d6e70311663b50c78632077a90803945a68f8815e1de5ae1597fad3c960b1f28ed7bef2885957cec3547b663e998396d32633495a9e22b6c67d83c7166e4282c8238988f0a812e45529dcb2a48036e91133361d3f04efcba1ed58871dff616c52a3235de6d23bcc7d6a18845f7f87efc1269d53c2f69afa2dbbc20807b6778eff553001862c117829f8863aaf196182fbae695aa3bb20528c3202226d8821628494ff3ec389bc0e77d078854c6e3a4e746a6900d7f97b18a0bf500", 0xf3, 0x7f}, {&(0x7f0000001180)="196b2471983241d6648da17d3bf1c0b594726d699ea0e9411034b1e091bd7304551a699969f128a74eab8c4d087a87560dbab6a95c6ec02229554cd44f605d3a5d997cd0c58ce9ccf5983d5ce5be857f7ed0956f5eb27a98fc43ab232bf692ecb92df64af0512603f6f256174a5003b0bb7750e02f3ac76704ec17885f707d332d9a32875229ec34da0e04722c4b0b1a07de90037fe8ce09c4e19685744dadfbeae4dce5c4cd72b0ac80b2d6bd2204a33df1d80e3844afb529412812b62b6685b6c5688f5f21af4a84f021bd77348c72287728a4ae4e29c3c8dd656c6848c2b7866cd32adf185cf275fd38e7b7bb5bf9e7be9e00edfb31af95437898f929bf14bc73f80eb3b09361a1dd1f96d054a957babed9343d30e4b1d98da0b6741ad3a3d580f8fdd9d234da7f2e277330884f908e51791e0cbc6ba966380cd1844cd8f4bf4617a5436fb346719b5dade1035ebdb20b68874c456720ce5c21ca136093b2d562c40cce05b1ae64aa2a0a819086dfc2b6c8e87560f694d3d7bfaf3c4b2f2756d0dfd9bd9b2895bb609e1cbd0d98b6c6c89c97daaf4a0c76db88db5a305d725658a5163686625e8afd273d15fd628fda45c63565720909bbcba8a052ac4b8939b9dd0d55eea7984d63ae5a76ebc00f68e131d0689b93152fad1ca4f510c497f457bc7b42797971c6376f799fc91bb2058326f100678a3be88bc36219ec9ac81da48574a2764129a713408a01cf65ef7d6b16d3cbd3310fc81acd14e9d16c0c19d14179bca1dad548f1bd5b9d0ac40e56daa9bb1efbf90c5d965770c32475872b4f38f7259510318c0b1f52781459588c70d0229a44e03647c041aaf217e37829d77c01ba8d1bccad6fda5dbcd416282542cc62acb746c2e3168abcc7f495dcfa2b4f31da9e0844406025c829c3a23ce10d793b477ebe52eb0835ed7c1b48f64f43986123c37b40a4b4376d9adfafdb43ebc703c9b01f5fa235215233a8ea1cbcd190b6878c7500fb12e3f2f0565d0601899a0d471d55ac8465ec0dcaf31feeaa9b6984f954d06d24331f49f0012acb75845b3b6311833d525dbde3c64dc50697e268eabf731837bb9b6280851e90d7b9f5b2bdb9522b6b6acf26f6b567541bb4e6fb75f57b1eb500ead84448764495834175efc7e565a2b3ad5e25a360c14b7b290588d47aee6e0a957d0f2c1e1e5c46ca5025f35744a67505a3197b372915cb847f83d32ea58214665712fe9c6e9d36020cba319f3ef55a4e264e779078eba81d40a535e192c6f10a89bb441685232d744a5bed46486f7c4c32aa1402b86183f9b2bdabfbc42fed48b516f1dad8fa01b8cae4a78be34a9dc67f4bcd2d91853e07f796087b5f830acc3fa2e3b988acd284b906177d2049d8bbc11f3e1f7db3d7e06257a970b2110c2381a91b62aae6b64632433344604749ad0f79794d7380241a9a91c1c66f0d3b799ad3e129dc9f4c5d18ce5cc87cd302633bb52dd0a8ca90970207ab61eb79ce18299ce27677bdfce6b6641188904d621d8fcd540c0e38ec3fbdb86941562bda2226fdefbe12c7cea11b06ef5fb5d7facdf797fcc6e73b01cb3ff29b3580ecb9b58fa5e8e126a681e2574a57043e6e9de27a41e46ba8876f787bc85c0b7586e617aac4593c9fcec651d95fa12eeeef5c497b4ddfb99eb073656b6ff1fe78d47a9c9faabf6e5a44d2531b4c018c320bef2ff3a82dd45201d27eb98571c35791b977233b20e356b7c70a6aa34d4f3e429a95880797789682d821b594a51fc261a9fd83ebe3e05b5fc1511caad567c29e194110fec46358f9294ea75606af8504fb801aa9582929b66beb1e6441e02612425cccce7bcc469870dc139f5ad1c978e6e5562b0b8bd7a9532ba44a24010d6fdeba26f38f01642159666ab0b8e1f6b58182667fcf7fd884bc477b20c9ec7ea9899806ed4ab5c4a9a9378cda79079671725c4e7cb68d9da031b388f844c7a0eabbdfac440d3dfcdb8c7d584cc575b93e587526c3b728002bc9e46743aec1ae2834453d4d241b871af7cbd9aed98f9df884da58a76bfd16e47bc38a5fc636a4edda1eb61ae1e88326c951d7ee7ba70e46724642f1449c728904de39ea24b0b8b1e0e0c69bcc98cffed508b0a085df152f4d2450cd1e1c9cc3f6227da3dbed8f3eaedba897ed9b41df58730fc7a59a96b0e7cf5802d99d5e5ab2f4324fe1eaf923cb7acce8d7eaae67be628127dfa16430df82ffaf880378181d2ae32a1d7b1aa133a805944b893fae89b6824dbad7131a936064415639e71a688ba99df518293f6290fce0cd42fffc9f57d93ce739f9ba22246be81727541006c105e9a3f5db99d4ae117c4c5e572e3834bb34592f406f02e57b8ebb85fbf9c243e169d556c31c5be7437bd0c660ed6b869dd08405ed884a5b432c0c37e256bc13d2c90d8f6697c67b72556e533917afbab5269446225da269c39efb088f0509219b2ef2b915ac28ed87265ded24e1027fa795f699379fc98aa41fd76b66954fae6751ce73ce7179c8713087bdcd0f2862926ea253c209db4d86670548e0133274c01053d7a685e0da7785d62c9f30d96c79a412397cb39aeeb6eccc2da276722806cf761ee3fec5678a97281e86503ad3bf894adfdcc49fb793e874a7e800ffa66058b57d762c5ca35e29a4af33106810e2b04d7b1d24c07d3a550af6f86be8bdbc1a1d0d4b3c17eff2e7b45dbfc5ed1a6160ba6c6ec27f2bda1d072307aa59dd7ee036679f1f2a28d90b8f1fa7545f2cf4994bcb0b449fc26712faa94a1d34e6a766bd03ae762150498de1d0e18c8d48ed4bd1a400d9f314f828e20cf46acb38b2faed3431de3d4eaed1dcf8e31b83616e61a4acf76d214fb13f4e5d19eec669c25656a4c16be406d8c83b5e865e61295d41e06b6b534cd170dd2d9da148d3b3c159a546409c2791686750896fa9650a633bb8621e18cc22ccbc2249b6a30f12569d55caeb5d93608982859b2c777f22c88baf8c4d30221635a8b3c5e17c73b8769a77da1e8aa0474f8184b68641730e6d06f34b2e5dfcb4a538c7020ae5059b5fc49b469ee99f8d651140b85db7cd6ae59cbb823e2abe179e7aeb2c76dcf0d1457edbd50ea26a84bf25a646d19161dc2b39b84981327f8f6a3044773a0fe009caeab2740b6ed59ba33454faa6e9750d238ea0b6bdd19a8c3860b436e1e84e93329141ac3dd58805904486393a2c9e866d0c2a2ea434c4b8dc6956d8f2a55f64ca43b768c9535564cb8106af4a8574633a475b432d0cc72733e4001eb4427133f36ad0470232cebe27df3066b5510289da55a0c7a4e306eb30646fdf8f78cb013955f4cd0e4706544829aa462bb823b6a84c378c69b4e8378061edeb307c26e67397fe7dfec6f99446bc6581d40ade052618ed39e3f9d826af55c965cab9b5331fc1de99d10e37733a7c656633e3517e4071fd18f938d75579323fe22fd0dfd43a5cba9f80049249aec799717db1afaf5a905eb89aad59fd6d34cd8f46d137c235e0b72e76ddd6deb90ee07887a31fc2ba1765d099cbeb0ff1ad2a4d658ea73128419cecf2d4c18d74ecbe74fccf02aff3ecfeaf6ebc01622297688ee494091d66a374ca4dce5c9dc36c88fd2c52d254fe150fc3ad6915bc76c62a50cd7f6b1ccaf74a0aba4e5d10b515b5e1aa428b5f7ec40ed120f647c6e609eb24d1808ab583c78ad1a6e132b4bc0d5d53fa12d93962dd02ec3b2f97b7949787c334f122e60cfff1f9f84dbbc000bbc0734a91a5832754036ad04a986a71735907c9a8bda05ecc5f2ed60b8b408dffdf380e2fc3186fd823fdb29e3103305cc61b0a42f6a81c963be8758c9961d7ffcd6b5aaef2a85fe9e807d0a31ac7f1628c7beef069264ad16a7c433af5a87ef2eb53d1bae0a4c8282be58b72927c168011ea5e8d3e7e86565e04b9385951213166880433f98ccde4c3db16b1eb5f085f193551eca0472ecfc20c51d941c088c9de3a1f467134571eecf6fdcc5ec7cd08e3c20c0d5b9d3eb18a1a318204b9f1cbc0d03a428d8fab6bae07dc55db96716a4b96c9f8d5bdf0bf714ca7a8fbd70b6d4326517006f7c1aef62e056a9a0f1d12e54ff95a77a37d1a46cc40919462389a46d148a9555d2d68431e05bf75eea400da74b6bbc598eef89b069c9f08bf49a2da0f59cc3198f5fe930312ddf6bba5fdde6eb0da30fc6e63a53145b8f2792ddaa3f1d42ef99ef55422a59d5ec41ac3c5eafee7809466405e66e6ceca37608457e36185cdf5903f380b4e761b60a4fd4757b60c86ed0065a7c1fcf4c3e6ccf87ce744ceb00b7ff0846f573d918dd38360139558e40733e8878344dfa9fa9a27a1d196e6019cfad88c875cb9aad6aff55559240b5608a6150e4c62d4d3ab17d5ae816b652bd016b4a48123e61d92f6661c18255fe273b6d14757a1dc9de24f832fdf4865cba8c8aaef6ee008a80b1e6f73fb28ba5b8d6d9a357843fd62075e7ba61011a1cbaf75b98dddf335554d0b2863eb1351b4c520557773fd6c63d02a0459e184b7421b435dfdcabcfce366efc935c6ac8fe381b45f7fcf39e54491b3c80251d9818a1393da7150e161dc6f8711b49ed8e2f614069de64d1bf3591ec5d6833935908d04bcba43c937316734a9d4de5fad09436d545c9e66e259025ceea4dc8066e6cf9f5dd889a4749a25c71629be97f286c55928152c6de5e4d7f365d251cc6d434b8d671cd18f54e7f971ecfcb31cbf865027e6cc4209ca96af5354a1e1a92adfecfbd1cf40f4d8d5664fc298e698e0f8a4aa566d13a93b5b3f6eb327cda41d58586f419a94226e53c8fdeaaf9c6530340613d7976dfbc0b94a6994e74ead1a6f2c90e58c872b75105b29d5675e691c1ffd68ee2744a80f753a0f3fd6e9342656df44718b037f4f5347f9419550f0aa7d8cff0c03ce497265f8bb725c0d5b181c96db436256aed5a38053afc6ae514a34f82e91ad203d9072f63fa8225786e7813853426ee00553db6847c3c5b0f8eff15526f3b5564a65d739277e4bafedb87a3adb6252f0a278bf50be01ec824b314017cc0ec07ebbe92c8d9ff4f1ccb06c2080634f7c38d10a43a9f1b62abd50b3eed8b1cdc583b75e1e1e5af544df14a28d7ce0671ed79080e6f753509cf997b6b1ccec6178913de99bbb33483e7f2b679004249bdbdc6ae7cde812f2143b62fd01608c57c91ed802174d62248c81334b31d000eb631fc9b56a8ff95fea4072b97177d3a5f4d9eaff49bb73ff83e9cacf48ef131d92a9678e2c0830765bef0f9408c99515b8e2a55bec35977d71749856762555aafb71af521b70172be558361673aa047679db9aac38abdfce55d6bff216e36ee81e8b1372e6c001670b0d6bd89c4758a8bae2de71b6ab934c1ca735af320c9983f0801246493e29f0b4125b7d9cfbef3be2222988bd510487043e5bccbb54aaa67f115f1dc59b15b0a890a5926234860135c953c564616ec73964f2e040f3956b118ebbe9c553c82fd4a38d1ee5fad13c0685b9ea8343e6f72d1d5f7d86502ac5ea1c05d80e62d25c07d671b22cea2d3ac748c14fbec04ee544e0a8a6488fc7a8295872bffc893a5ed8a941ba9c59b6cc2d6dea6064bee49a40936b51a56c48a2e5e8b1bf66987d0be61cc9c374f34680313ce4c3ce9bbc5743000c67ec780a30aadb51f824ea204619d6a4cc5c8afced17f632689c8504fe799373a542038f90fda550aa086181462dbff2dfef7fd1952cc69a88acf5ffd7504034c1b7e0b8e4ac393131b8b0ec299c0d52b23c31199c523af2783f05b086fe0f2a781478", 0x1000, 0x9}, {&(0x7f0000002180)="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", 0x1000, 0x100}, {&(0x7f0000003180)="6f71de23fcaed526117462aa6c90ef70d4520923909a5ba4b2be070f7a41d95d429d17f94391065974e0d9d944d48e589b358573da3b82bc65a074ec93a1e9899e37b7642200a5fb39bc920b743d6950485957f06b5d4d6d6ae8688b23cc640eb15e8e87f1082df863fc722b806779a7", 0x70, 0x7}], 0x400, &(0x7f0000003400)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@noextent_cache='noextent_cache'}, {@grpquota={'grpquota', 0x3d, '/dev/autofs\x00'}}, {@test_dummy_encryption='test_dummy_encryption'}, {@whint_mode_user='whint_mode=user-based'}, {@nodiscard='nodiscard'}, {@two_active_logs='active_logs=2'}, {@adaptive_mode='mode=adaptive'}, {@noinline_dentry='noinline_dentry'}], [{@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r7}}, {@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}, {@measure='measure'}, {@pcr={'pcr', 0x3d, 0x23}}]}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003500)={{{@in6, @in6=@remote, 0x4e23, 0x4, 0x4e21, 0x5, 0x2, 0x20, 0x80, 0x67, r6, r7}, {0x0, 0x0, 0x3, 0x100000001, 0x7, 0x6, 0x9, 0x9}, {0x7, 0xef, 0x20621a70, 0x1000}, 0xd33, 0x6e6bbc, 0x2, 0x0, 0x3, 0x3}, {{@in=@broadcast, 0x4d4, 0x3f}, 0x2, @in6=@ipv4={[], [], @remote}, 0x34ff, 0x0, 0x2, 0x8000, 0x80000001, 0x9, 0x1}}, 0xe8) write$P9_RFLUSH(r1, &(0x7f0000003600)={0x7, 0x6d, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000003640), &(0x7f0000003680)=0x4) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000003700)={{0x1, 0x6, 0x1f, 0x3, 'syz1\x00', 0x1}, 0x5, 0x20000000, 0x826, r4, 0x5, 0x366, 'syz0\x00', &(0x7f00000036c0)=['noinline_dentry', 'f2fs\x00', 'M\x00', 'seclabel', ')\x00'], 0x20, [], [0x0, 0x0, 0x7, 0x5]}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000003880)={0x5, &(0x7f0000003840)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000038c0)={r8, 0x13}) accept4$bt_l2cap(r1, &(0x7f0000003900), &(0x7f0000003940)=0xe, 0x80000) 03:38:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf0, 0x1f000000) [ 1776.746026][T15744] binder: 15740:15744 ERROR: BC_REGISTER_LOOPER called without request [ 1776.891481][T15752] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x54c81eef) [ 1776.925718][T15752] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 03:38:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1776.939274][T15752] F2FS-fs (loop1): Unable to read 2th superblock [ 1776.945720][T15752] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x54c81eef) [ 1776.954537][T15752] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1776.971299][T15752] F2FS-fs (loop1): Unable to read 2th superblock 03:38:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf1, 0x1f000000) [ 1777.054859][T15763] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1777.064851][T15758] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x54c81eef) [ 1777.110089][T15758] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1777.127819][T15763] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1777.156796][T15758] F2FS-fs (loop1): Unable to read 2th superblock [ 1777.174296][T15773] binder: 15767:15773 ERROR: BC_REGISTER_LOOPER called without request [ 1777.176547][T15758] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x54c81eef) 03:38:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x81, 0x4, 0x3}}, 0x14) [ 1777.216074][T15758] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1777.225085][T15758] F2FS-fs (loop1): Unable to read 2th superblock 03:38:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf2, 0x1f000000) 03:38:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1777.301620][T15780] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1777.317812][T15780] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:20 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff00, 0x1) r2 = dup3(r1, r1, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x401d, r0, 0x0) getpeername$ax25(r2, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @netrom, @default, @netrom, @rose, @bcast, @default, @netrom]}, &(0x7f00000000c0)=0x48) 03:38:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:20 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001280)={0x0, 0x2, 0x4, 0x0, 0x7, 0x2, 0x9, 0x9, {0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xfffffffffffffffa, 0x5577, 0x150, 0xfff}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001340)={r1, @in6={{0xa, 0x4e23, 0x40, @remote, 0x101}}, 0x8, 0x9, 0xffffffff, 0x100, 0x5}, 0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x400004000000003, 0x20400000087) getpeername$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x1000, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001400)='/dev/dsp\x00') getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf3, 0x1f000000) [ 1777.438116][T15787] binder: 15784:15787 ERROR: BC_REGISTER_LOOPER called without request [ 1777.471818][T15787] binder: 15784:15787 ioctl c0306201 0 returned -14 [ 1777.621052][T15799] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1777.660591][T15803] binder: 15801:15803 ERROR: BC_REGISTER_LOOPER called without request 03:38:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf4, 0x1f000000) [ 1777.730617][T15806] binder: 15804:15806 ERROR: BC_REGISTER_LOOPER called without request 03:38:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1777.848417][T15817] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1778.004258][T15815] sctp_setsockopt_maxseg: 2 callbacks suppressed [ 1778.004271][T15815] sctp: [Deprecated]: syz-executor1 (pid 15815) Use of int in maxseg socket option. [ 1778.004271][T15815] Use struct sctp_assoc_value instead [ 1778.075691][T15823] binder: 15822:15823 ERROR: BC_REGISTER_LOOPER called without request [ 1778.095524][T15831] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1778.109955][T15831] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1778.209170][ C1] net_ratelimit: 22 callbacks suppressed [ 1778.209178][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1778.220677][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x80, 0x2000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xa468}, &(0x7f0000000100)=0xc) open(&(0x7f0000000180)='./file0\x00', 0x6402, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3, 0x31c6}, 0x8) 03:38:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf5, 0x1f000000) 03:38:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1778.517573][T15839] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1778.601874][T15848] binder: 15847:15848 ERROR: BC_REGISTER_LOOPER called without request 03:38:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000080)='./file0\x00', 0xec) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @multicast1}, &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000180)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x2, 0x80000001, 0x3, 0x5, 0x100000, 0xa93}) 03:38:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf6, 0x1f000000) [ 1778.656511][T15846] binder: 15843:15846 ERROR: BC_REGISTER_LOOPER called without request [ 1778.689122][T15850] binder: BINDER_SET_CONTEXT_MGR already set [ 1778.689138][T15850] binder: 15843:15850 ioctl 40046207 0 returned -16 03:38:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1778.854874][T15863] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1778.885991][T15863] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x200000000000007, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1779.009106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.014890][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf7, 0x1f000000) 03:38:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1779.179102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.185004][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:22 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20100, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f0000000e9d530fc65e24e68e85980ca49cccb25648b30c52044c2995b63a59b3c3cf0c38bbaede439fab159773d79d087c508c54f1611855e65f4f0584b222c1de6e537f9a94a96d0685a1ed3b2eae4354f05a7f0edd2fb3d044de207269101d3674a8c7588720b7fe9c9f4d63cfd5caca1f5ebc4ded2679e5cbe4668068fe0cf0e4662b28f4c3e25a5e2ddcfada33fe180c51608453c75e120a9daba8c15906f0fc4c8973ed41a69d6b3ef27e2b41a5a025d207fd95efcf88365d66748cb820cebef05ffcafbbad2c065530a95c42fb80b9a787a0916bab40bfc5917506b1326efb83de693c76b80dd2ab9a1a379b3"], &(0x7f00000001c0)=0xf8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001280)={r1, 0x6, 0x1, [0x9]}, &(0x7f00000012c0)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000002340)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000001300)=""/4096}, &(0x7f0000002300)=0xffffff51) 03:38:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x0, 0x0, &(0x7f000000df36)}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf8, 0x1f000000) 03:38:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000007, 0xffffffffffffffc6) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x100, 0x8) 03:38:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x0, 0x0, &(0x7f000000df36)}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1779.569156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.575113][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x10000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf9, 0x1f000000) 03:38:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x0, 0x0, &(0x7f000000df36)}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1779.729141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.735085][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x35, &(0x7f0000000140)=0x1, 0x12f) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1779.957862][T15929] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1779.998059][T15932] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xfa, 0x1f000000) 03:38:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000000c0)={0x0, {0x9, 0x5}}) [ 1780.293574][T15943] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1780.331539][T15943] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r0, &(0x7f0000000200)=""/116, 0x184) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x6) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r3 = socket$inet(0x2, 0xf, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xfb, 0x1f000000) 03:38:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xfc, 0x1f000000) 03:38:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffd8c) recvfrom$unix(r0, &(0x7f0000001280)=""/223, 0xdf, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000140)) 03:38:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xfd, 0x1f000000) 03:38:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, 0x0) [ 1781.200988][T15984] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xfe, 0x1f000000) 03:38:24 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1781.282051][T15984] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1781.283197][T15987] binder_thread_write: 11 callbacks suppressed [ 1781.283225][T15987] binder: 15983:15987 ERROR: BC_REGISTER_LOOPER called without request [ 1781.306686][T15988] binder: 15980:15988 ERROR: BC_REGISTER_LOOPER called without request 03:38:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x2040000008a) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, 0x0) 03:38:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:24 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x102, 0x1f000000) [ 1781.476403][T16001] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1781.562771][T16004] binder: 16002:16004 ERROR: BC_REGISTER_LOOPER called without request [ 1781.642121][T16013] binder: 16010:16013 ERROR: BC_REGISTER_LOOPER called without request 03:38:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000cd8ff4)) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f00000013c0)="af344ffea091c8b3a12bf184c4e680a1614c47f8f61f1eee1e57d84cb41651d81c2591c99223c6927b87357ea6af", 0x2e) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001280), &(0x7f00000012c0)=0x0, &(0x7f0000001300)) write$FUSE_DIRENTPLUS(r5, &(0x7f0000001340)=ANY=[@ANYRESDEC, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="f9ffffff01000000000000000200000000000000060600000000000000000004b50000002f70726f632f7468ec2d3a7bdafccf5f57d024f2469d44726561642d73656c66"], 0x60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet(0x2, 0x4000000003, 0x20400000087) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:38:25 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x103, 0x1f000000) 03:38:25 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1782.142746][T16027] binder: 16026:16027 ERROR: BC_REGISTER_LOOPER called without request 03:38:25 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x104, 0x1f000000) 03:38:25 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)) 03:38:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x105, 0x1f000000) 03:38:25 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1782.473881][T16048] binder: 16046:16048 ERROR: BC_REGISTER_LOOPER called without request [ 1782.567090][T16059] binder: 16058:16059 ERROR: BC_REGISTER_LOOPER called without request 03:38:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x106, 0x1f000000) [ 1783.339085][ C1] net_ratelimit: 18 callbacks suppressed [ 1783.339091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.350606][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1783.739178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.744990][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1783.889075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.894949][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1783.969142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.974953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.449139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.454959][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:28 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf3, 0x1f000000) 03:38:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2d, 0x5}}) r2 = socket$inet(0x2, 0x800, 0x2040000008a) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue}}) 03:38:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x107, 0x1f000000) 03:38:28 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1785.126854][T16077] binder: 16074:16077 ERROR: BC_REGISTER_LOOPER called without request [ 1785.149830][T16071] binder: 16070:16071 ERROR: BC_REGISTER_LOOPER called without request 03:38:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xf3, 0x1f000000) 03:38:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200004, 0x20) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0xc0, 0x1000) 03:38:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x108, 0x1f000000) [ 1785.431543][T16099] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1785.498275][T16099] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x17d96071, 0x48142) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000000c0)={0xe, 0x1, 0x7}) 03:38:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x109, 0x1f000000) [ 1785.666086][T16112] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) 03:38:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10a, 0x1f000000) 03:38:29 executing program 0 (fault-call:10 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1785.954722][T16129] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:29 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffff00, 0x8040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080)="44abbe53eb7fdbaf9a840f3121f192cb256f7b5f84bfe143a87998bf7c1a93b63f256a47870c1750eeb5571964c232491c", &(0x7f0000000200)=""/4096}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x1c}) ioctl$KDSETMODE(r2, 0x4b3a, 0x2) 03:38:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80000001, 0x40400) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1000, 0x4, [0x7, 0x100, 0x2, 0x1f]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x3}, 0x8) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) [ 1786.035957][T16139] binder: 16134:16139 ERROR: BC_REGISTER_LOOPER called without request 03:38:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10b, 0x1f000000) [ 1786.151703][T16148] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6erspan0\x00', 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000080)=0x78) 03:38:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getgroups(0x5, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400c00) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f00000001c0)={{0x0, 0x1c000000000}, 0x2}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x5}, [{0x2, 0x1, r1}, {0x2, 0x4, r2}], {0x4, 0x5}, [{0x8, 0x1, r3}, {0x8, 0x3, r4}, {0x8, 0x7, r5}, {0x8, 0x4, r6}, {0x8, 0x7, r8}], {0x10, 0x2}, {0x20, 0x3}}, 0x5c, 0x2) 03:38:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000001400)={0x7, 0x7, 0x2}) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000080)=0x4, 0x100000001, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x21e0ad4c, 0x7, 0x1000, 0xfffffffffffff7bd, 0xfff}, &(0x7f0000001280)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000012c0)={r3}, &(0x7f0000001300)=0x8) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x78) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000001340)=""/136) 03:38:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10c, 0x1f000000) 03:38:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1786.833209][T16140] FAULT_INJECTION: forcing a failure. [ 1786.833209][T16140] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.848545][T16140] CPU: 0 PID: 16140 Comm: syz-executor0 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1786.857508][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.867554][T16140] Call Trace: [ 1786.870848][T16140] dump_stack+0x1db/0x2d0 [ 1786.875185][T16140] ? dump_stack_print_info.cold+0x20/0x20 [ 1786.880936][T16140] should_fail.cold+0xa/0x14 [ 1786.885535][T16140] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1786.891352][T16140] ? ___might_sleep+0x1e7/0x310 [ 1786.896201][T16140] ? arch_local_save_flags+0x50/0x50 [ 1786.901484][T16140] ? add_lock_to_list.isra.0+0x450/0x450 [ 1786.907152][T16140] ? do_exit+0x31e/0x2af0 [ 1786.911485][T16140] ? find_held_lock+0x35/0x120 [ 1786.916254][T16140] __should_failslab+0x121/0x190 [ 1786.921248][T16140] should_failslab+0x9/0x14 [ 1786.925749][T16140] kmem_cache_alloc+0x2be/0x710 [ 1786.930609][T16140] ? acct_collect+0x699/0x860 [ 1786.935415][T16140] ? lock_acquire+0x1db/0x570 [ 1786.940106][T16140] taskstats_exit+0x7fd/0xf90 [ 1786.944801][T16140] ? trace_hardirqs_on+0xbd/0x310 [ 1786.949840][T16140] ? taskstats_user_cmd+0x10f0/0x10f0 [ 1786.955225][T16140] ? trace_hardirqs_off_caller+0x300/0x300 [ 1786.961062][T16140] ? do_raw_spin_trylock+0x270/0x270 [ 1786.966349][T16140] ? trace_hardirqs_off_caller+0x300/0x300 [ 1786.972157][T16140] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1786.977345][T16140] ? acct_collect+0x699/0x860 [ 1786.982017][T16140] do_exit+0x486/0x2af0 [ 1786.986176][T16140] ? find_held_lock+0x35/0x120 [ 1786.990951][T16140] ? __might_fault+0x12b/0x1e0 [ 1786.995732][T16140] ? mm_update_next_owner+0x970/0x970 [ 1787.001105][T16140] ? lock_downgrade+0xbe0/0xbe0 [ 1787.005980][T16140] ? lock_release+0xc40/0xc40 [ 1787.010675][T16140] ? mark_held_locks+0x100/0x100 [ 1787.015622][T16140] ? kasan_check_read+0x11/0x20 [ 1787.020480][T16140] ? _copy_to_user+0xc9/0x120 [ 1787.025178][T16140] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1787.031439][T16140] ? binder_ioctl_write_read.isra.0+0x216/0xb60 [ 1787.037691][T16140] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1787.037711][T16140] ? add_lock_to_list.isra.0+0x450/0x450 [ 1787.037728][T16140] ? memset+0x32/0x40 [ 1787.037744][T16140] ? __dequeue_signal+0xeb/0x730 [ 1787.037761][T16140] ? get_signal+0x963/0x19b0 [ 1787.037775][T16140] ? find_held_lock+0x35/0x120 [ 1787.037792][T16140] ? get_signal+0x963/0x19b0 [ 1787.071447][T16140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1787.077680][T16140] ? _raw_spin_unlock_irq+0x28/0x90 [ 1787.082873][T16140] ? _raw_spin_unlock_irq+0x28/0x90 [ 1787.088082][T16140] do_group_exit+0x177/0x430 [ 1787.092671][T16140] ? trace_hardirqs_off_caller+0x300/0x300 [ 1787.098473][T16140] ? __ia32_sys_exit+0x50/0x50 [ 1787.103237][T16140] get_signal+0x8b4/0x19b0 [ 1787.107687][T16140] ? ptrace_notify+0x130/0x130 [ 1787.112447][T16140] ? rcu_read_unlock_special+0x380/0x380 [ 1787.118100][T16140] do_signal+0x91/0x1ea0 [ 1787.122337][T16140] ? ksys_dup3+0x660/0x660 [ 1787.126754][T16140] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 1787.133000][T16140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1787.139231][T16140] ? do_vfs_ioctl+0x11e/0x17d0 [ 1787.144020][T16140] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1787.149484][T16140] ? setup_sigcontext+0x7d0/0x7d0 [ 1787.154501][T16140] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1787.159814][T16140] ? exit_to_usermode_loop+0x98/0x3b0 [ 1787.165199][T16140] ? exit_to_usermode_loop+0x98/0x3b0 [ 1787.170562][T16140] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1787.175851][T16140] ? trace_hardirqs_off_caller+0x300/0x300 [ 1787.181655][T16140] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1787.187113][T16140] exit_to_usermode_loop+0x2f7/0x3b0 [ 1787.192433][T16140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1787.198492][T16140] ? syscall_trace_enter+0x12a0/0x12a0 [ 1787.203946][T16140] ? ksys_ioctl+0x82/0xd0 [ 1787.208275][T16140] do_syscall_64+0x696/0x800 [ 1787.212861][T16140] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1787.218508][T16140] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1787.224242][T16140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1787.229791][T16140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1787.235672][T16140] RIP: 0033:0x457ec9 [ 1787.239561][T16140] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1787.259161][T16140] RSP: 002b:00007f73c49a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.267608][T16140] RAX: fffffffffffffe00 RBX: 00007f73c49a5c90 RCX: 0000000000457ec9 [ 1787.275575][T16140] RDX: 000000002000dfd0 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1787.283540][T16140] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1787.291505][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f73c49a66d4 [ 1787.299470][T16140] R13: 00000000004bf216 R14: 00000000004d0808 R15: 0000000000000006 [ 1787.323216][T16182] binder_thread_write: 1 callbacks suppressed [ 1787.323226][T16182] binder: 16180:16182 ERROR: BC_REGISTER_LOOPER called without request [ 1787.339766][T16163] syz-executor1 (16163) used greatest stack depth: 17208 bytes left 03:38:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10d, 0x1f000000) 03:38:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x24040, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000080)={0x43, "37ee75ca9a644de0c099003b8b642517ba319a5f95f77351e4387147216fa724cf953e09289963e3c126171b95363711701292cf2f9e8c197e78c62e0780b10524d8eee1878b6c1f3182255bee7d1b073516f32c5124da2702ed19e21fc79bd5fa7f3edfb958167aaa3e88ac7a99b62d4dadf71345ead03df05d0bd7b4dcdaa9"}) 03:38:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1787.485180][T16193] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1787.511145][T16196] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 1787.547979][T16196] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 1787.589340][T16201] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1787.605688][T16200] binder: 16197:16200 ERROR: BC_REGISTER_LOOPER called without request 03:38:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:30 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={r0, 0x3, 0x1, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) socket$kcm(0x29, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000b40)=ANY=[@ANYBLOB="cf1974240000000097d4c0f8877beba77709f9d88772bb8efbb965ebfba6f650d2726e79b0cc41893345971535387bf1c7eb988ebe5d1bf83596a5504d306d4685aa215ab29b4618dc7b"]) r4 = socket$kcm(0x2, 0x5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRESOCT=r1]]) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000940)=ANY=[@ANYBLOB="332d63b7032e2c6d000000000000000000000000d75dc123d315f5fb3065786ed0ffca259c870db3b223ed9c7a58913ec4f3542c7888dac6f729426dc464fa6881e42997bdd920f6b98eb48cbba26f3f3ec475f4bf8c80aab4fafcfb4c9f512a7cc0fb"], 0x63) openat$cgroup_ro(r2, &(0x7f0000000480)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GP\x1a\x00\xf9\xd3\xc4q\xb4\xa5C\v\x11i\x1d\x81\xfbK\x9cI\x10j\xb3\xa0\x1e\xaan\x14\x94\xe1\x01\x12\xf6\xe5\'\xa7F\x96\x1b-\xa6a\xbc\x05\x17\xd1\xfe\xd1$\xf6\xef\xb4)-\xc4\xc6\xdfR\xa2\xc0b<\xdc\x1a\x18v}\x96\x1c&\xd3\xaa\x8cc:#Ig\xdf\xe0G\xb1Y\x97\xef\xc5\xa3\xbbR,\xb098F\xdc\xc3\xf6\xe7j(\x865i|d+<\xc7\xb3\xb3k=\x13T\xddP\x87\x12\xa1\xf1^;T-\x8a\f\f\x9as\xd1\x9d\x95+\xce\xf7\xd7\xd5\xcbp;D\xc4\xf1~_v\xe7\xa2\xf9\xc4N\ao\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r2, &(0x7f0000000a00)="a2d0dde5562e9c132f8a49169af39dd70bfd7820c84a244295c98e385e4ca7cac3c9b8e034c981eda51b8ca8d23b64369f1624c006e0003560d5531bfd40169ad38d84742b64418a46a699046079ad9ea8d6313ca874f676c699c86af068474f24e912789c27f27f7e5f03f6ac39e72bdbf049c5d21e33db051ce772fec5872a199638217de0a99438123bec6b2efb0c1d018ab7e12a", 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000008c0)='[cgroup G\x15\xec!\xbf\xa2=p\v\x10\xe8\xa0d\xc3\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="0180791b26aefc8df1c084104336db0a000000000300000000000000124d6f1a2af840"]) openat$cgroup_type(r2, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000004c0)={'veth0_to_bridge\x00', 0x200}) openat$cgroup_ro(r2, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r2, 0x3, 0x1, 0x80, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x12) r7 = gettid() sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./\x00\x02\x00\x00z0\x00\x05cb#\x92\xa3\xdf\'8\xf3\xcfp\xaf\x8c\xf5\"\x9d\x02\xe7K)\x8d]\x81\xd7uE\xb6OF\xd8\x92\x16A\xe9\xde\xd2\x15X-\xa8\xb0\xc8\x9c\xd4\xef\xf8\xa4(\x8c\xc1\t\x16\x91\xf5uz\xd4\xb7\t\v\x00h\xf3\x89\t5\xa9\xb7\xbe\xe2=\xb5\xc1\xec\x87Z*R\x83\xef\xaaD\x1e\xc5|\x94\xed\xa0\xeb\xa5\x96\xd0\xa9\x80\x8e\xb1\x116&+Z\x96\xe1d\bV\r+\x9aFmt\x06\x06\xab\x02\x15\xbb\xc9\xbb\x81\xb1\xa4\xd1\x11\x98v\xfc\x88\x13\xf8O\xfa\x95\xec/', 0x200002, 0x0) perf_event_open(&(0x7f0000000540)={0x139f605562ecba0b, 0x70, 0x9, 0x6, 0x7fff, 0x4, 0x0, 0x5, 0x400, 0x2, 0x0, 0x4, 0x7, 0x9, 0x1, 0x5, 0x80, 0x5, 0x9, 0x4, 0x9, 0xb61c, 0x7f, 0xffff, 0x7fff, 0xfff, 0x6, 0xfffffffffffffffb, 0x8, 0x6, 0x6, 0xfffffffffffffffd, 0x8, 0x80000001, 0x1ff, 0x1000, 0x4dfc, 0x80, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000500), 0x4}, 0x10020, 0x3f, 0x3, 0x4, 0x8000, 0x7fffffff, 0x5}, r7, 0x6, r2, 0x8) [ 1787.827608][T16214] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 03:38:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10e, 0x1f000000) 03:38:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0x3db6a24dd81d756e, 0xf000, 0x8, 0x9, 0x1d}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:31 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1788.156618][T16229] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1788.211407][T16234] binder: 16233:16234 ERROR: BC_REGISTER_LOOPER called without request 03:38:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x57, 0x8400) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x2}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="d5c6757a11e5574a4da7cf162d792678e17f6d695f828aae136a82ad80c64c2f5948ae96596e1a3e3376005cf14b4ddfa1b774215f837848f43aefce2f312cada8c14cf63e810201d25791bad88615b186a7d5805df9b802bde6ccaaa9bc00009b1ebe7688433f11072d222d5fabb8125c3e7db61e75129f04acba", 0xffffffffffffffa6}, {&(0x7f0000001280)="b319299bfe8d3b2dbff805e3175984fae16672a99f64055b13cb1843c148b6051d57c413fd215f9307f2b92841ea1485d017c6b863c4b74a6ae452023141799f9a3093bae423937bdee1fa38d8dd77e95df4c03d193a352b07bac28f76d788e86eb3da139988ba5f7670aa1b083d03150f9ee4f748a331f35a829513c4d8d2c2489feda6d7eab9b137487deea836c246638baf06782cee737ff4a61ffc96e8a7ef0a8038f134b82b593b9a15c80db5b65bd567c95b284ed642a1d6fc4e1b9662f34645b61d5300df3d4222de3f671bfeaa97386cd874a05caab1779ac9fb7524c016b3146a8efaf036f0b264d2874f922426c1ab02e4b339f3", 0xf9}, {&(0x7f0000001700)="96a7e81146d7ccd30126da8d4bff0c2dfea7800ab472e448bf15ba28e4c273d07be80ed4ca4003ae5843c28de4d712d483690a6c40c70753eda6ef5e7ef0d92c35951885ebf1d63d3e227c30f46f2568e319ebd56534e7266ab7b44c54676f19e0eb27504274c95727a29a45a8895c0bdfcd78df52f806cf04095b67cf84e32ba5a88fbdb28a3be85507f7f3873c9579977037a510922321c022c7d8234661ac2e24467e4fbbb619dea5c00130930417", 0x8d}, {&(0x7f0000001440)="47f0b269e8e57b13a441d28714fd8cb63caebe3840b62a721854ec82c7bbe43ca94aa03cd4af7850a48b90607f72198dfccebdf269803f49c028cbb51b658464aac97fa7d2397c9e1631449ec4ce0f5c47b5346a7a805eade7ea59f7a6f75946b0f7759c628f374bd68cfe049e4a5b3511534e9bc27d6e70425c53cd7827ac63e987f236f1e88f41f460a953d53f39fbfc2dd9adb75c34303efd97bc2ab719048b536f248651e7d92eb63c7b8fa1bedf7e2d250b6ddce5c5c975e92e70861dfb5a9541d197483053f35d978fd0f81bdf7d6d129fef8fcfe5b3a5e373445a4a867265", 0xe2}, {&(0x7f0000001540)="b41e69bc2dfeae10c0cd1e5495d29637170c04f1639c635989ad2416ba2d60d478439fad0d5261d8da554823c0904d9a7b9f5f3637bdb1680e366593b4981c2d01f344ad4e7ff33c894b5b1431330ff0aec211d95fea07d0298e21caffe4cd914e7787ecf11b2637b179493d7d8bc746c0df5488cfe37be641bdb89209fc98f52987d6dad65dd9ec4c1755dd999f64a61dda865536f66ac038602342c60aaa702947ca999032966e4e23fa7e80eae57c369eac94f540", 0xb6}, {&(0x7f0000001600)="1e7863182c8445efc90da5df59416ea151e2000177303a3a65526729a6736b41069167cebf4a312e88e7aa7cafdd64d314b4a343a687a8641b3179ceebe38edc261987fe77c711d3d88ffb6ecdc736b72bc66f803ab049ba6277ac7ebae285239450875e02125d3f6af9aae0c11b5332b5e2ba2f401951abb582c1293e46d0fe4239620f96f68181a20a15eb831118d7271650bb04da90f6581ae74894277d99952a288d118507f67ec61b34c6ba8bb35534c95abc9657cd36cd8fe3e5a37a4e93c03af0e673adc2d383965a56f77918e4b56981c7a073f8f96651423d4e209ca02ac6582494d089c0a07dd573131e6d7e12e69675ddd9c5", 0xf8}], 0x6, 0x6) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10f, 0x1f000000) 03:38:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x91, 0x0, 0x0, 0x0, 0xed91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x40001, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400800, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}, 0x120) 03:38:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0xffff, 0x5, 0x4, 0x20, {0x77359400}, {0x4, 0x0, 0x0, 0x7, 0x9, 0xfffffffffffffffa, "af5f1447"}, 0x2, 0x4, @offset=0x8001, 0x4}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:31 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x6, 0x4) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\xb3\xea>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') preadv(r2, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) 03:38:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x110, 0x1f000000) [ 1788.529002][T16250] binder: 16248:16250 ERROR: BC_REGISTER_LOOPER called without request [ 1788.564062][T16258] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1788.608983][T16250] binder: BINDER_SET_CONTEXT_MGR already set [ 1788.609208][ C1] net_ratelimit: 22 callbacks suppressed [ 1788.609216][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1788.626586][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1788.629227][T16250] binder: 16248:16250 ioctl 40046207 0 returned -16 [ 1788.643594][T16256] binder: 16248:16256 ERROR: BC_REGISTER_LOOPER called without request [ 1788.655781][T16265] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1788.812522][T16270] binder: 16268:16270 ERROR: BC_REGISTER_LOOPER called without request [ 1788.872665][T16272] binder: BINDER_SET_CONTEXT_MGR already set [ 1788.885246][T16272] binder: 16268:16272 ioctl 40046207 0 returned -16 [ 1788.893703][T16272] binder: 16268:16272 ERROR: BC_REGISTER_LOOPER called without request 03:38:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff, 0x2201) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)=']\x00', 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x111, 0x1f000000) 03:38:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:32 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001280)={@in6={{0xa, 0x4e24, 0x8, @mcast2, 0x4}}, 0x0, 0x9, 0x0, "3c7db37877ca3c47ea660565be1d3cc05a5de062c47dc0957e962acd1ab6e60d76f1260c9301c77cc87d9a3e48c20d8187070da550ebd2eb53f91b939a2f110c3cc41d2e0d182715bcbf09f9c617c1bf"}, 0xd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x2040000008a) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0x16}, 0xfffffffffffffff8}}, 0x0, 0x7, 0x0, "7cfe4d5d83c1547a46725de76f2a3079d08b79778754d8c24c511dc59b79da4332ac56b11914e3707d1deab9deef5fd9ab0e6a375c7693b975270ab57f267bf6cd0ee43a05d20bb7b941403b3b72e5f1"}, 0xd8) [ 1789.109803][T16281] binder: 16277:16281 ERROR: BC_REGISTER_LOOPER called without request [ 1789.115112][T16284] binder: 16280:16284 ERROR: BC_REGISTER_LOOPER called without request 03:38:32 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffe38, &(0x7f00000000c0)=0x80009) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r1 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsf0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x0, 0x0) r2 = getpgrp(0x0) ptrace$setregs(0xf, r2, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000002000)='/dev/audio\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x113) process_vm_readv(0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001b80)=""/117, 0x75}], 0x6, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x5, r1, &(0x7f00000004c0), 0x7fffffff) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x1, 0x0, {0x2e, 0x2d, 0x10, 0x9, 0x0, 0xfffffffffffffffa, 0x1, 0xf2, 0xffffffffffffffff}}) close(0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x28, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}]}, 0x28}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002080)=""/114, 0x72}], 0x2, 0x0) 03:38:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1789.189616][T16285] binder: BINDER_SET_CONTEXT_MGR already set [ 1789.195628][T16285] binder: 16277:16285 ioctl 40046207 0 returned -16 [ 1789.235308][T16289] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1789.280329][T16294] binder: 16277:16294 ERROR: BC_REGISTER_LOOPER called without request [ 1789.300775][T16289] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x112, 0x1f000000) 03:38:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181400, 0x12) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) [ 1789.409135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.415031][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.531494][T16311] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1789.569091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.575049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.576248][T16307] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1789.612963][T16313] binder: BINDER_SET_CONTEXT_MGR already set [ 1789.644137][T16313] binder: 16309:16313 ioctl 40046207 0 returned -16 03:38:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x113, 0x1f000000) 03:38:33 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffe38, &(0x7f00000000c0)=0x80009) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r1 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsf0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x0, 0x0) r2 = getpgrp(0x0) ptrace$setregs(0xf, r2, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000002000)='/dev/audio\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x113) process_vm_readv(0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001b80)=""/117, 0x75}], 0x6, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x5, r1, &(0x7f00000004c0), 0x7fffffff) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x1, 0x0, {0x2e, 0x2d, 0x10, 0x9, 0x0, 0xfffffffffffffffa, 0x1, 0xf2, 0xffffffffffffffff}}) close(0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x28, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}]}, 0x28}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002080)=""/114, 0x72}], 0x2, 0x0) 03:38:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:33 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x68, "7f9a6c2ba33edf796d93d611bd4370eced629f2b6998b089c14a437addb9986389891d165d9ca2c48fad29f6ceb3a7e39aefa2c3c21399d7c05c0da76ed4bf18ea94bb9f4aa9cce60d6081d20c3155a6e1af564aa1746a191a2b02a2ba1f4bbebf3b3d436eadfc46"}, &(0x7f00000001c0)=0x8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) socket$packet(0x11, 0x3, 0x300) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) socket$inet(0x2, 0x807, 0x7ff) r3 = syz_open_dev$sndpcmc(&(0x7f0000001280)='/dev/snd/pcmC#D#c\x00', 0xff, 0x10000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000012c0), &(0x7f0000001300)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b80)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000001c80)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001cc0)={'bcsh0\x00', r4}) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000001340)=0x62c9) [ 1789.957675][T16331] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1789.969545][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.975852][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1790.015077][T16327] binder: BINDER_SET_CONTEXT_MGR already set [ 1790.029782][T16327] binder: 16323:16327 ioctl 40046207 0 returned -16 03:38:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x114, 0x1f000000) 03:38:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) tee(r0, r1, 0x9940, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0xb7, @mcast1, 0x69}, @in6={0xa, 0x4e22, 0x0, @local, 0xdd7}, @in6={0xa, 0x4e24, 0x1ff, @ipv4={[], [], @broadcast}, 0x2392}, @in6={0xa, 0x4e22, 0xffffffff, @loopback, 0x9}], 0x70) [ 1790.129134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.135059][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.212853][T16345] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1790.255337][T16346] binder: BINDER_SET_CONTEXT_MGR already set [ 1790.277198][T16352] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1790.281549][T16346] binder: 16341:16346 ioctl 40046207 0 returned -16 [ 1790.315372][T16350] binder: BINDER_SET_CONTEXT_MGR already set [ 1790.338438][T16350] binder: 16348:16350 ioctl 40046207 0 returned -16 [ 1790.360784][T16358] netlink: 48 bytes leftover after parsing attributes in process `syz-executor4'. 03:38:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:33 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000001, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x1, 0x66, [], 0xe1d, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x39b) 03:38:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x115, 0x1f000000) 03:38:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1790.822797][T16371] netlink: 48 bytes leftover after parsing attributes in process `syz-executor4'. 03:38:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}}, 0x20000000) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) execve(&(0x7f0000000600)='./file1\x00', &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x36, &(0x7f00000006c0)='mime_typeGPL\'GPL%)@@!]#:(cpuset{wlan0trustedwlan0eth0\x00'}, 0x30) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x4000000040490000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x8, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x101, 0x7ff, 0x7, 0xca3, 0xfff, 0x0, 0x22a, 0x7, 0x7, 0x6, 0x100000001, 0x2, 0xffffffffffffff81, 0x3, 0x100000000000, 0x6, 0x100000000, 0x0, 0x10001, 0x0, 0x0, 0x3, 0x690, 0x0, 0x80000001, 0x5, @perf_config_ext={0x6, 0x9}, 0x8, 0x200, 0x8, 0x0, 0xff, 0x80000001, 0x7f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x6) r6 = getgid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000680)) getresgid(&(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000940)={0x418, 0xffffffffffffffda, 0x1, [{{0x3, 0x0, 0xff, 0x80000001, 0x1, 0xffffffffffffff00, {0x6, 0x3, 0x100000000, 0x4, 0x5, 0x80, 0x0, 0x8, 0x7, 0xff, 0x1, r3, r6, 0x4, 0xbaa}}, {0x2, 0x2, 0x4, 0x3, 'proc'}}, {{0x2, 0x8, 0xfffffffffffffff7, 0xc0e7, 0x81, 0x20, {0x2, 0x1f, 0x80000001, 0x0, 0x5, 0xcd2, 0x800, 0x5, 0x5, 0x1, 0x4, r3, r7, 0xffffffff, 0x2}}, {0x6, 0x0, 0x0, 0x9}}, {{0x0, 0x1, 0x80000000, 0x1, 0x80, 0x80000000, {0x4, 0x81, 0x8, 0x2, 0x907, 0xff, 0x48c, 0xffffffff, 0x1, 0x5, 0x4, r3, r8, 0x7b8, 0xfffffffffffff800}}, {0x0, 0x1, 0x36, 0x1, 'mime_typeGPL\'GPL%)@@!]#:(cpuset{wlan0trustedwlan0eth0\x00'}}, {{0x3, 0x0, 0x9, 0x2, 0x81, 0xff, {0x0, 0x5, 0x2, 0x6, 0xff, 0x8001, 0x4b, 0xb2b, 0x6, 0x0, 0x80, r3, r9, 0x1000, 0x4}}, {0x4, 0x634, 0xe, 0x1, '/dev/admmidi#\x00'}}, {{0x4, 0x3, 0x1, 0x7, 0x8, 0x9, {0x4, 0x11, 0x5907, 0x6, 0x3f, 0x4, 0x101, 0x101, 0x5, 0xfffffffffffffff8, 0xfffffffffffffff7, r10, r11, 0x9, 0x2f9}}, {0x3, 0xfff, 0x14, 0xfff, '-&vboxnet0%\'vboxnet1'}}, {{0x0, 0x1, 0x0, 0xffffffffffffff81, 0x9, 0x0, {0x1, 0xffffffff80000000, 0x1, 0x4, 0x200, 0x70, 0x5, 0x7f, 0x5, 0x80000001, 0x9, r3, r12, 0x1, 0x4}}, {0x2, 0x2, 0xe, 0x6, '/dev/admmidi#\x00'}}]}, 0x418) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x10000) 03:38:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x116, 0x1f000000) [ 1790.938685][T16372] binder: BINDER_SET_CONTEXT_MGR already set [ 1790.981843][T16372] binder: 16369:16372 ioctl 40046207 0 returned -16 03:38:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000100)={0x9, 0x2}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 1791.084684][T16391] netlink: 48 bytes leftover after parsing attributes in process `syz-executor4'. 03:38:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1791.218498][T16401] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1791.240693][T16401] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1791.268618][T16403] binder: BINDER_SET_CONTEXT_MGR already set [ 1791.289173][T16403] binder: 16402:16403 ioctl 40046207 2000dfd0 returned -16 [ 1791.323386][T16409] binder: BINDER_SET_CONTEXT_MGR already set [ 1791.341363][T16409] binder: 16402:16409 ioctl 40046207 0 returned -16 [ 1791.349101][T16409] binder: BINDER_SET_CONTEXT_MGR already set [ 1791.369516][T16409] binder: 16402:16409 ioctl 40046207 2000dfd0 returned -16 03:38:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x117, 0x1f000000) 03:38:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x115, 0x1f000000) 03:38:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x440, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x50}}, 0x4000000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x116, 0x1f000000) 03:38:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1791.885154][T16431] binder: BINDER_SET_CONTEXT_MGR already set [ 1791.964011][T16434] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1791.992529][T16431] binder: 16421:16431 ioctl 40046207 0 returned -16 03:38:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x118, 0x1f000000) 03:38:35 executing program 1: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='securityfs\x00', 0xc0ed0000, &(0x7f0000000080)='\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4400, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x9) [ 1792.035005][T16441] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1792.280796][T16457] binder: BINDER_SET_CONTEXT_MGR already set [ 1792.290182][T16457] binder: 16449:16457 ioctl 40046207 0 returned -16 03:38:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @multicast1}}, 0x50061ce4, 0x2, 0x10001, 0xff, 0x1}, &(0x7f0000001280)=0x98) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x119, 0x1f000000) 03:38:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1792.683765][T16470] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1792.715450][T16466] binder: BINDER_SET_CONTEXT_MGR already set [ 1792.723774][T16469] binder_thread_write: 18 callbacks suppressed 03:38:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1792.723842][T16469] binder: 16463:16469 ERROR: BC_REGISTER_LOOPER called without request [ 1792.729632][T16474] binder: 16471:16474 ERROR: BC_REGISTER_LOOPER called without request [ 1792.762217][T16466] binder: 16464:16466 ioctl 40046207 0 returned -16 [ 1792.763797][T16476] binder: 16464:16476 ERROR: BC_REGISTER_LOOPER called without request 03:38:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x100000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x7000, 0x4fff}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ffef"]) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x5) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000280)) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8200, 0x0) write$P9_RFSYNC(r7, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) setresgid(0x0, r5, 0x0) setresuid(0x0, r4, 0x0) mq_open(&(0x7f0000000000)='!selinux\x05\x00l S\x8a\xd1?\xa9\x94M\xf4\xe46h}S\xc9\x7finux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x251d, 0x0, 0xfffffffffffffffc}) 03:38:35 executing program 3: socketpair$unix(0x1, 0xffffffffffffc, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x11a, 0x1f000000) 03:38:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1792.906425][T16476] binder: 16464:16476 ERROR: BC_REGISTER_LOOPER called without request [ 1792.938532][T16486] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:36 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f00000000c0)=""/37, 0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1793.168124][T16503] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1793.171136][T16500] binder: 16499:16500 ERROR: BC_REGISTER_LOOPER called without request [ 1793.233666][T16505] binder: BINDER_SET_CONTEXT_MGR already set [ 1793.250328][T16505] binder: 16499:16505 ioctl 40046207 0 returned -16 [ 1793.262598][T16505] binder: 16499:16505 ERROR: BC_REGISTER_LOOPER called without request 03:38:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x11b, 0x1f000000) 03:38:36 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xcf, 0x2000, 0x8, 0x3, 0x6}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x8, 0x10, 0x8001, 0x1800000000}, &(0x7f0000000100)=0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r3, 0x0, 0x0) 03:38:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1793.580715][T16514] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:36 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xfc9, 0x400) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) r1 = syz_init_net_socket$llc(0x1a, 0x100000105, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="491e20d575789851edee3bab71813ff3dcc153175c", 0x15}, {&(0x7f0000000040)="6234e22336462ddf8a8bd912d99c737060f3764435b25fbbe7bf653385ab0d7c9920399eaa67c1337d5c2fb3ade11c2f41f4c793b36f9aa69e4a03d847639753f09d3ae8eb1ee41ed4da344e89695f09dec6238638ca671a9494e0a7098a22cba2da0c845700577bdacb9fd5daa7ebd93fbaca042385e310db3aec6d02ffb2324ff0aeb5768d3cd5ce42203ea3bd7974b6677b3b1255ea", 0x97}], 0x2) 03:38:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1793.638296][T16515] binder: 16513:16515 ERROR: BC_REGISTER_LOOPER called without request [ 1793.649582][T16522] binder: 16517:16522 ERROR: BC_REGISTER_LOOPER called without request 03:38:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x8000000) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x11c, 0x1f000000) [ 1793.713287][T16525] binder: BINDER_SET_CONTEXT_MGR already set [ 1793.739543][ C1] net_ratelimit: 18 callbacks suppressed [ 1793.739551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1793.751041][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1793.769337][T16525] binder: 16513:16525 ioctl 40046207 0 returned -16 [ 1793.779397][T16532] binder: 16513:16532 ERROR: BC_REGISTER_LOOPER called without request [ 1793.807576][T16535] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:37 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2201, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x8) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x4) [ 1794.289134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.294949][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x11d, 0x1f000000) 03:38:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x200000) write$UHID_CREATE(r2, &(0x7f0000001280)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/188, 0xbc, 0x10001, 0x2, 0x0, 0xffffffff7fffffff, 0x4a39}, 0x120) 03:38:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1794.424700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.430514][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1794.436377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.442207][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5, 0x9}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x9ae0, 0x3, 0x0, 0x896, 0xf, 0x8001, 0xa}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5}) [ 1794.476343][T16555] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'gre0\x00', 0x400}) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1794.618599][T16567] binder: 16563:16567 ERROR: BC_REGISTER_LOOPER called without request 03:38:37 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x6e20, @broadcast}, 0xfffffffffffffeaf) fcntl$getownex(r0, 0x10, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) rt_sigqueueinfo(0x0, 0x400024, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_submit(0x0, 0x0, &(0x7f0000000980)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000300)=0x20200000, 0x4) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x280) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000440)=0x10001, 0x8) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f00000001c0)='./file0\x00', 0x5c, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000200)="eef5e3f0e3d7655d59ba9146e083f77df4ed8aa6", 0x14, 0x1ff}, {&(0x7f0000000240)="e98c75630fc6e37b7d9beb59899178d58345d281b3b3fa97573d7b9670791e849c8bf35dacd17444aaee4275a9ddd6516ade825e8724993dcc0b3ce8b8533f29fbaac541c6c70bb1aeb4d2a6fbaa17080730a00ddb7041581831ff3b7f24cbac1023d57d466e8fdefe9585c998894ef26801e2fdc2812cda70167c5c5fbdabe14e3450fe6c30402e5a860c7d61e3a8557fe641e5fef67a12f8f65c4a8923e18a9c8b451d73afcb5c4d036a4c", 0xac, 0x1800000000000000}, {&(0x7f0000000480)="9b78e85893bb0a1454d91f22fa1067334cdc9490bceb94b24f48ed8f4a2f6f6c483abe0f4ede9f3d08a8f19d2ef756eac06a08b8006caa178067f2a5d53eb228dece0fc8f63a388e091aaf408dd5441874c271cc2a505f0076d9e2ceb42f506f941ee4d2f975b6f95e6b20c15d848d4bb8d7807a6819b682dd7b1e37cedbe40c6147018080bd8496e88093cbdf95e9dac237ef28111d33078480", 0x9a, 0xfffffffffffffffd}, {&(0x7f0000000540)="647d81926ccc264f7679b058fba3514796e53568389655754a0d08feffc5c69f552ea5304f2c2ffd78ddf4c3aa61b12b8805d98c4711b3533767360ee0ef8fd8f5d1479496239c7529952e76b7e45f20de2b9495af1e2ae1bf12ed841c5500e7029f80f16afa68f284e25edb39c162d880bf13eb390d7478299419131843dc93bf08be5fe80d3113b6bef93ef7d4862c1ad23bb82d0c4f0ce34acd66fbb0c5ce7b95438443be9dbede37688db6f4ca08814047317b3811b7a45eb44addeafaa4c474a2776b2243f8a8781ce7d9dfc7e139451507ca", 0xd5, 0x7f}], 0x2, &(0x7f0000000340)='bbr\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x49, &(0x7f0000000080)={@mcast1}, 0x20) [ 1794.662879][T16569] binder: BINDER_SET_CONTEXT_MGR already set [ 1794.719157][T16569] binder: 16557:16569 ioctl 40046207 0 returned -16 03:38:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x11e, 0x1f000000) 03:38:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1794.764945][T16580] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1794.859143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.865041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.126364][T16596] binder: BINDER_SET_CONTEXT_MGR already set [ 1795.132941][T16596] binder: 16591:16596 ioctl 40046207 0 returned -16 03:38:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xcde, 0x30000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x15f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0x100000001) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 03:38:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca", 0x24}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x11f, 0x1f000000) 03:38:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x401) 03:38:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1795.459526][T16603] kernel msg: ebtables bug: please report to author: Wrong len argument [ 1795.473797][T16604] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r0, 0x10001}) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:38 executing program 1: unshare(0x600) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x265) 03:38:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca", 0x24}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1795.526292][T16607] binder: 16601 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1795.526342][T16607] binder: 16601:16607 ioctl c018620c 2000dfd0 returned -22 [ 1795.603139][T16615] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1795.609716][T16618] binder: BINDER_SET_CONTEXT_MGR already set [ 1795.622824][T16618] binder: 16601:16618 ioctl 40046207 0 returned -16 03:38:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x120, 0x1f000000) 03:38:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0xfffffffffffffffe}, 0x178) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 1795.654745][T16618] binder: 16601 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1795.654757][T16618] binder: 16601:16618 ioctl c018620c 2000dfd0 returned -22 03:38:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) socketpair(0x3, 0x80007, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001280)={{0x2, 0x4e22, @loopback}, {0x6}, 0x4, {0x2, 0x4e20, @remote}, 'hsr0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x303, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8040) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1795.874875][T16635] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1795.917271][T16638] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca", 0x24}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000080)=""/200) 03:38:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x121, 0x1f000000) 03:38:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8080, 0x0) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000001480)=[{&(0x7f0000000180)="713e906279e90d29a6a1e909f3ae483b16bcec630d9b1f08de1146c891a91b796cc49487df9f95ab46fa9b97029f89e18811b464eb5456c3aa8b7731fb30b30a2a0ff524db6f5bfab9537883fbbf0840a9759ddb5dc483195836f0c9890e3a50e7f656be9c72da01ba3c701c578a17", 0x6f, 0x5}, {&(0x7f0000001280)="10e3c30ee3db56a790287499d13688d1a9717e3a2df4e7f603dfe301535dd41199820f53c3e5ce", 0x27, 0x5000000}, {&(0x7f00000012c0)="49b65a10d196cfaff3464c34e50fdb8306713ed2166c16814eb5280f68d76ba4670156136eefb7d786886959ea44830f8ff6294c1201a161226aaf35929e63caf61b6dc03f9eeb7c2aa59d973ebf311463e1d105143712010949a2cffd5ad24f8627bf1ae3a2329533dd7b097f9dfee0306d817e5fa916f1095c7f4d835a9973746db112049af3e8791a903e486e2b143390a41add18083222e224b3b05422d2a8", 0xa1, 0x6}, {&(0x7f0000001380)="72c5ab24dc8ce94743780b2c57ffde92228df23599a719427a3be48477d149a10156a101b61ddbf8631689aeb502ecdc283ec9e1779c77af166ef4ede6ed0fd98023ca75586c3a2fc355cff6f893e3c8dedd828f90582ef8fa2e03a887e443f5dcf88915fdd60a164b5c671bd2fa7493b6141f02a8721f5d30808ed7e9994e63b935fc27f748124d561ac1ff0b47c679ffe35b5cbdd52b7eccc77f0ac783e7038077c4cecead4cf7c01698248144d10ae8e91692be9c46458ad15c9dae1189e2f9cf292d374f20e300806f1b261e1d63a6110dc4d7c3063ac7a795dadaeebfc4a1d576", 0xe3, 0x2}], 0x80, &(0x7f0000001500)='nat\x00') getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:39 executing program 1: timer_create(0x1000000000000b, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000000140)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80101) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xfffffffffffffffa) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x5, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, &(0x7f0000000400)) 03:38:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1796.426313][T16657] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1796.512481][T16655] binder: BINDER_SET_CONTEXT_MGR already set [ 1796.544543][T16655] binder: 16646:16655 ioctl 40046207 0 returned -16 [ 1796.544808][T16661] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x122, 0x1f000000) 03:38:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80000, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) recvfrom(r0, &(0x7f0000000180)=""/43, 0x2b, 0x40, &(0x7f0000001280)=@nl=@unspec, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x5, {{0xa, 0x4e21, 0x7, @local, 0x7}}}, 0x88) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$lock(r2, 0x27, &(0x7f0000001300)={0x3, 0x0, 0x2501, 0x8bc2, r4}) [ 1796.820504][T16673] binder: BINDER_SET_CONTEXT_MGR already set [ 1796.827471][T16673] binder: 16672:16673 ioctl 40046207 0 returned -16 03:38:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x1000, 0x8, 0x3, 0x6, 0x0, 0x5, 0x40000, 0x4, 0x100000000, 0x2, 0x7f, 0x6, 0x2, 0x0, 0xa28, 0x1, 0x9b, 0x9, 0xfffffffffffffe00, 0x40, 0xfffffffffffffff9, 0x10001, 0x5, 0x800, 0x6, 0xca91, 0x7f, 0x1, 0x5, 0x7fff, 0xe7fe, 0x20, 0x3, 0x15, 0x29, 0x8, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x7e}, 0x2020, 0x3, 0x2, 0x7, 0x1, 0x8000, 0x545b}, r1, 0x8, r0, 0x3) r2 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) chroot(&(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) clock_getres(0x0, &(0x7f0000000340)) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x683) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000200)=""/113) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$unix(r2, &(0x7f00000003c0), &(0x7f0000000180)=0x6e) setsockopt$inet_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000004c80), 0x0, 0x0) 03:38:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) sync_file_range(r1, 0x3, 0x8001, 0x3) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) socket$inet(0x2, 0x1, 0x334) 03:38:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x123, 0x1f000000) 03:38:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x3f00, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1797.281270][T16701] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1797.342136][T16706] binder: 16697:16706 unknown command 0 [ 1797.356038][T16706] binder: 16697:16706 ioctl c0306201 2000dfd0 returned -22 [ 1797.365046][T16713] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x124, 0x1f000000) [ 1797.408823][T16714] binder: BINDER_SET_CONTEXT_MGR already set [ 1797.429343][T16714] binder: 16697:16714 ioctl 40046207 0 returned -16 [ 1797.453148][T16718] binder: 16697:16718 unknown command 0 03:38:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1797.474837][T16718] binder: 16697:16718 ioctl c0306201 2000dfd0 returned -22 03:38:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1797.673117][T16735] binder: 16733:16735 unknown command 0 [ 1797.686813][T16735] binder: 16733:16735 ioctl c0306201 2000dfd0 returned -22 [ 1797.757074][T16735] binder: BINDER_SET_CONTEXT_MGR already set [ 1797.770588][T16735] binder: 16733:16735 ioctl 40046207 0 returned -16 [ 1797.791522][T16738] binder_thread_write: 16 callbacks suppressed [ 1797.791531][T16738] binder: 16733:16738 ERROR: BC_REGISTER_LOOPER called without request [ 1797.810885][T16738] binder: 16733:16738 unknown command 0 [ 1797.817132][T16738] binder: 16733:16738 ioctl c0306201 2000dfd0 returned -22 03:38:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4001082}, 0xc, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB="6800000685650e42bae100", @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf25010000000000000008410000004c00180000000462726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 03:38:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x125, 0x1f000000) 03:38:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x1000000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000440)={0xa, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000840)={r2, 0x2, &(0x7f0000000740)=[0x5, 0x1], &(0x7f0000000780), 0x40, 0x2, 0x2, &(0x7f00000007c0)=[0x2, 0x20], &(0x7f0000000800)}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="0500d600c46b78d786d2a600bede2f000000000000000736d03629e6befa55d52439cea0f80312a519461a51a9be4944856836b1d899367ffa35047b4e034cf268bd3a710d2c05982355f5a10f7b53bc4ebda523ee74a9fa7a1302a59ae4246c12349a557f010100000000000063beaaa517f27f7c68c2194a000000000000004b8421d26e2e0410505d2f9246e1d5fd97a59aa746e27a21cef095b987c5872563b7d2c0183ecaeb3b388ee9bc0d0639de6b4b1d723dbf554cb421d10f994c6ed3f1b6837bcf8cd2f86dbe4793990b05834cece045b2332389c469d0cfeff94be9792a3b0f182e14a996ef70231859b0d104e5ab5d856312b7830b48f25557d2074437fbdd27416d56e44b8baf9de1caf69af036b44e2bb9b5724934c01250e316a728333e965fa96e57b61045b533d9c66b364c36ac791c156e05e03a907b7ead02776d7174561bbc96827ff4bb1382607e6934c8f1b132c8bc08b947025196e28690066276a5de18b957c6566baef1a1eae63d190f273a4bfdf5a79c103ea8b38f4f99dba22386eedea6c97f3f98b70e0573ef79f0fcd66dfa1b378f3972c00f7d4f3164215f501c764bd61f9fb883ba98ff50c9cbd512be7402e666dad51e81eb218e46591c29b19421bba1963b1c07d2a144742db82b042722ad1a367ff88f3d9fdcd12f4e5eb385be8ab79bf84bc055d64574411707c1506feabe337160f531e6db70453d3be55da8c08937f526b52e"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000600)={0x133448d98b5082ed, @remote, 0x4e20, 0x1, 'none\x00', 0x32, 0x5, 0x58}, 0x2c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000880)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000400)={{r7, r8/1000+30000}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r9, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) connect$netrom(r4, &(0x7f0000000540)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$P9_RWALK(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="230000027fd06f0100020061688f23d53cb66d3e82ae0c3000000077ff000000000000ffffff7f"], 0x23) setsockopt$sock_void(r6, 0x1, 0x3f, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) [ 1798.178496][T16750] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1798.193861][T16748] binder: 16747:16748 ERROR: BC_REGISTER_LOOPER called without request 03:38:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1798.237587][T16755] binder: 16754:16755 ERROR: BC_REGISTER_LOOPER called without request [ 1798.251502][T16748] binder: 16747:16748 unknown command 0 [ 1798.267052][T16748] binder: 16747:16748 ioctl c0306201 2000dfd0 returned -22 [ 1798.299484][T16756] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1798.341750][T16761] binder: BINDER_SET_CONTEXT_MGR already set [ 1798.364482][T16761] binder: 16747:16761 ioctl 40046207 0 returned -16 [ 1798.376041][T16761] binder: 16747:16761 ERROR: BC_REGISTER_LOOPER called without request 03:38:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x3f000000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:41 executing program 3: socketpair$unix(0x1, 0x200002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002b00)=[{&(0x7f0000001740)="3527cb9e2024d1eca45ea05f2f3f", 0xe}, {&(0x7f0000001780)="2691c419eefcb6ee8411de311a08a7914b762557849a99b5d6abb40a283e6538fbcf2ecb1ffadd4ea34109d1127d76104d0ae4a9893bcdd8cb6fd95660f742bfc89bd5cc53c1522b17e7eea3a8c734829a5793aa243bc33f6737e407121c1ff8009bba79ca1e0eaec3b43118fbd3337175d5f58048d7", 0x76}, {&(0x7f0000001800)="b050e0452eecf29e9bb311f4000029280e2a2c969ae27b6f225e5eb171dc2a9f153087ebe413283f89294623abe0c845d4f4ce34cfaa6dc8e428c8946f6840dc7fb520a94abebdab30039b05340abf66574c548d4293282b7c7cff2e280227ad85f8a7746ace21602801ff70c9d4344b94d54b3ce7e27893083464becc1b77b720bbab4877989dcdb74c78495f2a469f9255168f823dc04a88cd25d603470e646e0da28486f214af3b104571fa8a88f6795473c46a7d93d0fd76ff3b", 0xbc}, {&(0x7f00000018c0)="75bc78e286ce12636f65421505d6d8c2472e44a222e14c9dc418fd6b8061397325ec3afaef851b19e3aafc6e468c18a1b10901118ebd1dc32d92b042268981860b4f9b97ef2e73ac7fc898f866f3fa7921b5b59bd1862293b3b8429718e4823ea6367c8949a5a86fb8b4852034e7afe92e5b33cd503620d48c264a8bdae03473d4798fa634435562140d71de8f442051", 0x90}, {&(0x7f0000001980)="48493ece86f4eacfbb02bdc577e83a6f613a9b7c9f482e17bd03fe0d4111f29c19f6f6af5c6d4326124304b7b13265aef326c7113699279aed865e1daebeb5e24cf9055290642bb4", 0x48}, {&(0x7f0000001a00)="67c93f27d261f53bd15794f4c32278deb938bd797edbbecc7a23eef5f7e03f2ace2b73f248c0b04e06afe142b7e49fa2a68beab7f3eef29403392f0d8667e7f27a3763a75e835a5857722f8831ec68374fbe85041d55029617668f09018008df41ef4c66142a4ff4f519935c5ed03d04d725c71420ad15653fc1b66471213333cbc5e9fb0b15921445ea2f888495596a0f9a2594da24507d2743c74c5fa95bf7261621136245e96f2f2170479f15aae98ff82706918a7968b4ca380a8db9b68b4add01e7968d7636306c22a7fbc3bb02e6ed86126606fc1d17ebc1a78cc92edf29ad57427988fd091fefe5978a4abd23cdfd852734e3c2d134da1ac1ef2e5def9ff92d74d68c96b8c2fec168c7bac45482cd208c7c60a48963fdd310f4f24a7b0566beb521f3468ceedb4cf0f567aa145f19bf493e84a892c699b716a775b1bb1a5eaca6623b668a31d1f07c86cfc6123819c9b9bded059719a2fbfdad07efb045b42d92a6a1dcf4abc6a1a04f737b92683869a1d9d895cd88c517095c99c405944de140f6a77c27c9ae27f97a76f80cf612f42d9e2ef7dfb209022df405f693de3586608ec9aa6b960beec3baa6367499d8202225f10307335cb42089c69e2c6f9a47c39d80b9ed143492d003f3acb0056c92b682681499cae425643f14a73e418c24029bb0aba58dd0a046c8c1b1ddc958088b10c9be1edeab153022642bf296a27715ce6927173449e78ca07f737d4035b076bc1fcb653eb7e89023c9778acb6a0890eeb7fb2028ac2bebcef7f157bd17585bcf17eaf6e85b1e7302386c62c5917f6d3c654cbac860c051042dd4cf69d9148ef25c41b81a96fca50cd0932edc78409c1ab228d7efae96bf1f26e5a9e8032dab6e656e56189abc99808f9e49bedc2bb16289269b7c6908ceeefb3c6b917f04d42ee83b7f60f9bcad61626873435ab952b1f8874f52e19134195c3c4651633aa4b59160c1d22614f043c2867864e63e354d75e5f920c6b812f0c7ca755137ae6871b2e6f8afcb9903f237277876ee679ecc157d5a83fa6caaf9987fb7d96621fe27ec2ed3e8541cfff023b8d8f4ea6b6bd0f938ed404ef3b545cd4ebaebbda908a048d1dbe26c537445560abd5a421d46033355fbd2605ee453decc5d77527d6f96ead4130be953b7b5fcd71b051459d1e3cd2109e6cef3a8bdc05b3a5f4bb9b351ff368194e321b080611c73c9974dea1b891404b7dbfec360d12515fcfd04bdfcbe3b8cd4c2bf8bb169a1eb0fa7b94e9fb5f15d32658bb1002aa3fd637d256a350a1bed343480af44a0b657c93d25671094736d515175427d2874a18c0d137640b790a1f14dde3f3b090c82fa7ef6e14691860b8873c66363bf55eeb1cd87170ee2426ebf38d014acb5cc5ec33377a50fedd9b0a6d6c4137aea431d8a6b1c05cdc3f42f64862760b0f02b5ded60c6b0c7d157c5ded717d6a5269852b0150d915dd4016c4af46e7d7be3f9be55338046895935e60f743c5668f2070f29edf89faf17cc1fe0f7c49ef8fb1d0dea9b54191f418f62e4ac301c7966daa1730ea0699ba2ecffb5fbfe150de9b3f1dcd661871c78176aca7c70c22ff3de5da9790d0a09e6ef53bba06c218cd75bf180048df274f8df6338ffad8d82a3c15e02680288668aabdab851d88de96c8c688fe2eb61cf82c4e44df58584dd18701f31decc18c3524d8e034df7811310565119cda92d28688f7f4f880cfd6621b2f585282a6446b5e89fa6440c46f2010813cadc7ee9a1357dbed8c706bf10e8205eddc808a68e4b6d3aa963842676e35e867844bdcdfe54124610f5ba41bded367dc027047c41279329ebf3c85b992b9ffc38ee4b5b0643cd223202065f4445594af5049bf2f97052e4b1a9782f8d8f6a7dfe918cc5b42c7150194ca2be3777b3f6730b9a7c054e1578b601ab203f313ecf8bdf797063d4902d4da8b143e25ca49eaf86df02cfee54f9d71ef0b5183ab1399fc7c0113e5fe2c1b31a84bf005835d243fe7424dd480ceb4d8cb7628a5abec6735b3ae656879491a8abf9964e45a6ecb448963c60060359c86fa506e5fa8c39b77fc8e8a2d8560469011157533926524e1e8aa6ec64f563410e13be67070cc29d3f77ca1937121b0431f60d7196ff6b90ef47b4f4bd22b2f258774a5fc640ea9c032f193b01b8be8c1fa6014eea85eb938bbbfd858ef50494ef35f64aca6f31fcb6094a0ec7331b9db2572b1aef1a50c9c006593d48b18c5a0217b21411a41d7d6da9abdfd321f9bb76bcf31ad0adf5e91a965989a95bd5d741ad52ae63d5a0573abb614d5d13f450ced75147d784eee59970d6456440db21bc262c27dc1af9d130cc695b05d5646d137559a8204adb2698666f280a7fc2b978b87dbb1d651f6e981893666caaf0977da830c964fb32d413c4d58843864a8da6c1077f023783c315d0b3b57771ced53831d5fac45736b3c489d2ce912b11a4d6239e2fae2aa757dc11fe9fccc72d63ef9c966129660e2a9fc7dd54c511cb6cddbfdf79fdfe8e4e7b511736b8a270a778dd5463cfe671c8691bf36b898fbc0c84a1ba12a43b9eb83db9e466140d458ca0ed9c17fdc0f559261b4f00f767d960aaf84a2d2302e52d47a9a88ebb07895461c2279b346f82e5861438f64c0ecb5c3f9c32d77857253aa7e894ad9cef6ccb91826a3fe5e096c85bb7fd89e086ffe71829717de6d4bcdd30f4771a128772de281b6a72812610fe6d22c6daaeea870de64303e8139e486cb35e1b9b9a5a990f5b37f0f56e14d92b08141ee27be561f2439de862073487114e8427a91970d4f33eeaa46423a0e709a217a0a2097148edc6ee4a0facfdf7fd73d5c732b053de2c299523f665816ea6cb00ee47acb715ba1b5226f11ff0da6965861e65e957ba7766730e2520eab3d7e5b8b21e3a116ae04d7fc34ff0099df19051becbc18ef9bd1ddbf4f339f78abd43e3a6485b784f54a05f54a424bf5d34d1f1358712126b0a56b76ae02d8f93d474fb9d65b16dfae2cbab21eedb1e0b85149f4f39af0a9aea0241eb1d5c63eab1f5a56d23a3a0845c0188cd35af17dc4cd1a6c5c5bcfc24b13f44446097369d7ce48a32bfcb9fe275f5da307b169ea47ea7180199fba7a5fdcad95dd496088762020ce7c5f77031dabcade553ca0f6b14e66a627bf66f352fca94e5c0e6f619208225c98ce9f49190196b12807f1d7217d60c73a6776ddf5c621f976a5987248f64e3fed2b1720c57e4a751415c84f006bf5f665bf29c4f92634c1b8bec52c5ee2e3a0e61ec33e460386df3105ca4adc8a7996d2a8f09e7a311237a87a726bc627b631f4ff6d333cfe0bb0ba21ee14e66ce4283721089db3ef036c07e0b32eafcfcae46fa99dd7e48ca363168dfbbdd0f268b325607211573bf200ff1d44de775a1080ad9c96b161e8cbc538f59fa1c276ad90b8230e82d24499ea0cbf5a471036821a6bc2c955cceaa897267637c63e5268c18edc755f343371d7665ea98832a92e00f4ea7c603e59afcb1d52bbc432e4b97ba84b5643cc35d27eccb3360d7c7cbe3f34302f5574d583b12cb94a3d34915f93fdc145cd2b9ac83dd94a78f1bdf3a9ce62190fe7ac59f6608aa08a2f3d7ed807f992d4b81678ed59dc05636b0f91bdd41e240548f922f4caf22bf7464137256e428d2c026234bddd116b143ad50e0483b779bd8f7ad925c3226859e2430374395d0a2d5ff5d6504b270238c881a66bd8a2f2a2544f7911727e06ee59c4f821b142f515354e4bcd85b51529292c3c8d8a96d68720163f3826ffffb723f78c65fd4cc67c32934fa80b08d87e3b7600b102167fa803ccd849e42c48a52d942f59da9b9cf97a0b28514699ff6f751d8e0c4f1ca5bc137beef590b5283f61d98cae21abf5841b10626851a0d38166d38d3b9ba5d2439c13e4b2b5c9be210ada96e90a9af3f26a796919d9ca9023220b7d447b90b7bf6d2c894ddfef3324c0dc3f83c35e2c836fc449ffc3a9eb38f05f5e4d54576095f253e15742868cfc24a97637e59375276835927140c9619d995e6393ce2ce1d6451408e5d5e5034235b845d53eeb3e47a3559cc29c68cadaa2e881336154742af2de404b6450ff514934779cd187dcc79b7a743aca2143234d3cb8a917d006336b48d52afe8b8f5005b3a5d360239764f1613866d0a1726b8d4badbe6afcb9f9b920aef0523ce6ed54a86a28e8232f0d6be2d04441c4df7754fd6f13b9842964de06be9b67c495ad4077863131af9ec7034f7defe4be09f6b6bbfa1d5bbe32b6f603dc27a157407543dd712df3beb46525e0adcebf65140531416cb144dd5459cf551200304002665174644ec3480606e390ae50a42e98cb677a0a3088adda8cc1c974150d2655bf6be508d9e59fadb46228366013f5bc9a789157b56c15c2da9c3dc9439e0a139ec23aae07919f62af01efec36cf205e04f03962043757fb15f40d4bfd4d3ce2ea0821b0992cf4292c417bbb9a1779b45a50daf24bbaf59d15b0ce7f3f2cf6289964846216eba4fc18a5aff6b24c699fba3503b8298ad9e116dfca86fb8938fb54ae80cfd71b652a09ff8f80ea275475bf7f0b0432dbeac5735cd50442c258b3293c4d2f2056bea96eb319d434407cedbed97cf500d80836beed327794efd4753dee3321e75a123a754a35abd73079c58bfb449e73446366b8320e2a91eb081a41a9509b474cd1c6de64f7a6689a2faf7783df80b35b78f42982d2963f15cc6dfa94f4182bdc8e31f59d2421d5c5d0a7bc82e910948fb7e339c846eaec29d226c7751f7a624060183d53f557931e3e2d359a4f7f29a8494ecfdb8b2dbc2602551ee13fcd256253eb6aea4dfd1fa73865e339666f14e09d9a1b8032c2fe10a465d903c702d7ef301d055b433fc0088e83b1e7d8183033cd8b312cae95dc974fabd5727ad8f704c921846c7c8d236454039e3d3fc4213b8f901cd83fdaf53b16a5bef3e6a7e5caa8a260fdc10fce74157bf065f4f646f05ce204a79834c2cfcfdcf3627f4065346f7d282015995846624ff2799be18ce4041bf3a5e9360e1417672a24657d86a66370c2ab02526c66ba7f6f3f186444cb6646a4d513831e3d3fdcefff0a10b252fa300778f0c27afd2fc314b69f1163ea1f3537f9794bc33d1655fb99f4070453342d091a7605aa514de75808d1c0cf4f94c9e78275f597d310a48eba0e8e4271ae50326079ebd1dabecdbc88eb6055d34ce0ad245e630a460ce7d1c8423044a49e51fc43b692e6f3dd3ede7a6b7c7efda21ab9431496ddca1c2d55fc95efb9cfa67c8d1108e554fcf554ac0ed48f104f0fdf1581b879da50574e1bcffdc8e11554abd18893d9f26eff710689e63262db57ce532f6d003cc4acaee074d80bd1ebfc6587b49e4a712c5f8a01f71a98db3f15865cf2a711228131b6ee833962fce20e1e1b7326d36d5289d6d635389859617bd6cd97af5514c529e3bbbc5e38bb0364c509bea957d39b2aeea66cf41af8ca89b91d39f095a25f625db147d8766b8624948f7da5508c3cf292514038774b77c9fc5f173517e0a26b8f80b894191da106633edf28de9fc78298286e3ab1e9bb65d7e30506b901ae38b962b0a1174cd405328dc1463428dafdb97abae8e6b00c87c82a333ea2ccb91a94a3fde4ddbcef15df6ebe9ab7a50bf751c7a56bcf87f31e7648084ec50b57421445dbdc09e1742a6ac9638ed81112c64a77722f02b97ebf702c145b81ea96c4d884cd8cce1192f86d19a65f3d08cb586e96b89d183faf672d92364a7ae1c0d824fc8cd", 0x1000}, {&(0x7f0000002a00)="46099f2c98fca857694dff41e476a9e7c722af64b5e2c0e740838cabcdd1e62f213dcd48ea77dd92a312a59a0a2952917f5797c91f37c17a3681e5125bd594f5847b1d932d348dc149f64c74d29556a7fa2183a78a3a36493a42cb6b6cdcf2dbee88ca76169a17eab21cacea92ce8e473e7ab485252370bcf947287327efd14d3eb7d40d3c771a621614d7ff1c215016c194d3bf70d09613f30e9537ec1ed39f42990e29038e8f40aa072ad75beb41d51b8fd51d4b4229ac5a0760bc633ae31365340e6b1f410afca150ead214c21dd2e64c78f27c6891e1e0", 0xd9}], 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/dlm_plock\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000002bc0), &(0x7f0000002c00)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001500)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001600)=0xe8) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000002c40)={0x1, 0x1b}) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x5e88, 0x3, &(0x7f0000001480)=[{&(0x7f0000000100)="39311ab6a6fc6b51c540f1f37fabac63a4b4aaf00248c5ed3e4eeac558e26300d268359939a20b75cc5cc490888fcf0f4c837b1f0e35a9004758877579fbbeebc6833098edf6d7dbc4bbb2f4d4e7c5a5fdaf91acfaa1b54eda2406acca56366e657b27b09e35e27660c219c10256a4273999aedd118ecb4d82d7bb1da8db737507e88ae1f30383a227328a1dafaf329bbad12f9af21536f8632ee4aad87038c56ec1f751ce46a08d0b57284c0d9449d6d917f04aa1a6569f26d258f587476d27cc34d99f5db0fbba2cc37ed159", 0xcd, 0x1f}, {&(0x7f0000001280)="a7191d3e37597993de3f08eca19057c1abf0cc6bee69f5d036bfc98d6602e10bf0e45dc7fd5cb3f791c447dfbffd4df9cc42685f10dd8cf92bfa390b722f8f40caac442b17a0ddac92d556c737e72ca8f2bd5c5aad517dd4f413b2acdc4b3c95a971953a6817748ccb5665c179ec09282ae04bf47e55aec4db569208bc7af13a2125e53f21cd62ef1d4e3bba2035560bc7fb067c9bc45d1ad47cd156499a7198a102587e85fd6d35163e5b162fd75abad64542d5c3c4a6fafbdd63259b9c3457f6f5b31ab1d0e19e8f073503b647a08bed6e22e8ba7000d0383c3e07f138455db852cc4d36b47bdb61a755f3d3b01ff6944a9264", 0xf4, 0x401}, {&(0x7f0000001380)="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", 0xfa, 0x68}], 0x2000000, &(0x7f0000001640)={[{@cruft='cruft'}, {@block={'block', 0x3d, 0x400}}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0xfe65}}, {@norock='norock'}, {@dmode={'dmode'}}, {@map_normal='map=normal'}, {@dmode={'dmode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@euid_lt={'euid<', r3}}, {@obj_user={'obj_user', 0x3d, '*posix_acl_access'}}]}) prctl$PR_SET_FP_MODE(0x2d, 0x2) r4 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000002b80)=0x78) [ 1798.386930][T16761] binder: 16747:16761 unknown command 0 [ 1798.397011][T16761] binder: 16747:16761 ioctl c0306201 2000dfd0 returned -22 03:38:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x126, 0x1f000000) [ 1798.565461][T16771] binder: 16768:16771 ERROR: BC_REGISTER_LOOPER called without request [ 1798.595698][T16771] binder: 16768:16771 unknown command 0 03:38:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1798.632906][T16771] binder: 16768:16771 ioctl c0306201 2000dfd0 returned -22 [ 1798.695618][T16779] binder: BINDER_SET_CONTEXT_MGR already set [ 1798.734797][T16779] binder: 16768:16779 ioctl 40046207 0 returned -16 [ 1798.768232][T16782] binder: 16768:16782 ERROR: BC_REGISTER_LOOPER called without request [ 1798.815642][T16787] binder: 16768:16787 unknown command 0 [ 1798.880524][T16787] binder: 16768:16787 ioctl c0306201 2000dfd0 returned -22 03:38:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x6, 0xfffffffffffffffc, 0x3c4, 0x3, 0xd, 0x9, 0x5, 0x4, 0x9, 0x5}) 03:38:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x127, 0x1f000000) 03:38:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x40000000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1799.009121][ C1] net_ratelimit: 22 callbacks suppressed [ 1799.009142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.020566][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000440)={0xa, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000840)={r2, 0x2, &(0x7f0000000740)=[0x5, 0x1], &(0x7f0000000780), 0x40, 0x2, 0x2, &(0x7f00000007c0)=[0x2, 0x20], &(0x7f0000000800)}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="0500d600c46b78d786d2a600bede2f000000000000000736d03629e6befa55d52439cea0f80312a519461a51a9be4944856836b1d899367ffa35047b4e034cf268bd3a710d2c05982355f5a10f7b53bc4ebda523ee74a9fa7a1302a59ae4246c12349a557f010100000000000063beaaa517f27f7c68c2194a000000000000004b8421d26e2e0410505d2f9246e1d5fd97a59aa746e27a21cef095b987c5872563b7d2c0183ecaeb3b388ee9bc0d0639de6b4b1d723dbf554cb421d10f994c6ed3f1b6837bcf8cd2f86dbe4793990b05834cece045b2332389c469d0cfeff94be9792a3b0f182e14a996ef70231859b0d104e5ab5d856312b7830b48f25557d2074437fbdd27416d56e44b8baf9de1caf69af036b44e2bb9b5724934c01250e316a728333e965fa96e57b61045b533d9c66b364c36ac791c156e05e03a907b7ead02776d7174561bbc96827ff4bb1382607e6934c8f1b132c8bc08b947025196e28690066276a5de18b957c6566baef1a1eae63d190f273a4bfdf5a79c103ea8b38f4f99dba22386eedea6c97f3f98b70e0573ef79f0fcd66dfa1b378f3972c00f7d4f3164215f501c764bd61f9fb883ba98ff50c9cbd512be7402e666dad51e81eb218e46591c29b19421bba1963b1c07d2a144742db82b042722ad1a367ff88f3d9fdcd12f4e5eb385be8ab79bf84bc055d64574411707c1506feabe337160f531e6db70453d3be55da8c08937f526b52e"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000600)={0x133448d98b5082ed, @remote, 0x4e20, 0x1, 'none\x00', 0x32, 0x5, 0x58}, 0x2c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000880)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000400)={{r7, r8/1000+30000}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r9, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) connect$netrom(r4, &(0x7f0000000540)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$P9_RWALK(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="230000027fd06f0100020061688f23d53cb66d3e82ae0c3000000077ff000000000000ffffff7f"], 0x23) setsockopt$sock_void(r6, 0x1, 0x3f, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) [ 1799.102477][T16799] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1799.127631][T16796] binder: 16792:16796 ERROR: BC_REGISTER_LOOPER called without request [ 1799.166375][T16802] binder: 16801:16802 ERROR: BC_REGISTER_LOOPER called without request [ 1799.178172][T16796] binder: 16792:16796 unknown command 0 [ 1799.196781][T16805] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 1799.214647][T16796] binder: 16792:16796 ioctl c0306201 2000dfd0 returned -22 [ 1799.258839][T16804] binder: BINDER_SET_CONTEXT_MGR already set [ 1799.295959][T16804] binder: 16792:16804 ioctl 40046207 0 returned -16 03:38:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x11fc163533e57240, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) write$P9_RFLUSH(r1, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f0000000080), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x78) 03:38:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x128, 0x1f000000) [ 1799.328773][T16810] binder: 16792:16810 ERROR: BC_REGISTER_LOOPER called without request [ 1799.357556][T16804] binder: 16792:16804 unknown command 0 [ 1799.363938][T16804] binder: 16792:16804 ioctl c0306201 2000dfd0 returned -22 03:38:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x100000000000000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x4) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='.\x00') [ 1799.638430][T16830] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1799.662099][T16829] binder: 16827:16829 ERROR: BC_REGISTER_LOOPER called without request [ 1799.682296][T16829] binder: 16827:16829 unknown command 0 [ 1799.694063][T16830] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1799.715807][T16829] binder: 16827:16829 ioctl c0306201 2000dfd0 returned -22 [ 1799.767846][T16835] binder: BINDER_SET_CONTEXT_MGR already set [ 1799.780216][T16835] binder: 16827:16835 ioctl 40046207 0 returned -16 [ 1799.799631][T16829] binder: 16827:16829 unknown command 0 [ 1799.805567][T16829] binder: 16827:16829 ioctl c0306201 2000dfd0 returned -22 [ 1799.809153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.818697][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x129, 0x1f000000) 03:38:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x2000, 0x4000}) 03:38:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x3f00000000000000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7000000000000000, 0x1bf, 0x81}) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000040), 0x21a, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2) [ 1799.969108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.974937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.007283][T16845] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0xffc}, &(0x7f00000002c0)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x12a, 0x1f000000) [ 1800.084193][T16850] binder: 16846:16850 unknown command 0 [ 1800.093736][T16854] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1800.103450][T16850] binder: 16846:16850 ioctl c0306201 2000dfd0 returned -22 03:38:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x20000000000001, 0x20400000086) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1800.157967][T16856] binder: BINDER_SET_CONTEXT_MGR already set [ 1800.210094][T16856] binder: 16846:16856 ioctl 40046207 0 returned -16 [ 1800.214972][T16862] binder: 16846:16862 unknown command 0 03:38:43 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000180)=0x6, 0x4) r2 = getpgid(0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001240)={0x0, r0, 0x9, 0xae, 0x21af765b, 0x1}) process_vm_readv(r2, &(0x7f0000000200), 0x250, &(0x7f00000000c0)=[{&(0x7f0000001280)=""/4096, 0xb5}], 0x195, 0x0) 03:38:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000002c0)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4000000000000000, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1800.281064][T16862] binder: 16846:16862 ioctl c0306201 2000dfd0 returned -22 [ 1800.442774][T16877] binder: 16873:16877 unknown command 0 [ 1800.462571][T16877] binder: 16873:16877 ioctl c0306201 2000dfd0 returned -22 [ 1800.529135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.533179][T16883] binder: BINDER_SET_CONTEXT_MGR already set [ 1800.534980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.549228][T16883] binder: 16873:16883 ioctl 40046207 0 returned -16 [ 1800.573898][T16884] binder: 16873:16884 unknown command 0 [ 1800.583247][T16884] binder: 16873:16884 ioctl c0306201 2000dfd0 returned -22 [ 1800.619176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.625011][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x12b, 0x1f000000) 03:38:43 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ptrace$setsig(0x4203, r0, 0x7ff, &(0x7f0000000200)={0x2c, 0xd87c, 0xfffffffffffffffe}) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, 0xffffffffffffffff, 0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x8, 0x5, 0x7f, 0x0, 0xa7b4, 0x80, 0x8}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x402, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xa9ab}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in6={0xa, 0x4e23, 0x2, @remote, 0x1}, @in6={0xa, 0x4e22, 0x8, @local, 0x6}, @in={0x2, 0x4e22, @empty}], 0xc0) 03:38:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0xb) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x1f5d17e, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0xffffffffffffff8d) 03:38:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:38:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x3f00, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:44 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x3d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b40)="bd367020a4b585c3803c2ea1b9ca744e3791d04cff312c22137ec67191630f91dfe62f42295fca53c191401e54ed05ac9ee8137840061270b0a49c486c2835e9ec32e318e9a829b7f630a35c941c9b68e44dd3cd60b32771701818717e15afcab8c2fcc974cafc7501f404b9cbf2e1cc3e2fec5fab90824074d04437a322ade0dcd91222a058eedda0d4846d7604d5ce2a682e54fda07d5ec548189c1c9c6976a912f0b7151851b441ffd05f7bfb4de5b834da78c8dfecb0b44b50ac8fb977c6a3a5baf34beeae2e6c07c4d2f7b458cb5c32aa8d0ea6de79bdc26e66e8b752", 0xdf}], 0x1, 0x0, 0x0, 0x1}, 0x100000001}, {{&(0x7f0000004480)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x1}], 0x2, 0x4000040) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write(r0, &(0x7f00000000c0)="8cda52", 0x3) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000002c0)={0xd, @raw_data="bccd1915535abcf9d70f28448dd98aa5f701d8ecd0e421d0bb9a25e92edaa73ab5cabd7fb4b64eb19e5312544a49bcb948fbf946ee33ff8721404ed85c1d03bf5822b341be99fa2f9b6b40c3dad5e180ad75695b7e17002c5d4bbceb73a166fb694d3430a0f3e02d0ac6244e7e596aff468c29cd8ca4c38a79ca606b0fa984a8454252ef1d0eef93aadabad135c4d448679de2d49f6b817de75491d39c03c5c798559152b892336c48b141404d522e994b68a4a5be96dbe80fe37eb65c11a8ce40fe83017a814be7"}) mlockall(0xfc) unshare(0x40000000) 03:38:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x12c, 0x1f000000) 03:38:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/74, 0x4a) [ 1801.191318][T16914] IPVS: ftp: loaded support on port[0] = 21 [ 1801.223186][T16920] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:44 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1801.306887][T16923] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x12d, 0x1f000000) [ 1801.533620][T16929] FAULT_INJECTION: forcing a failure. [ 1801.533620][T16929] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.622248][T16929] CPU: 1 PID: 16929 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1801.631194][T16929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.641260][T16929] Call Trace: [ 1801.644596][T16929] dump_stack+0x1db/0x2d0 [ 1801.648977][T16929] ? dump_stack_print_info.cold+0x20/0x20 [ 1801.654774][T16929] should_fail.cold+0xa/0x14 [ 1801.659400][T16929] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1801.665219][T16929] ? ___might_sleep+0x1e7/0x310 [ 1801.670068][T16929] ? arch_local_save_flags+0x50/0x50 [ 1801.670090][T16929] ? trace_hardirqs_on+0xbd/0x310 [ 1801.670115][T16929] __should_failslab+0x121/0x190 [ 1801.670135][T16929] should_failslab+0x9/0x14 [ 1801.670151][T16929] kmem_cache_alloc_node+0x265/0x710 [ 1801.670178][T16929] ? __local_bh_enable_ip+0x15a/0x270 [ 1801.680461][T16929] ? _raw_spin_unlock_bh+0x31/0x40 [ 1801.680484][T16929] __alloc_skb+0xf4/0x730 [ 1801.680499][T16929] ? __local_bh_enable_ip+0x15a/0x270 [ 1801.680534][T16929] ? skb_trim+0x190/0x190 [ 1801.680552][T16929] ? netlink_insert+0x103/0x240 [ 1801.680587][T16929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.680602][T16929] ? netlink_autobind.isra.0+0x228/0x310 [ 1801.680623][T16929] netlink_sendmsg+0xb11/0xf90 [ 1801.680662][T16929] ? netlink_unicast+0x770/0x770 [ 1801.690077][T16929] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1801.690094][T16929] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1801.690109][T16929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.690125][T16929] ? security_socket_sendmsg+0x93/0xc0 [ 1801.690142][T16929] ? netlink_unicast+0x770/0x770 [ 1801.700833][T16929] sock_sendmsg+0xdd/0x130 [ 1801.700867][T16929] sock_write_iter+0x379/0x5e0 [ 1801.700888][T16929] ? sock_sendmsg+0x130/0x130 [ 1801.700922][T16929] ? common_file_perm+0x231/0x800 [ 1801.719986][T16929] do_iter_readv_writev+0x902/0xbc0 [ 1801.720025][T16929] ? vfs_dedupe_file_range+0x780/0x780 [ 1801.720040][T16929] ? apparmor_file_permission+0x25/0x30 [ 1801.720058][T16929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1801.720077][T16929] ? rw_verify_area+0x118/0x360 [ 1801.731141][T16929] do_iter_write+0x184/0x610 [ 1801.731159][T16929] ? dup_iter+0x260/0x260 [ 1801.731177][T16929] ? lock_downgrade+0xbe0/0xbe0 [ 1801.731200][T16929] vfs_writev+0x1ee/0x370 [ 1801.741573][T16929] ? vfs_iter_write+0xb0/0xb0 [ 1801.741593][T16929] ? kasan_check_write+0x14/0x20 [ 1801.741609][T16929] ? __mutex_unlock_slowpath+0x195/0x870 [ 1801.741630][T16929] ? wait_for_completion+0x810/0x810 [ 1801.741653][T16929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.741669][T16929] ? __fdget_pos+0xdc/0x1f0 [ 1801.741701][T16929] ? __fdget_raw+0x20/0x20 [ 1801.741715][T16929] ? __sb_end_write+0xd9/0x110 [ 1801.741739][T16929] do_writev+0x11a/0x300 [ 1801.741757][T16929] ? vfs_writev+0x370/0x370 [ 1801.763844][T16929] ? trace_hardirqs_off_caller+0x300/0x300 [ 1801.763859][T16929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1801.763893][T16929] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1801.774258][T16929] __x64_sys_writev+0x75/0xb0 [ 1801.774278][T16929] do_syscall_64+0x1a3/0x800 [ 1801.774298][T16929] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1801.774335][T16929] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1801.774356][T16929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1801.788164][T16929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1801.788182][T16929] RIP: 0033:0x457ec9 [ 1801.798366][T16929] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1801.798375][T16929] RSP: 002b:00007f57ac2adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1801.798390][T16929] RAX: ffffffffffffffda RBX: 00007f57ac2adc90 RCX: 0000000000457ec9 [ 1801.798400][T16929] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1801.798409][T16929] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.798418][T16929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2ae6d4 [ 1801.798434][T16929] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000004 03:38:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x12e, 0x1f000000) [ 1801.866637][T16907] binder: BINDER_SET_CONTEXT_MGR already set [ 1801.955997][T16932] IPVS: ftp: loaded support on port[0] = 21 [ 1801.989542][T16907] binder: 16891:16907 ioctl 40046207 0 returned -16 03:38:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x12f, 0x1f000000) 03:38:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001280)={'filter\x00', 0x0, 0x3, 0xcd, [], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000000c0)=""/205}, &(0x7f00000001c0)=0x78) 03:38:45 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x3d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b40)="bd367020a4b585c3803c2ea1b9ca744e3791d04cff312c22137ec67191630f91dfe62f42295fca53c191401e54ed05ac9ee8137840061270b0a49c486c2835e9ec32e318e9a829b7f630a35c941c9b68e44dd3cd60b32771701818717e15afcab8c2fcc974cafc7501f404b9cbf2e1cc3e2fec5fab90824074d04437a322ade0dcd91222a058eedda0d4846d7604d5ce2a682e54fda07d5ec548189c1c9c6976a912f0b7151851b441ffd05f7bfb4de5b834da78c8dfecb0b44b50ac8fb977c6a3a5baf34beeae2e6c07c4d2f7b458cb5c32aa8d0ea6de79bdc26e66e8b752", 0xdf}], 0x1, 0x0, 0x0, 0x1}, 0x100000001}, {{&(0x7f0000004480)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x1}], 0x2, 0x4000040) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write(r0, &(0x7f00000000c0)="8cda52", 0x3) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000002c0)={0xd, @raw_data="bccd1915535abcf9d70f28448dd98aa5f701d8ecd0e421d0bb9a25e92edaa73ab5cabd7fb4b64eb19e5312544a49bcb948fbf946ee33ff8721404ed85c1d03bf5822b341be99fa2f9b6b40c3dad5e180ad75695b7e17002c5d4bbceb73a166fb694d3430a0f3e02d0ac6244e7e596aff468c29cd8ca4c38a79ca606b0fa984a8454252ef1d0eef93aadabad135c4d448679de2d49f6b817de75491d39c03c5c798559152b892336c48b141404d522e994b68a4a5be96dbe80fe37eb65c11a8ce40fe83017a814be7"}) mlockall(0xfc) unshare(0x40000000) 03:38:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x4000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:45 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1802.436108][T16950] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x130, 0x1f000000) [ 1802.575566][T16950] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1802.590255][T16960] FAULT_INJECTION: forcing a failure. [ 1802.590255][T16960] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.605093][T16956] IPVS: ftp: loaded support on port[0] = 21 [ 1802.681935][T16960] CPU: 0 PID: 16960 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1802.690897][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.700986][T16960] Call Trace: [ 1802.704322][T16960] dump_stack+0x1db/0x2d0 [ 1802.708669][T16960] ? dump_stack_print_info.cold+0x20/0x20 [ 1802.714396][T16960] ? save_stack+0x45/0xd0 [ 1802.718728][T16960] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1802.724545][T16960] ? kasan_slab_alloc+0xf/0x20 [ 1802.729315][T16960] ? kmem_cache_alloc_node+0x144/0x710 [ 1802.734772][T16960] ? __alloc_skb+0xf4/0x730 [ 1802.739302][T16960] ? sock_sendmsg+0xdd/0x130 [ 1802.743899][T16960] should_fail.cold+0xa/0x14 [ 1802.748505][T16960] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1802.754332][T16960] ? ___might_sleep+0x1e7/0x310 [ 1802.759180][T16960] ? arch_local_save_flags+0x50/0x50 [ 1802.764460][T16960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.770709][T16960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.776963][T16960] __should_failslab+0x121/0x190 [ 1802.781901][T16960] should_failslab+0x9/0x14 [ 1802.786421][T16960] kmem_cache_alloc_node_trace+0x270/0x720 [ 1802.792225][T16960] ? __alloc_skb+0xf4/0x730 [ 1802.796731][T16960] __kmalloc_node_track_caller+0x3d/0x70 [ 1802.802364][T16960] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1802.807743][T16960] __alloc_skb+0x12d/0x730 [ 1802.812154][T16960] ? __local_bh_enable_ip+0x15a/0x270 [ 1802.817524][T16960] ? skb_trim+0x190/0x190 [ 1802.821850][T16960] ? netlink_insert+0x103/0x240 [ 1802.826700][T16960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.832945][T16960] ? netlink_autobind.isra.0+0x228/0x310 [ 1802.838577][T16960] netlink_sendmsg+0xb11/0xf90 [ 1802.843353][T16960] ? netlink_unicast+0x770/0x770 [ 1802.848283][T16960] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1802.853828][T16960] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1802.859296][T16960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.865530][T16960] ? security_socket_sendmsg+0x93/0xc0 [ 1802.870986][T16960] ? netlink_unicast+0x770/0x770 [ 1802.875931][T16960] sock_sendmsg+0xdd/0x130 [ 1802.880351][T16960] sock_write_iter+0x379/0x5e0 [ 1802.885109][T16960] ? sock_sendmsg+0x130/0x130 [ 1802.889784][T16960] ? common_file_perm+0x231/0x800 [ 1802.894809][T16960] do_iter_readv_writev+0x902/0xbc0 [ 1802.900004][T16960] ? vfs_dedupe_file_range+0x780/0x780 [ 1802.905455][T16960] ? apparmor_file_permission+0x25/0x30 [ 1802.911003][T16960] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1802.917239][T16960] ? rw_verify_area+0x118/0x360 [ 1802.922116][T16960] do_iter_write+0x184/0x610 [ 1802.926700][T16960] ? dup_iter+0x260/0x260 [ 1802.931046][T16960] ? lock_downgrade+0xbe0/0xbe0 [ 1802.935945][T16960] vfs_writev+0x1ee/0x370 [ 1802.940308][T16960] ? vfs_iter_write+0xb0/0xb0 [ 1802.944999][T16960] ? kasan_check_write+0x14/0x20 [ 1802.949947][T16960] ? __mutex_unlock_slowpath+0x195/0x870 [ 1802.955581][T16960] ? wait_for_completion+0x810/0x810 [ 1802.960866][T16960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.967101][T16960] ? __fdget_pos+0xdc/0x1f0 [ 1802.971600][T16960] ? __fdget_raw+0x20/0x20 [ 1802.976021][T16960] ? __sb_end_write+0xd9/0x110 [ 1802.980817][T16960] do_writev+0x11a/0x300 [ 1802.985056][T16960] ? vfs_writev+0x370/0x370 [ 1802.989556][T16960] ? trace_hardirqs_off_caller+0x300/0x300 [ 1802.995363][T16960] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1803.000821][T16960] __x64_sys_writev+0x75/0xb0 [ 1803.005496][T16960] do_syscall_64+0x1a3/0x800 [ 1803.010088][T16960] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1803.015740][T16960] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1803.021463][T16960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1803.027021][T16960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.032936][T16960] RIP: 0033:0x457ec9 [ 1803.036824][T16960] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1803.056431][T16960] RSP: 002b:00007f57ac2cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1803.064850][T16960] RAX: ffffffffffffffda RBX: 00007f57ac2cec90 RCX: 0000000000457ec9 [ 1803.072814][T16960] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1803.080776][T16960] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1803.088741][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2cf6d4 [ 1803.096733][T16960] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 03:38:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x2) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000100)=0xfffffffffffffe01) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00\x00\x00\x00\x19\xa8\xe5\xb6\x00', 0x0, 0x0, 0x1000, [], 0x38f, &(0x7f00000001c0), &(0x7f0000001280)=""/4096}, &(0x7f0000000000)=0x78) 03:38:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000080)=@ethtool_cmd={0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x131, 0x1f000000) 03:38:46 executing program 4 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1803.393797][T16966] binder: BINDER_SET_CONTEXT_MGR already set [ 1803.495002][T16966] binder: 16953:16966 ioctl 40046207 0 returned -16 [ 1803.525994][T16983] binder_thread_write: 10 callbacks suppressed [ 1803.526047][T16983] binder: 16953:16983 ERROR: BC_REGISTER_LOOPER called without request 03:38:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1803.553598][T16984] FAULT_INJECTION: forcing a failure. [ 1803.553598][T16984] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.566591][T16984] CPU: 0 PID: 16984 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1803.575529][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.585585][T16984] Call Trace: [ 1803.588885][T16984] dump_stack+0x1db/0x2d0 [ 1803.593275][T16984] ? dump_stack_print_info.cold+0x20/0x20 [ 1803.599062][T16984] should_fail.cold+0xa/0x14 [ 1803.599100][T16984] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1803.599124][T16984] ? mark_held_locks+0x100/0x100 [ 1803.599143][T16984] ? add_lock_to_list.isra.0+0x450/0x450 [ 1803.599157][T16984] ? find_held_lock+0x35/0x120 [ 1803.599174][T16984] ? __netlink_lookup+0x5fd/0xb50 [ 1803.599196][T16984] __should_failslab+0x121/0x190 [ 1803.605036][T16988] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1803.609589][T16984] should_failslab+0x9/0x14 [ 1803.609606][T16984] kmem_cache_alloc+0x47/0x710 [ 1803.609627][T16984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.609645][T16984] skb_clone+0x1c5/0x510 [ 1803.609662][T16984] ? skb_split+0x1210/0x1210 [ 1803.609680][T16984] ? rcu_softirq_qs+0x20/0x20 [ 1803.609702][T16984] ? rcu_read_unlock_special+0x380/0x380 [ 1803.620245][T16984] netlink_deliver_tap+0xbc0/0xf40 [ 1803.620261][T16984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.620281][T16984] ? netlink_remove_tap+0x630/0x630 [ 1803.620295][T16984] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1803.620321][T16984] ? kasan_check_write+0x14/0x20 [ 1803.705194][T16984] netlink_unicast+0x5e2/0x770 [ 1803.709978][T16984] ? netlink_attachskb+0x980/0x980 [ 1803.715084][T16984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.721333][T16984] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1803.727067][T16984] netlink_sendmsg+0xa05/0xf90 [ 1803.731835][T16984] ? netlink_unicast+0x770/0x770 [ 1803.736786][T16984] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1803.742332][T16984] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1803.747784][T16984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.754040][T16984] ? security_socket_sendmsg+0x93/0xc0 [ 1803.759495][T16984] ? netlink_unicast+0x770/0x770 [ 1803.764432][T16984] sock_sendmsg+0xdd/0x130 [ 1803.768874][T16984] sock_write_iter+0x379/0x5e0 [ 1803.773638][T16984] ? sock_sendmsg+0x130/0x130 [ 1803.778321][T16984] ? common_file_perm+0x231/0x800 [ 1803.783352][T16984] do_iter_readv_writev+0x902/0xbc0 [ 1803.788554][T16984] ? vfs_dedupe_file_range+0x780/0x780 [ 1803.794009][T16984] ? apparmor_file_permission+0x25/0x30 [ 1803.799553][T16984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1803.805801][T16984] ? rw_verify_area+0x118/0x360 [ 1803.810652][T16984] do_iter_write+0x184/0x610 [ 1803.815243][T16984] ? dup_iter+0x260/0x260 [ 1803.819584][T16984] ? lock_downgrade+0xbe0/0xbe0 [ 1803.824435][T16984] vfs_writev+0x1ee/0x370 [ 1803.828781][T16984] ? vfs_iter_write+0xb0/0xb0 [ 1803.833460][T16984] ? kasan_check_write+0x14/0x20 [ 1803.838392][T16984] ? __mutex_unlock_slowpath+0x195/0x870 [ 1803.844042][T16984] ? wait_for_completion+0x810/0x810 [ 1803.849344][T16984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.855592][T16984] ? __fdget_pos+0xdc/0x1f0 [ 1803.860093][T16984] ? __fdget_raw+0x20/0x20 [ 1803.864506][T16984] ? __sb_end_write+0xd9/0x110 [ 1803.869294][T16984] do_writev+0x11a/0x300 [ 1803.873538][T16984] ? vfs_writev+0x370/0x370 [ 1803.878042][T16984] ? trace_hardirqs_off_caller+0x300/0x300 [ 1803.883850][T16984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1803.889312][T16984] __x64_sys_writev+0x75/0xb0 [ 1803.893996][T16984] do_syscall_64+0x1a3/0x800 [ 1803.898588][T16984] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1803.904238][T16984] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1803.909990][T16984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1803.915553][T16984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.921439][T16984] RIP: 0033:0x457ec9 [ 1803.925349][T16984] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1803.944962][T16984] RSP: 002b:00007f57ac2cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 03:38:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x132, 0x1f000000) [ 1803.953368][T16984] RAX: ffffffffffffffda RBX: 00007f57ac2cec90 RCX: 0000000000457ec9 [ 1803.961342][T16984] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1803.969309][T16984] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1803.977303][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2cf6d4 [ 1803.985269][T16984] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 [ 1804.015213][T16985] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1804.050432][T16992] binder: 16990:16992 ERROR: BC_REGISTER_LOOPER called without request [ 1804.129437][ C1] net_ratelimit: 18 callbacks suppressed [ 1804.129445][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1804.141078][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1804.689095][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1804.695005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1805.169148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.175017][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1805.180891][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.186689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1805.249128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.254925][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x883) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 03:38:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x1000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0xeb}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001200)={r2, 0xfffffffffffffffd}, 0x8) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0xfffffffffffffe0c, [], 0x10000411, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000080)=0x108) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 03:38:49 executing program 4 (fault-call:3 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x133, 0x1f000000) 03:38:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1806.383324][T17005] kernel msg: ebtables bug: please report to author: Nentries wrong [ 1806.395384][T17010] FAULT_INJECTION: forcing a failure. [ 1806.395384][T17010] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.408622][T17010] CPU: 0 PID: 17010 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1806.417607][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.427662][T17010] Call Trace: [ 1806.430975][T17010] dump_stack+0x1db/0x2d0 [ 1806.435320][T17010] ? dump_stack_print_info.cold+0x20/0x20 [ 1806.441064][T17010] should_fail.cold+0xa/0x14 [ 1806.445659][T17010] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1806.451037][T17013] kernel msg: ebtables bug: please report to author: Nentries wrong [ 1806.451476][T17010] ? mark_held_locks+0x100/0x100 [ 1806.464365][T17010] ? print_usage_bug+0xd0/0xd0 [ 1806.469156][T17010] ? check_noncircular+0x20/0x20 [ 1806.474107][T17010] __should_failslab+0x121/0x190 [ 1806.479091][T17010] should_failslab+0x9/0x14 [ 1806.483601][T17010] kmem_cache_alloc+0x47/0x710 [ 1806.488388][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.494629][T17010] ? check_preemption_disabled+0x48/0x290 [ 1806.500390][T17010] skb_clone+0x1c5/0x510 [ 1806.504639][T17010] ? rcu_dynticks_curr_cpu_in_eqs+0x40/0x170 [ 1806.510656][T17010] ? skb_split+0x1210/0x1210 [ 1806.515265][T17010] dev_queue_xmit_nit+0x40d/0xaf0 [ 1806.520305][T17010] ? rcu_read_unlock_special+0x380/0x380 [ 1806.525975][T17010] ? default_device_exit+0x2c0/0x2c0 [ 1806.531259][T17010] ? skb_network_protocol+0xf6/0x4a0 [ 1806.536559][T17010] ? is_bpf_text_address+0xd3/0x170 [ 1806.541770][T17010] dev_hard_start_xmit+0x164/0xc70 [ 1806.546936][T17010] ? validate_xmit_xfrm+0x42d/0xf30 [ 1806.552145][T17010] ? dev_direct_xmit+0x670/0x670 [ 1806.557089][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.563353][T17010] ? validate_xmit_skb+0x85a/0xf60 [ 1806.568489][T17010] ? netif_skb_features+0xb90/0xb90 [ 1806.573690][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.579946][T17010] ? check_preemption_disabled+0x48/0x290 [ 1806.585663][T17010] ? check_preemption_disabled+0x48/0x290 [ 1806.591404][T17010] __dev_queue_xmit+0x2fd8/0x3a70 [ 1806.596449][T17010] ? mark_held_locks+0x100/0x100 [ 1806.601426][T17010] ? __lock_acquire+0x572/0x4a10 [ 1806.606410][T17010] ? netdev_pick_tx+0x300/0x300 [ 1806.611268][T17010] ? __copy_skb_header+0x200/0x6c0 [ 1806.616398][T17010] ? check_preemption_disabled+0x48/0x290 [ 1806.622134][T17010] ? skb_clone+0x1c5/0x510 [ 1806.626585][T17010] ? __skb_checksum_complete+0x530/0x530 [ 1806.632267][T17010] ? __lock_is_held+0xb6/0x140 [ 1806.637075][T17010] ? kasan_check_write+0x14/0x20 [ 1806.642043][T17010] ? __skb_clone+0x65a/0x980 [ 1806.646674][T17010] ? skb_clone+0x1c5/0x510 [ 1806.651093][T17010] ? __copy_skb_header+0x6c0/0x6c0 [ 1806.656228][T17010] ? kmem_cache_alloc+0x341/0x710 [ 1806.661273][T17010] ? skb_clone+0x21e/0x510 [ 1806.665690][T17010] ? skb_split+0x1210/0x1210 [ 1806.670316][T17010] ? rcu_softirq_qs+0x20/0x20 [ 1806.674992][T17010] ? rcu_read_unlock_special+0x380/0x380 [ 1806.680631][T17010] dev_queue_xmit+0x18/0x20 [ 1806.685129][T17010] ? dev_queue_xmit+0x18/0x20 [ 1806.689824][T17010] netlink_deliver_tap+0xb4e/0xf40 [ 1806.694949][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.701199][T17010] ? netlink_remove_tap+0x630/0x630 [ 1806.706404][T17010] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1806.712392][T17010] ? kasan_check_write+0x14/0x20 [ 1806.713675][T17016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1806.717330][T17010] netlink_unicast+0x5e2/0x770 [ 1806.717351][T17010] ? netlink_attachskb+0x980/0x980 [ 1806.717366][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.717380][T17010] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1806.717398][T17010] netlink_sendmsg+0xa05/0xf90 [ 1806.717419][T17010] ? netlink_unicast+0x770/0x770 [ 1806.717432][T17010] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1806.717448][T17010] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1806.717468][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.737274][T17022] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1806.740722][T17010] ? security_socket_sendmsg+0x93/0xc0 [ 1806.740737][T17010] ? netlink_unicast+0x770/0x770 [ 1806.740756][T17010] sock_sendmsg+0xdd/0x130 [ 1806.740780][T17010] sock_write_iter+0x379/0x5e0 [ 1806.769484][T17016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1806.773407][T17010] ? sock_sendmsg+0x130/0x130 [ 1806.773432][T17010] ? common_file_perm+0x231/0x800 [ 1806.773460][T17010] do_iter_readv_writev+0x902/0xbc0 [ 1806.773482][T17010] ? vfs_dedupe_file_range+0x780/0x780 [ 1806.773498][T17010] ? apparmor_file_permission+0x25/0x30 [ 1806.773517][T17010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1806.773536][T17010] ? rw_verify_area+0x118/0x360 [ 1806.773556][T17010] do_iter_write+0x184/0x610 [ 1806.773573][T17010] ? dup_iter+0x260/0x260 [ 1806.773591][T17010] ? lock_downgrade+0xbe0/0xbe0 [ 1806.773612][T17010] vfs_writev+0x1ee/0x370 [ 1806.773632][T17010] ? vfs_iter_write+0xb0/0xb0 [ 1806.773650][T17010] ? kasan_check_write+0x14/0x20 [ 1806.773668][T17010] ? __mutex_unlock_slowpath+0x195/0x870 [ 1806.773689][T17010] ? wait_for_completion+0x810/0x810 [ 1806.773711][T17010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.773742][T17010] ? __fdget_pos+0xdc/0x1f0 [ 1806.773773][T17010] ? __fdget_raw+0x20/0x20 [ 1806.773802][T17010] ? __sb_end_write+0xd9/0x110 [ 1806.773826][T17010] do_writev+0x11a/0x300 [ 1806.773845][T17010] ? vfs_writev+0x370/0x370 [ 1806.773863][T17010] ? trace_hardirqs_off_caller+0x300/0x300 [ 1806.773888][T17010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1806.924259][T17010] __x64_sys_writev+0x75/0xb0 [ 1806.928998][T17010] do_syscall_64+0x1a3/0x800 03:38:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x25, 0xff, 0x8, "4e333244865d27792ad760d367cf8abe16b28a3e5188bc031c7d1745c27f910724466c09be"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x80e030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x3c7}}, 0x0) 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x134, 0x1f000000) 03:38:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x401, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000100)={0x0, 0x8, 0x100a, 0x1}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x2, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x135, 0x1f000000) 03:38:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x136, 0x1f000000) [ 1806.933598][T17010] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1806.937158][T17016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1806.939235][T17010] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1806.939257][T17010] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1806.939283][T17010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1806.939296][T17010] RIP: 0033:0x457ec9 [ 1806.939312][T17010] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1806.939320][T17010] RSP: 002b:00007f57ac2cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1806.939334][T17010] RAX: ffffffffffffffda RBX: 00007f57ac2cec90 RCX: 0000000000457ec9 [ 1806.939343][T17010] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1806.939353][T17010] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1806.939362][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2cf6d4 [ 1806.939372][T17010] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 [ 1807.001589][T17016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1807.017769][T17009] binder: 17002:17009 ERROR: BC_REGISTER_LOOPER called without request [ 1807.058979][T17007] binder: 17000:17007 ERROR: BC_REGISTER_LOOPER called without request 03:38:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2(&(0x7f0000000080), 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x420200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x100001b0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) [ 1807.219182][T17027] binder: BINDER_SET_CONTEXT_MGR already set [ 1807.225309][T17027] binder: 17000:17027 ioctl 40046207 0 returned -16 [ 1807.232716][T17035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1807.291626][T17042] binder: 17000:17042 ERROR: BC_REGISTER_LOOPER called without request [ 1807.303884][T17039] binder: 17038:17039 ERROR: BC_REGISTER_LOOPER called without request [ 1807.321411][T17035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:38:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x137, 0x1f000000) 03:38:50 executing program 4 (fault-call:3 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x3f000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1807.348022][T17035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1807.363546][T17035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1807.373678][T17045] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1807.433407][T17045] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1807.465074][T17051] FAULT_INJECTION: forcing a failure. [ 1807.465074][T17051] name failslab, interval 1, probability 0, space 0, times 0 03:38:50 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xf1, "bd008145ba3ebfdd8e20fd55c6c19257c6402563a85a89470e8e91d7927e4a8e1b46447262d1232ccffa8477b6087c0eaefac2928dd95194484315105cb902e64ae87646b7d143b555e5507f488626428d32168be7d67672c975a346df53e235bd7221fdffd9fb40d6b55199d17ba6cc15a859185beb53b017fb32841d5339c9985b4aa2e1b5e2f1bc11e4e879b8d6c71f2924533c8923a09f7357af3a0d81fa78e452709229ea212795df7d56f7015f01fcf897b972d1fc5357b1f6ba424e81ada1b68d1feb06fddcfd6a91b988626b83d0a249af3d5d2c4f9c6c97c3de9a2e05b31fa3fa8ac538f9a42140b008833514"}, &(0x7f0000000140)=0xf9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYBLOB="53917c558da8f1543ae8d54c1e92ff2e6ec28aea1cb4a49ff7fc6f4cbabeda94f7cf1f8534d9d99af5c2099c28ad45a94158d537ed428cd8e5b2376d7867975860f19dead9772fa04f0fb73f0c3b15f6c426e9539f7161890a0ef03005dcd68167373537f118b34d4faafa8bf8a58fcaaff88009b10733fc10e590fbe827b918296d69d595aad4cf8c127480019de458ef92d72ecfee02343182c2c907bc5a0cec76421f2e238ac002a5805474a36911177de04a0fb2eb213424d28dcb7b8976ce694aa4c6b4a050b674260fc2a7", @ANYRES16=r0], &(0x7f0000000200)=0x2) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x2, 0x2, "c8de4cc8299747160162ee8ff33ca5c1fe3bb4958f3f8bc542124cc3b21abdde46f7e85791d8d1bf0cfde3873fe27636f7bd3c94b0621863db055eb05cc758242911084e0f8a7e69d6105259aea3"}, 0x5e) 03:38:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84800) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000001380)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) iopl(0x80) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="10002cbd7000fc004e22000008000500ac1414aa140002006361696630000000000000000000000008000100000000000800010000000000140002006272696467655f736c6176655f310000080001000200000008000100000000001400020064756d6d7930000000000000000000000800040001010000040003000c000100080008003f0000001400010008000600776c6300080002007f0000000800060006000000240001000800050000000000080002003b0000000800080005000000080008000100000014000100080004004e21000008000800080000000800040000020000e70000000000000000000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1807.539523][T17053] binder: 17052:17053 ERROR: BC_REGISTER_LOOPER called without request [ 1807.539549][T17051] CPU: 1 PID: 17051 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1807.547795][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.547816][T17051] Call Trace: [ 1807.547843][T17051] dump_stack+0x1db/0x2d0 [ 1807.547866][T17051] ? dump_stack_print_info.cold+0x20/0x20 [ 1807.547890][T17051] ? lock_release+0xc40/0xc40 [ 1807.547904][T17051] ? mark_held_locks+0x100/0x100 [ 1807.547942][T17051] should_fail.cold+0xa/0x14 [ 1807.547973][T17051] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1807.600232][T17051] ? ___might_sleep+0x1e7/0x310 [ 1807.605076][T17051] ? arch_local_save_flags+0x50/0x50 [ 1807.610370][T17051] __should_failslab+0x121/0x190 [ 1807.615316][T17051] should_failslab+0x9/0x14 [ 1807.619842][T17051] kmem_cache_alloc_node+0x265/0x710 [ 1807.625123][T17051] ? find_held_lock+0x35/0x120 [ 1807.629885][T17051] ? __netlink_dump_start+0x5ac/0x7e0 [ 1807.635268][T17051] __alloc_skb+0xf4/0x730 [ 1807.639601][T17051] ? skb_trim+0x190/0x190 [ 1807.643949][T17051] ? netlink_lookup+0xe4/0x1a0 [ 1807.648710][T17051] ? find_held_lock+0x35/0x120 [ 1807.653477][T17051] netlink_dump+0x7be/0x1070 [ 1807.658082][T17051] ? netlink_broadcast+0x50/0x50 [ 1807.663065][T17051] __netlink_dump_start+0x5b4/0x7e0 [ 1807.668272][T17051] inet_diag_handler_cmd+0x2d6/0x400 [ 1807.673555][T17051] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1807.679270][T17051] ? lock_downgrade+0xbe0/0xbe0 [ 1807.684119][T17051] ? inet_diag_dump_compat+0x4c0/0x4c0 [ 1807.689580][T17051] ? rcu_read_unlock_special+0x380/0x380 [ 1807.695221][T17051] sock_diag_rcv_msg+0x322/0x410 [ 1807.700163][T17051] netlink_rcv_skb+0x17d/0x410 [ 1807.704956][T17051] ? sock_diag_bind+0x80/0x80 [ 1807.709649][T17051] ? netlink_ack+0xba0/0xba0 [ 1807.714254][T17051] sock_diag_rcv+0x2b/0x40 [ 1807.718680][T17051] netlink_unicast+0x574/0x770 [ 1807.723446][T17051] ? netlink_attachskb+0x980/0x980 [ 1807.728555][T17051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.734831][T17051] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1807.740548][T17051] netlink_sendmsg+0xa05/0xf90 [ 1807.745319][T17051] ? netlink_unicast+0x770/0x770 [ 1807.750253][T17051] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1807.755803][T17051] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1807.761260][T17051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.767496][T17051] ? security_socket_sendmsg+0x93/0xc0 [ 1807.772977][T17051] ? netlink_unicast+0x770/0x770 [ 1807.777926][T17051] sock_sendmsg+0xdd/0x130 [ 1807.782344][T17051] sock_write_iter+0x379/0x5e0 [ 1807.787110][T17051] ? sock_sendmsg+0x130/0x130 [ 1807.791794][T17051] ? common_file_perm+0x231/0x800 [ 1807.796840][T17051] do_iter_readv_writev+0x902/0xbc0 [ 1807.802037][T17051] ? vfs_dedupe_file_range+0x780/0x780 [ 1807.807494][T17051] ? apparmor_file_permission+0x25/0x30 [ 1807.813036][T17051] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1807.819293][T17051] ? rw_verify_area+0x118/0x360 [ 1807.824146][T17051] do_iter_write+0x184/0x610 [ 1807.828749][T17051] ? dup_iter+0x260/0x260 [ 1807.833076][T17051] ? lock_downgrade+0xbe0/0xbe0 [ 1807.837936][T17051] vfs_writev+0x1ee/0x370 [ 1807.842265][T17051] ? vfs_iter_write+0xb0/0xb0 [ 1807.846966][T17051] ? kasan_check_write+0x14/0x20 [ 1807.851898][T17051] ? __mutex_unlock_slowpath+0x195/0x870 [ 1807.857540][T17051] ? wait_for_completion+0x810/0x810 [ 1807.862828][T17051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.869063][T17051] ? __fdget_pos+0xdc/0x1f0 [ 1807.873563][T17051] ? __fdget_raw+0x20/0x20 [ 1807.877998][T17051] ? __sb_end_write+0xd9/0x110 [ 1807.882764][T17051] do_writev+0x11a/0x300 [ 1807.887015][T17051] ? vfs_writev+0x370/0x370 [ 1807.891515][T17051] ? trace_hardirqs_off_caller+0x300/0x300 [ 1807.897314][T17051] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1807.902782][T17051] __x64_sys_writev+0x75/0xb0 [ 1807.907459][T17051] do_syscall_64+0x1a3/0x800 [ 1807.912045][T17051] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1807.917689][T17051] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1807.923424][T17051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1807.928976][T17051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.934862][T17051] RIP: 0033:0x457ec9 [ 1807.938752][T17051] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1807.958347][T17051] RSP: 002b:00007f57ac2cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1807.966750][T17051] RAX: ffffffffffffffda RBX: 00007f57ac2cec90 RCX: 0000000000457ec9 [ 1807.974711][T17051] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1807.982682][T17051] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1807.990648][T17051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2cf6d4 [ 1807.998626][T17051] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 03:38:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x138, 0x1f000000) 03:38:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1808.117710][T17063] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10, 0xffffffffffffffda, 0x3}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x40c00, 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f00009b6000/0x3000)=nil, 0x100000000, 0x5, 0x41, &(0x7f0000ffe000/0x1000)=nil, 0x9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote}}}, 0x84) mmap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x4, 0x12, r1, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x100, 0xb, 0x4, 0x20020000, {0x77359400}, {0x1, 0x0, 0x278c, 0x80000001, 0x3d4, 0x9, "268eea13"}, 0x401, 0x3, @fd=0xffffffffffffff9c, 0x4}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, 0x0) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xee01]) getresuid(0x0, 0x0, &(0x7f0000000700)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) mount$fuseblk(0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="2c61707072616973655f747970733d696d617369672cf71d5a0010000036ba586175647654f785"]) [ 1808.301529][T17055] binder: BINDER_SET_CONTEXT_MGR already set 03:38:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1808.333494][ T26] audit: type=1800 audit(2000000331.430:324): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16613 res=0 [ 1808.334307][T17055] binder: 17052:17055 ioctl 40046207 0 returned -16 [ 1808.384476][T17077] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:51 executing program 4 (fault-call:3 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1808.451065][ T26] audit: type=1804 audit(2000000331.470:325): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/240/file0" dev="sda1" ino=16613 res=1 [ 1808.517603][T17084] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1808.567939][T17087] binder: 17052:17087 ERROR: BC_REGISTER_LOOPER called without request 03:38:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x139, 0x1f000000) [ 1808.619499][ T26] audit: type=1800 audit(2000000331.470:326): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16613 res=0 03:38:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x4000000003, 0x20400000087) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x20040) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, r2}) r3 = openat(r1, &(0x7f00000000c0)='.\x00', 0x10002, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000002280)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000001280)=""/4096}, &(0x7f00000001c0)=0x78) 03:38:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x40000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1808.960705][T17100] binder: 17098:17100 ERROR: BC_REGISTER_LOOPER called without request [ 1809.083907][T17105] FAULT_INJECTION: forcing a failure. [ 1809.083907][T17105] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.129708][T17101] binder: BINDER_SET_CONTEXT_MGR already set [ 1809.137453][T17106] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1809.179119][T17110] binder: 17098:17110 ERROR: BC_REGISTER_LOOPER called without request [ 1809.188342][T17105] CPU: 0 PID: 17105 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1809.197287][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.207341][T17105] Call Trace: [ 1809.210644][T17105] dump_stack+0x1db/0x2d0 [ 1809.215031][T17105] ? dump_stack_print_info.cold+0x20/0x20 [ 1809.220761][T17105] ? save_stack+0x45/0xd0 [ 1809.225096][T17105] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1809.230910][T17105] ? kasan_slab_alloc+0xf/0x20 [ 1809.235711][T17105] ? kmem_cache_alloc_node+0x144/0x710 [ 1809.241176][T17105] ? __alloc_skb+0xf4/0x730 [ 1809.245699][T17105] ? __netlink_dump_start+0x5b4/0x7e0 [ 1809.250399][T17113] binder: 17108:17113 ioctl c0306201 0 returned -14 [ 1809.251087][T17105] should_fail.cold+0xa/0x14 [ 1809.251114][T17105] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1809.268081][T17105] ? ___might_sleep+0x1e7/0x310 [ 1809.272964][T17105] ? arch_local_save_flags+0x50/0x50 [ 1809.278254][T17105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.284497][T17105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.290759][T17105] __should_failslab+0x121/0x190 [ 1809.295698][T17105] should_failslab+0x9/0x14 [ 1809.300202][T17105] kmem_cache_alloc_node_trace+0x270/0x720 [ 1809.306026][T17105] ? __alloc_skb+0xf4/0x730 [ 1809.310560][T17105] __kmalloc_node_track_caller+0x3d/0x70 [ 1809.316245][T17105] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1809.321624][T17105] __alloc_skb+0x12d/0x730 [ 1809.326090][T17105] ? skb_trim+0x190/0x190 [ 1809.330425][T17105] ? netlink_lookup+0xe4/0x1a0 [ 1809.335195][T17105] ? find_held_lock+0x35/0x120 [ 1809.339984][T17105] netlink_dump+0x7be/0x1070 [ 1809.344598][T17105] ? netlink_broadcast+0x50/0x50 [ 1809.349547][T17105] __netlink_dump_start+0x5b4/0x7e0 [ 1809.354753][T17105] inet_diag_handler_cmd+0x2d6/0x400 [ 1809.360046][T17105] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1809.365768][T17105] ? lock_downgrade+0xbe0/0xbe0 [ 1809.370620][T17105] ? inet_diag_dump_compat+0x4c0/0x4c0 [ 1809.376083][T17105] ? rcu_read_unlock_special+0x380/0x380 [ 1809.381753][T17105] sock_diag_rcv_msg+0x322/0x410 [ 1809.386694][T17105] netlink_rcv_skb+0x17d/0x410 [ 1809.391465][T17105] ? sock_diag_bind+0x80/0x80 [ 1809.396145][T17105] ? netlink_ack+0xba0/0xba0 [ 1809.400753][T17105] sock_diag_rcv+0x2b/0x40 [ 1809.405170][T17105] netlink_unicast+0x574/0x770 [ 1809.409982][T17105] ? netlink_attachskb+0x980/0x980 [ 1809.415094][T17105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.421336][T17105] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1809.427064][T17105] netlink_sendmsg+0xa05/0xf90 [ 1809.431857][T17105] ? netlink_unicast+0x770/0x770 [ 1809.436812][T17105] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1809.442357][T17105] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1809.447812][T17105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.454059][T17105] ? security_socket_sendmsg+0x93/0xc0 [ 1809.459532][T17105] ? netlink_unicast+0x770/0x770 [ 1809.464508][T17105] sock_sendmsg+0xdd/0x130 [ 1809.468944][T17105] sock_write_iter+0x379/0x5e0 [ 1809.473718][T17105] ? sock_sendmsg+0x130/0x130 [ 1809.478405][T17105] ? common_file_perm+0x231/0x800 [ 1809.484171][T17105] do_iter_readv_writev+0x902/0xbc0 [ 1809.489376][T17105] ? vfs_dedupe_file_range+0x780/0x780 [ 1809.494979][T17105] ? apparmor_file_permission+0x25/0x30 [ 1809.500534][T17105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1809.506801][T17105] ? rw_verify_area+0x118/0x360 [ 1809.511670][T17105] do_iter_write+0x184/0x610 [ 1809.516355][T17105] ? dup_iter+0x260/0x260 [ 1809.520691][T17105] ? lock_downgrade+0xbe0/0xbe0 [ 1809.525551][T17105] vfs_writev+0x1ee/0x370 [ 1809.529894][T17105] ? vfs_iter_write+0xb0/0xb0 [ 1809.534596][T17105] ? kasan_check_write+0x14/0x20 [ 1809.539540][T17105] ? __mutex_unlock_slowpath+0x195/0x870 [ 1809.545182][T17105] ? wait_for_completion+0x810/0x810 [ 1809.550477][T17105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.556723][T17105] ? __fdget_pos+0xdc/0x1f0 [ 1809.561232][T17105] ? __fdget_raw+0x20/0x20 [ 1809.565652][T17105] ? __sb_end_write+0xd9/0x110 [ 1809.570428][T17105] do_writev+0x11a/0x300 [ 1809.574678][T17105] ? vfs_writev+0x370/0x370 [ 1809.579195][T17105] ? trace_hardirqs_off_caller+0x300/0x300 [ 1809.585012][T17105] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1809.590483][T17105] __x64_sys_writev+0x75/0xb0 [ 1809.595161][T17105] do_syscall_64+0x1a3/0x800 [ 1809.599763][T17105] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1809.605402][T17105] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1809.611131][T17105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1809.616692][T17105] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1809.622587][T17105] RIP: 0033:0x457ec9 [ 1809.626492][T17105] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1809.646093][T17105] RSP: 002b:00007f57ac2cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1809.654506][T17105] RAX: ffffffffffffffda RBX: 00007f57ac2cec90 RCX: 0000000000457ec9 [ 1809.662480][T17105] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1809.670456][T17105] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1809.678428][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2cf6d4 [ 1809.686404][T17105] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 [ 1809.694863][ C0] net_ratelimit: 18 callbacks suppressed [ 1809.694871][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.706377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.712263][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.718053][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x13a, 0x1f000000) [ 1809.755395][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.761970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.764242][T17101] binder: 17098:17101 ioctl 40046207 0 returned -16 [ 1809.775279][T17114] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r3 = dup3(r2, r2, 0x80000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000001700)={0x4, 0x1, 0x33498ba3, 0x10000}) write$uinput_user_dev(r3, &(0x7f0000001280)={'syz1\x00', {0x3, 0x69, 0x88e}, 0x4a, [0x20, 0xfffffffffffffff9, 0x4b, 0xfff, 0xfffffffffffffff7, 0x1ff, 0x81, 0x2, 0x9, 0x4, 0x1, 0x4, 0x4, 0xffffffffffff6c82, 0x0, 0x1, 0x6, 0xe66, 0x1, 0x5, 0xfffffffffffffffb, 0x3, 0x8000000080000000, 0x5, 0x6, 0xfffffffffffffff9, 0x8, 0x80000001, 0x10000, 0x7, 0xb8, 0xffffffffffff0000, 0x9, 0x91, 0x3, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x2, 0x6140, 0x6, 0x3, 0x7fffffff, 0x2, 0x4664, 0xba9, 0x8, 0x9, 0x401, 0x2, 0x3, 0xfffffffffffff110, 0x833e, 0x1f, 0x0, 0x7, 0x7, 0x80000001, 0x200, 0xc8, 0x1800cb97, 0x1, 0xb0f, 0x40], [0x2, 0xb6e, 0x4528, 0x0, 0x9, 0x10000, 0xc03d, 0x6, 0x3, 0xd808, 0xfffffffffffffff8, 0x1, 0x7, 0x6, 0x7, 0x7, 0x8, 0xffffffffffffffff, 0xfffffffffffffeff, 0xfff, 0x7e, 0x1, 0x1, 0x7, 0x3f, 0xfffffffffffffffa, 0x2, 0x1, 0x6, 0xfffffffffffffffa, 0xc134, 0x10001, 0x6, 0x4, 0x1f, 0xfffffffffffffffd, 0x10000, 0x475, 0x100000001, 0x7, 0x5, 0x5, 0x1, 0x4, 0x9, 0x3, 0xff, 0x5, 0x3ff, 0x7, 0x6, 0x6, 0xfe5, 0x3, 0x90000000, 0x3, 0x7, 0x4, 0x100, 0xafa, 0x4fa, 0xbe, 0x98, 0x7], [0x8f1, 0x8, 0x40, 0x37, 0xffff, 0x5, 0x9, 0x7, 0x3, 0x1000, 0x0, 0x4ec, 0xfffffffffffffff8, 0x81, 0x10001, 0x8001, 0x1, 0x4, 0x6, 0x3, 0x200, 0x7, 0x0, 0x3ff9, 0x3, 0x1f, 0x1, 0x4f, 0x100, 0x0, 0x6, 0x5, 0x20, 0x6, 0x0, 0x7, 0x6, 0x2eaa, 0x3, 0x100000001, 0x1f, 0x8, 0x46b5e0ac, 0x80000001, 0x5678, 0xf6, 0x0, 0x2, 0x8, 0x80000000, 0x1, 0x7c, 0x1, 0x1ff, 0x0, 0x5, 0x80000001, 0x0, 0x100000000, 0x20, 0x2, 0x101, 0x1, 0xffffffffffffffff], [0x80, 0x0, 0x3, 0x100, 0x141c, 0x5, 0x401, 0x752, 0x8001, 0x8, 0x7, 0x0, 0x3f, 0x40, 0x4, 0x6, 0xfff, 0x6, 0x3b985690, 0xd4c0, 0x20, 0x6, 0x5, 0x2, 0x1, 0xff, 0x1, 0xfff, 0x10000, 0x0, 0x5, 0xfffffffffffffff7, 0x40, 0x3, 0x3, 0x8, 0x80000001, 0x6, 0x80000000, 0x7f, 0xfff, 0x0, 0x3ff, 0xfffffffffffffbff, 0xffffffffffffffb9, 0x6, 0xff, 0x6643aa48, 0x3, 0x8, 0x1000, 0x40, 0x2, 0x8, 0x6, 0x6, 0x4, 0x5, 0x800, 0xfffffffffffffc00, 0xffffffff, 0x4e8, 0x80000001, 0x8000]}, 0x45c) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x490900, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={[], 0x7fffffff, 0xffff, 0x7, 0x7, 0x4b6a3445, r5}) accept4$x25(r4, 0x0, &(0x7f0000000180), 0x80000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='ip6tnl0\x00', 0x10) 03:38:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x100000000000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1810.030539][T17123] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1810.055906][T17122] binder: 17119:17122 ERROR: BC_REGISTER_LOOPER called without request [ 1810.131637][T17123] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1810.209078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1810.214876][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.225825][ T26] audit: type=1804 audit(2000000333.330:327): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/240/file0" dev="sda1" ino=16613 res=1 [ 1810.264902][ T26] audit: type=1800 audit(2000000333.330:328): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16613 res=0 [ 1810.314588][ T26] audit: type=1804 audit(2000000333.400:329): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/240/file0" dev="sda1" ino=16613 res=1 [ 1810.345599][ T26] audit: type=1800 audit(2000000333.400:330): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16613 res=0 [ 1810.369200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1810.375141][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.754032][ T26] audit: type=1804 audit(2000000333.860:331): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/240/file0" dev="sda1" ino=16613 res=1 03:38:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x3f000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1810.816156][ T26] audit: type=1800 audit(2000000333.890:332): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16613 res=0 [ 1810.847566][T17135] binder: BINDER_SET_CONTEXT_MGR already set 03:38:53 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x81, 0x7, 0x5, 0x0, 0x6, 0xa2000, 0x8, 0x7, 0x1, 0x6, 0x5, 0x16, 0xd2, 0x9, 0x5, 0x70, 0x9, 0x9, 0x2, 0xffffffffffff1e13, 0x7fff, 0xd0, 0x3ff, 0x75cb, 0x3f, 0xfffffffffffff0f1, 0x28, 0x3ff, 0x1, 0x9139, 0x4, 0x9, 0xfffffffffffffffd, 0x9, 0x80000000, 0x0, 0x76, 0x3, @perf_config_ext={0x101, 0x8}, 0x104, 0x5, 0x200, 0x0, 0x6, 0x2, 0x5}, r0, 0x7, r1, 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001400)={'nat\x00', 0x0, 0x3, 0xe4, [], 0x6, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001300)=""/228}, &(0x7f00000001c0)=0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:53 executing program 4 (fault-call:3 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x13b, 0x1f000000) [ 1810.886857][T17135] binder: 17119:17135 ioctl 40046207 0 returned -16 [ 1810.969091][T17135] binder: 17119:17135 ERROR: BC_REGISTER_LOOPER called without request [ 1810.980278][T17141] QAT: Invalid ioctl [ 1810.987734][T17143] binder: 17136:17143 ioctl c0306201 0 returned -14 [ 1810.994991][T17141] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1810.996359][T17141] QAT: Invalid ioctl [ 1811.050298][T17150] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1811.081341][T17147] binder: 17142:17147 ERROR: BC_REGISTER_LOOPER called without request 03:38:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x3f00000000000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x13c, 0x1f000000) 03:38:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000002dc0)='/dev/admmidi#\x00', 0x0, 0x802) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002e00)={'nr0\x00', 0x0}) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002e40)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@multicast1, 0x4e24, 0x8, 0x4e23, 0x7ff, 0x2, 0x20, 0x80, 0x7f, r3, r4}, {0xe41, 0x7, 0x6, 0xfff, 0xde0c, 0x3, 0xfffffffffffffff7, 0x4}, {0x3, 0x80000001, 0x100, 0x10000}, 0x80000001, 0x6e6bc0, 0x0, 0x0, 0x2}, {{@in6=@local, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x3506, 0x7, 0x1, 0x40, 0x5, 0x7, 0x333}}, 0xe8) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', '/proc/capi/capi20ncci\x00'}, &(0x7f0000000180)=""/80, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) r5 = semget$private(0x0, 0x7, 0x1) semctl$IPC_INFO(r5, 0x3, 0x3, &(0x7f0000001680)=""/102) r6 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000001280)={"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"}) [ 1811.256451][T17153] FAULT_INJECTION: forcing a failure. [ 1811.256451][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.300183][T17158] binder: BINDER_SET_CONTEXT_MGR already set [ 1811.333938][T17158] binder: 17156:17158 ioctl 40046207 0 returned -16 [ 1811.350453][T17153] CPU: 1 PID: 17153 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1811.359419][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.369484][T17153] Call Trace: [ 1811.372777][T17153] dump_stack+0x1db/0x2d0 [ 1811.377029][T17158] binder: 17156:17158 ERROR: BC_REGISTER_LOOPER called without request [ 1811.377125][T17153] ? dump_stack_print_info.cold+0x20/0x20 [ 1811.377190][T17153] should_fail.cold+0xa/0x14 [ 1811.377227][T17153] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1811.377250][T17153] ? kasan_check_read+0x11/0x20 [ 1811.406405][T17153] ? do_raw_spin_trylock+0x270/0x270 [ 1811.411713][T17153] ? add_lock_to_list.isra.0+0x450/0x450 [ 1811.417349][T17153] ? rhashtable_walk_next+0x2aa/0x6c0 [ 1811.422732][T17153] ? add_lock_to_list.isra.0+0x450/0x450 [ 1811.428384][T17153] ? _raw_spin_unlock+0x2d/0x50 [ 1811.433240][T17153] __should_failslab+0x121/0x190 [ 1811.438187][T17153] should_failslab+0x9/0x14 [ 1811.442701][T17153] kmem_cache_alloc+0x47/0x710 [ 1811.447484][T17153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.453744][T17153] skb_clone+0x1c5/0x510 [ 1811.457990][T17153] ? skb_split+0x1210/0x1210 [ 1811.462583][T17153] ? rcu_softirq_qs+0x20/0x20 [ 1811.467258][T17153] ? rcu_read_unlock_special+0x380/0x380 [ 1811.472901][T17153] netlink_deliver_tap+0xbc0/0xf40 [ 1811.478069][T17153] ? netlink_remove_tap+0x630/0x630 [ 1811.483277][T17153] ? bpf_skb_vlan_push+0x760/0x760 [ 1811.488392][T17153] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1811.494598][T17153] ? skb_put+0x177/0x1d0 [ 1811.498845][T17153] ? memset+0x32/0x40 [ 1811.502837][T17153] __netlink_sendskb+0x63/0xd0 [ 1811.507605][T17153] netlink_dump+0xd01/0x1070 [ 1811.512202][T17153] ? netlink_broadcast+0x50/0x50 [ 1811.517158][T17153] __netlink_dump_start+0x5b4/0x7e0 [ 1811.522371][T17153] inet_diag_handler_cmd+0x2d6/0x400 [ 1811.527663][T17153] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1811.533385][T17153] ? lock_downgrade+0xbe0/0xbe0 [ 1811.538238][T17153] ? inet_diag_dump_compat+0x4c0/0x4c0 [ 1811.543706][T17153] ? rcu_read_unlock_special+0x380/0x380 [ 1811.549386][T17153] sock_diag_rcv_msg+0x322/0x410 [ 1811.554352][T17153] netlink_rcv_skb+0x17d/0x410 [ 1811.559125][T17153] ? sock_diag_bind+0x80/0x80 [ 1811.563809][T17153] ? netlink_ack+0xba0/0xba0 [ 1811.568443][T17153] sock_diag_rcv+0x2b/0x40 [ 1811.572890][T17153] netlink_unicast+0x574/0x770 [ 1811.577679][T17153] ? netlink_attachskb+0x980/0x980 [ 1811.582802][T17153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.589089][T17153] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1811.594842][T17153] netlink_sendmsg+0xa05/0xf90 [ 1811.599647][T17153] ? netlink_unicast+0x770/0x770 [ 1811.604588][T17153] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1811.610136][T17153] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1811.615601][T17153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.621867][T17153] ? security_socket_sendmsg+0x93/0xc0 [ 1811.627328][T17153] ? netlink_unicast+0x770/0x770 [ 1811.632317][T17153] sock_sendmsg+0xdd/0x130 [ 1811.636736][T17153] sock_write_iter+0x379/0x5e0 [ 1811.641532][T17153] ? sock_sendmsg+0x130/0x130 [ 1811.646239][T17153] ? common_file_perm+0x231/0x800 [ 1811.651272][T17153] do_iter_readv_writev+0x902/0xbc0 [ 1811.656471][T17153] ? vfs_dedupe_file_range+0x780/0x780 [ 1811.661950][T17153] ? apparmor_file_permission+0x25/0x30 [ 1811.667502][T17153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1811.673741][T17153] ? rw_verify_area+0x118/0x360 [ 1811.678620][T17153] do_iter_write+0x184/0x610 [ 1811.683230][T17153] ? dup_iter+0x260/0x260 [ 1811.687564][T17153] ? lock_downgrade+0xbe0/0xbe0 [ 1811.692420][T17153] vfs_writev+0x1ee/0x370 [ 1811.696791][T17153] ? vfs_iter_write+0xb0/0xb0 [ 1811.701472][T17153] ? kasan_check_write+0x14/0x20 [ 1811.706433][T17153] ? __mutex_unlock_slowpath+0x195/0x870 [ 1811.712077][T17153] ? wait_for_completion+0x810/0x810 [ 1811.717396][T17153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.723657][T17153] ? __fdget_pos+0xdc/0x1f0 [ 1811.728172][T17153] ? __fdget_raw+0x20/0x20 [ 1811.732599][T17153] ? __sb_end_write+0xd9/0x110 [ 1811.737375][T17153] do_writev+0x11a/0x300 [ 1811.741636][T17153] ? vfs_writev+0x370/0x370 [ 1811.746159][T17153] ? trace_hardirqs_off_caller+0x300/0x300 [ 1811.752000][T17153] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1811.757479][T17153] __x64_sys_writev+0x75/0xb0 [ 1811.762172][T17153] do_syscall_64+0x1a3/0x800 [ 1811.766769][T17153] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1811.772410][T17153] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1811.778135][T17153] ? __switch_to_asm+0x34/0x70 [ 1811.782907][T17153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1811.788482][T17153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1811.794368][T17153] RIP: 0033:0x457ec9 [ 1811.798260][T17153] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1811.817859][T17153] RSP: 002b:00007f57ac2cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1811.826273][T17153] RAX: ffffffffffffffda RBX: 00007f57ac2cec90 RCX: 0000000000457ec9 [ 1811.834255][T17153] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1811.842232][T17153] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 03:38:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x13d, 0x1f000000) [ 1811.850206][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57ac2cf6d4 [ 1811.858190][T17153] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 03:38:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x80850000, 0xc00000000000000}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x1, 0x6, 0x4, 0x0, 0x0, [{r1, 0x0, 0x10000}, {r0}, {r0, 0x0, 0x8}, {r0}]}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xfffffffffffffe84, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={r2}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x8}}, 0x81, 0x1f, 0x800, 0x8, 0xc0}, &(0x7f0000000180)=0x98) [ 1811.923900][T17168] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1812.023393][T17164] binder: 17156:17164 ERROR: BC_REGISTER_LOOPER called without request 03:38:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x6d, "0139b850ba4a7509b105b3012d84bd14a83bec60b4917911ec9d370e1275bdc7d2ea79063847e0d48b45694c2e5bfbf0b946134d31a12e4b1166c230a342fcbe8fc176c8caae4a2359fa2941266ba5d825a5e4d46a1c6479d31dd7fb6f8b2f98d786654dcf081b105f49a34162"}, &(0x7f0000000100)=0x75) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x3, 0x4, 0x5}, &(0x7f0000000180)=0x14) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x4000000000000000, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x13e, 0x1f000000) 03:38:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x80850000, 0xc00000000000000}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x1, 0x6, 0x4, 0x0, 0x0, [{r1, 0x0, 0x10000}, {r0}, {r0, 0x0, 0x8}, {r0}]}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xfffffffffffffe84, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={r2}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x8}}, 0x81, 0x1f, 0x800, 0x8, 0xc0}, &(0x7f0000000180)=0x98) [ 1812.308037][T17183] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1812.416270][T17191] binder: 17187:17191 ERROR: BC_REGISTER_LOOPER called without request 03:38:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x13f, 0x1f000000) 03:38:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffffffff906, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1812.821748][T17207] binder: 17204:17207 ioctl c0306201 0 returned -14 03:38:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="0f0000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in=@local, 0x4e23, 0x0, 0x4e24, 0xed1, 0x2, 0x80, 0xa0, 0x6e, 0x0, r4}, {0xfffffffffffffff9, 0x7, 0x5, 0x0, 0x9, 0x2f, 0x4, 0xea}, {0x0, 0x1, 0xfff, 0x5c}, 0x7, 0x6e6bb2, 0x0, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x0, 0x3, 0x5, 0xef7, 0x0, 0xffff}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f0000000080), 0x1c) 03:38:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1813.000946][T17221] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1813.176377][T17195] binder: BINDER_SET_CONTEXT_MGR already set [ 1813.204247][T17195] binder: 17187:17195 ioctl 40046207 0 returned -16 [ 1813.233950][T17233] binder: 17187:17233 ERROR: BC_REGISTER_LOOPER called without request 03:38:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x500, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x140, 0x1f000000) 03:38:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$tipc(0x1e, 0x7, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x4202, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) pipe2(&(0x7f0000000380), 0x800) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x4800, 0x0) syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x6, 0x101803) r1 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x8, 0x200000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0xfffffe6c) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000005200)) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000006340)={0x0}) recvmmsg(r3, &(0x7f0000006240)=[{{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{&(0x7f0000005d80)=""/206, 0xce}, {0x0}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x4, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x1, 0x3, &(0x7f0000006380)={r4}) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000200)={0xa0000000, {{0x2, 0x4e22, @local}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000006440)={'team0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000480)=0x3) 03:38:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) getrusage(0x1, &(0x7f0000000080)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x10002, 0x0) recvfrom$netrom(r0, &(0x7f0000000180)=""/91, 0x5b, 0x100, &(0x7f0000001280)={{0x3, @default, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r1 = socket$inet(0x2, 0x800, 0x62d8) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="c00000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="c00e00001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3b, 0x101080) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x15, 0xe8, &(0x7f00000000c0)="82b86502ef66177d5cc011ee0ff09460844d7b1a7130b28589f2e5f9ad3a90295b347705086b71c48e3d9e320da2d7f7cdbac065096b3a9ea32162af895ec48cdade4d29daf5390c2001b309782f49d1b4c1b047e00a31edff0be27336c2b026026aaaefc770bcff47808d026bdbf1096331c4c4359d4935e77658780c0fcbeba2e42067727c2fe1cec085fbb3bd5d0fe335ac868eb01d584a9d76e41c2f37cb349a045e2740418a29c895112065d7711a0e71cb1ecaf47172488e803bc4c3bf3928e5b31cbccb2bc8fa3f84dd801408ef294f811235a45bada4a0ebd3032809775c480dc682edf1"}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$tipc(0x1e, 0x7, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x4202, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) pipe2(&(0x7f0000000380), 0x800) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x4800, 0x0) syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x6, 0x101803) r1 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x8, 0x200000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0xfffffe6c) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000005200)) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000006340)={0x0}) recvmmsg(r3, &(0x7f0000006240)=[{{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{&(0x7f0000005d80)=""/206, 0xce}, {0x0}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x4, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x1, 0x3, &(0x7f0000006380)={r4}) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000200)={0xa0000000, {{0x2, 0x4e22, @local}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000006440)={'team0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000000480)=0x3) 03:38:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="effd00001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x141, 0x1f000000) 03:38:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0xa242, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001300)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x0, 0xfffffffffffffebc, [], 0xdecf53b08c5e80b, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f00000013c0)=0x78) getsockname(r2, &(0x7f0000001200)=@un=@abs, &(0x7f0000000000)=0x80) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x38, "0fd9a6780a124fca5c0c3e989a2b9d69ab462a2bf727ef15817479970f98085dc39df83916673a05a28039b2b42e9c51d4107c406874cf81"}, &(0x7f0000000100)=0x5c) 03:38:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e03f03001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1814.205533][T17282] binder: BINDER_SET_CONTEXT_MGR already set [ 1814.211658][T17282] binder: 17244:17282 ioctl 40046207 0 returned -16 [ 1814.218419][T17282] binder_thread_write: 1 callbacks suppressed [ 1814.218425][T17282] binder: 17244:17282 ERROR: BC_REGISTER_LOOPER called without request 03:38:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x3f00, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt(r0, 0xfffffffffffffffb, 0x9, &(0x7f0000000040)=""/128, &(0x7f0000000340)=0x80) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x400200) r3 = getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) kcmp(r3, r4, 0x6, r1, r2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x91, "5130d04ce95d7d821e37c84d1f90e03fdb410bab09e5d0f861b8b52abbb556dcd3da3b11fff83570cc4908a8418421ed74e2f5a7efee02dc67ea484dce303a0d8117366a80e7a3e82c74126025a6fba5ae9f329e0781892f503a8d44c5d5a5b5ed81b8d594eb59e7bc1f3b2af0db6f443bafecef0bff83a9705a2909649f52f5dc4df9d9af66b615fa7e7cef52c07e5afa"}, &(0x7f00000000c0)=0x99) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000300)=0x84) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0xc204, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:38:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x142, 0x1f000000) 03:38:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="880100201400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:57 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000004c0)=""/4096, &(0x7f0000000000)=0x1000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x0, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x8100, 0xd, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) [ 1814.331496][T17289] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1814.370066][T17296] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="00f0ff7f1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x143, 0x1f000000) 03:38:57 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400080, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000140)=0x4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1814.407721][T17293] binder: 17291:17293 ERROR: BC_REGISTER_LOOPER called without request 03:38:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 03:38:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="effdffff1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1814.527402][T17311] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1814.567104][T17313] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1815.150185][T17308] binder: BINDER_SET_CONTEXT_MGR already set [ 1815.156250][T17308] binder: 17291:17308 ioctl 40046207 0 returned -16 [ 1815.164552][T17327] binder: 17291:17327 ERROR: BC_REGISTER_LOOPER called without request 03:38:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x144, 0x1f000000) 03:38:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000001280)="389e726007b3ad4c5040b6b2a0bfcda287188f68037cb86f045cc15c4a3d1d98d7f9e921edaa381249866389a8cdecd1c0dd38627e5580f14cbdc8783ba4822f8c4fa634eae0dc426d8fbb99a2d117dc566338dee97835f516f21b528797fea214653255b7191c6852915f2c5244ef322d21866164aa9e1053077ac1cef1d88d1f271318f41964f8ec3a1545ac9d65bdce1dd02c98f36a229293e97b212d3b93dabe6a5c15be8f8f0d36dc7a1b53b9099047c3e4dc5cf8840dfa1ed1c8dcfacc7c1fb43d5222c142b47d2a58013f648ce9ebca9a1238695870e2abe577134b8013be7f4da8b14c5098e9b1ee37c5b5252890", 0xf2, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x801, 0x2000000000000) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x1b, 0x5, 0x80, 0xfffffffffffffffc, 0x2000000000001, 0x1}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000003c0)={{0x1, 0x400002, 0x5, 0x3, 0x100000001}, 0x80000001, 0x0, 0x4}) r5 = open$dir(&(0x7f0000000440)='./bus/file0\x00', 0x8000, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) r6 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x2000000a, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000140)=0x61b) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000006c0)={0x5, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f0000000700)={r7, 0x3}) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000001880)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @multicast2}, 0x12, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001840)='erspan0\x00', 0x3a, 0x711, 0x3}) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000300)=0xc) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f00000009c0)) tee(r8, r8, 0xffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000001800)={0x2}) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f0000000080)) 03:38:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x4000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000020000190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:58 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) fdatasync(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000240)) [ 1815.249118][ C1] net_ratelimit: 24 callbacks suppressed [ 1815.249127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.260823][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.310309][T17334] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000000f00190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:58 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000b40)='/dev/media#\x00', 0x3, 0x48000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x800) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x1000, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x20000000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1815.358962][T17334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1815.387974][T17343] binder: 17340:17343 ERROR: BC_REGISTER_LOOPER called without request 03:38:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x145, 0x1f000000) 03:38:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001200190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1815.515789][T17350] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001300190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:58 executing program 3: socketpair$unix(0x1, 0x40000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) pwrite64(r0, &(0x7f00000000c0)="996262cb99982d047b9071abb13b8a88cddc3a5a844a662c0de21fd8f6c579bbafa11d1d89f4a97c778fe769b2023af6b6cd90419084fecec229993b5447d62c93b378eb9abdf0f03c2949955c8c04e5e451c482a4cc96df6e19f694f79548e9ebf524536a63354a31a91a34bddf08293af228c802a4eb0ecd0c39fa829bf6c6ab1efed471a30d8c6eec8001170eff9f34e58c9e178a21621629325983a4461696f64e8db8022f816f4f4f73abc6377a0b973880c93b7ce98a5961110fb102587159521dcaf8873fa2f371dd24a33686f7461dead165828e7aeb5e9e420c1e9af8fd94a4a44831e3dd9140466aedde5e24ec30054a", 0xf5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000001c0)={0xfffffffffffffff7, 0xff, 0xfff, 0x1f, 0x3, 0x24}) 03:38:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x146, 0x1f000000) [ 1815.873966][T17376] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1815.889616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.896001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.903102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.909661][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480200001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1815.931699][T17379] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1815.969098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.974972][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1816.132171][T17352] binder: BINDER_SET_CONTEXT_MGR already set [ 1816.141066][T17352] binder: 17340:17352 ioctl 40046207 0 returned -16 [ 1816.163357][T17389] binder: 17340:17389 ERROR: BC_REGISTER_LOOPER called without request 03:38:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x1000000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:38:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x147, 0x1f000000) 03:38:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) prctl$PR_SET_UNALIGN(0x6, 0x3) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:38:59 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000b40)='/dev/media#\x00', 0x3, 0x48000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x800) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x1000, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x20000000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 03:38:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480400001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1816.299963][T17400] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480800001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1816.344442][T17404] binder: 17403:17404 ERROR: BC_REGISTER_LOOPER called without request [ 1816.369477][T17406] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:38:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x6, 0x1) r3 = dup2(r0, r1) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) [ 1816.449119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1816.455041][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480a00001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:38:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x148, 0x1f000000) 03:38:59 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000b40)='/dev/media#\x00', 0x3, 0x48000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x800) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x1000, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x20000000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 03:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480e00001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1817.135433][T17409] binder: BINDER_SET_CONTEXT_MGR already set [ 1817.148772][T17409] binder: 17403:17409 ioctl 40046207 0 returned -16 [ 1817.156313][T17441] binder: 17403:17441 ERROR: BC_REGISTER_LOOPER called without request 03:39:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x3f000000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') fcntl$dupfd(r0, 0x0, r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x220000, 0x0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001b00)={0x3, [0x8, 0x8001, 0x0]}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1ff) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) write$binfmt_elf32(r1, &(0x7f0000001b40)=ANY=[@ANYBLOB="7f454c4601b805ff00000000000000040200070096000000ea02000038000000e303000005000000ff0f2000020001000400010000000000030000000700000081000000055600000800000003000000030000000010000004000000c00700000800000002000000070000000000000007000000ff070000c4e554fc2dc622c8fd7362a68f3f6a6f7747e1c51c4055763ae68c5008fccbfd7935d4ba73a3cec750c9333ef6faeb92378c71a1a7d373a147076d32a9b8bd8163af61118b93d8600c7efb2dd35f61429d26c649750ed49689acdc0ef1bf554d9d0e0bae9275c81958fe134a1dc6b3266648c7a8e84a1cf1b4242708316a9367619def740991d3f6c5eb13e6ca48dcba62a8a033d59bc709afd13e59722bfea86df393c5662dc7e7fa36c4b65f9a6864eb17614454c5b8a331561ab0e65301d1a572ba2ec8355244c1a0341498a257c6dd397c2b30b97d5f55aac5d72b3a33c02d27f8e6bf3a28d118f831dfef15991767abda8992f045b8c0e53da53af0ecc93c36c60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d07321ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e582c44000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x872) 03:39:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x149, 0x1f000000) 03:39:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x147, 0x1f000000) 03:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480f00001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1817.270772][T17450] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:39:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x14a, 0x1f000000) 03:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="481000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1817.332754][T17450] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1817.341791][T17457] binder: 17455:17457 ERROR: BC_REGISTER_LOOPER called without request 03:39:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000001280)=""/4096}, &(0x7f0000000000)=0x78) 03:39:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x147, 0x1f000000) 03:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="486000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000180)={0xb2dc, 0x2, 0x9, 0x34, 0xc56, 0xb7, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffe) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000080)=0x9) [ 1817.648543][T17481] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1817.691010][T17481] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1818.112613][T17460] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.129301][T17460] binder: 17455:17460 ioctl 40046207 0 returned -16 [ 1818.139364][T17488] binder: 17455:17488 ERROR: BC_REGISTER_LOOPER called without request 03:39:01 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x8000, 0x3, 0xa0}, 0x10) write(r2, &(0x7f0000000340), 0x10000014c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) stat(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = msgget(0x2, 0x400) msgctl$IPC_RMID(r4, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000080045010, 0x0) 03:39:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x14b, 0x1f000000) 03:39:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x40000000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48f000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f00000000c0)=0x78) 03:39:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) getpeername$tipc(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x49) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x402, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) 03:39:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000a001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1818.314484][T17503] binder: 17502:17503 ERROR: BC_REGISTER_LOOPER called without request [ 1818.417523][T17514] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:39:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000e001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x14c, 0x1f000000) [ 1818.474745][T17514] QAT: Invalid ioctl [ 1818.485274][T17516] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1818.511331][T17514] QAT: Invalid ioctl 03:39:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48c00e001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x14d, 0x1f000000) 03:39:02 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xf63, 0x30}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440)={r1, 0x5d0}, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc000, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x20040, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100), 0x28) accept$inet6(r2, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) semget(0xffffffffffffffff, 0x3, 0x0) shutdown(r2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) [ 1818.935099][T17539] tls_set_device_offload_rx: netdev lo with no TLS offload [ 1819.091813][T17512] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.097821][T17512] binder: 17502:17512 ioctl 40046207 0 returned -16 03:39:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x100000000000000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:39:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000f001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000240)=@ng={0x4, 0xe}, 0x2, 0x2) fchdir(r0) write$P9_RAUTH(r0, &(0x7f0000000380)={0x14, 0x67, 0x202, {0x40, 0x2, 0x8}}, 0x14) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x80) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00') 03:39:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x14e, 0x1f000000) 03:39:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1819.259488][T17551] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:39:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x10040) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000001280)=""/4096) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:39:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48ac11001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1819.307387][T17556] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1819.325610][T17554] binder_thread_write: 1 callbacks suppressed [ 1819.325639][T17554] binder: 17544:17554 ERROR: BC_REGISTER_LOOPER called without request [ 1819.326889][T17553] binder: 17549:17553 ERROR: BC_REGISTER_LOOPER called without request 03:39:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x14f, 0x1f000000) 03:39:02 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7ff, 0x5}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x8, 0x10}, &(0x7f0000000180)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000012c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0xfffffffffffffffe, "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", 0xd2, 0x9, 0x5, 0x40, 0x1f, 0x0, 0x1, 0x1}, r2}}, 0x128) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:39:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48003f001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1819.483674][T17566] overlayfs: filesystem on './file0' not supported as upperdir [ 1819.562109][T17572] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:39:02 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x2) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002000)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000001f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002100)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000002200)=0xe8) getpeername$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002340)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002b80)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000002c80)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002e00)={@initdev, @dev, 0x0}, &(0x7f0000002e40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002e80)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000002f80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002fc0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000030c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003100)={@rand_addr, @multicast1, 0x0}, &(0x7f0000003140)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000003180)={0x11, 0x0, 0x0}, &(0x7f00000031c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003380)={@empty, @loopback, 0x0}, &(0x7f00000033c0)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000004c40)={0x11, 0x0, 0x0}, &(0x7f0000004c80)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000004d80)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000004e80)={'netdevsim0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000008780)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000087c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008800)=0x14, 0x800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008840)={0x0, @dev, @initdev}, &(0x7f0000008880)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000088c0)={@dev, 0x0}, &(0x7f0000008900)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000008940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008980)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000a240)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f000000a340)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f000000a380)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000a3c0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f000000a400)={@local, 0x0}, &(0x7f000000a440)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000ad80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f000000ad40)={&(0x7f000000a480)={0x8ac, r1, 0x203, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xac, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x174, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffeffffffff}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1f0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x7922, 0x100000000, 0x8, 0x6}, {0x0, 0x5, 0x7fffffff, 0x4}, {0x1, 0x71a, 0xfa3, 0x1}, {0x1ff, 0x200, 0x401, 0x4}, {0x81, 0x10000, 0x38, 0x1ff}, {0x9, 0x5, 0x5, 0x20}, {0x0, 0x1f, 0x81, 0x9}, {0x3, 0xfff, 0x5, 0xc3ee}, {0x9, 0x1, 0x3, 0x7fffffff}]}}}]}}, {{0x8, 0x1, r19}, {0x138, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6fba}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x16c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xa2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x41}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x7, 0x45, 0x0, 0x0, 0xe4ffffff}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x1de, &(0x7f0000000000)=""/195}, 0x48) [ 1819.628785][T17579] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1820.080998][T17590] binder: BINDER_SET_CONTEXT_MGR already set [ 1820.087180][T17590] binder: 17549:17590 ioctl 40046207 0 returned -16 [ 1820.094350][T17590] binder: 17549:17590 ERROR: BC_REGISTER_LOOPER called without request 03:39:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x3f00000000000000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:03 executing program 3: r0 = semget(0x2, 0x6, 0x10) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001340)='/dev/video37\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000180)="95cb821ee7eead921c53e76646137334c17244e7f6520ca4d50b25353ba1757c9ef08ba5815ce7ffeea8847e31d817d1330bbcc73187a09d304b8be43ae4", 0x3e, 0x74, 0x0, 0x2}, &(0x7f0000001280)) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x2]) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sync_file_range(0xffffffffffffffff, 0x9, 0x6, 0x1) r4 = socket$inet(0x2, 0x809, 0x103) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/null\x00', 0x3fffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:39:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x150, 0x1f000000) 03:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480060001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300)=0x7, 0x4) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffe00}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff00}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x862c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="2e0000001a0081ace4050cecff091ffa1c6a23480b0e00faf0265184cf6df4e5220000006db6a6a0d6576b190000", 0x2e}], 0x1}, 0x0) 03:39:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1820.197286][T17598] netlink: 18 bytes leftover after parsing attributes in process `syz-executor1'. [ 1820.236122][T17596] binder: 17593:17596 ERROR: BC_REGISTER_LOOPER called without request 03:39:03 executing program 3: socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000001440)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$swradio(&(0x7f0000001380)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f00000013c0)=0xffff, &(0x7f0000001400)=0x4) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xa24048, &(0x7f0000001300)={'trans=unix,', {[], [{@fowner_lt={'fowner<', r3}}, {@fowner_gt={'fowner>', r4}}]}}) 03:39:03 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x18, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) [ 1820.260979][T17606] netlink: 18 bytes leftover after parsing attributes in process `syz-executor1'. [ 1820.289769][T17605] binder: 17600:17605 ERROR: BC_REGISTER_LOOPER called without request 03:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4811ac001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x151, 0x1f000000) [ 1820.387261][T17613] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:39:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'broute\x00', 0x0, 0x0, 0x3a, [], 0x88e5a78, &(0x7f00000001c0), &(0x7f0000001280)=""/4096}, &(0x7f0000000000)=0x108) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) [ 1820.452847][T17615] IPVS: ftp: loaded support on port[0] = 21 03:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480ec0001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1820.609115][ C1] net_ratelimit: 22 callbacks suppressed [ 1820.609123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.614917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1820.779086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.784920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.050196][T17611] binder: BINDER_SET_CONTEXT_MGR already set [ 1821.056204][T17611] binder: 17600:17611 ioctl 40046207 0 returned -16 [ 1821.063833][T17638] binder: 17600:17638 ERROR: BC_REGISTER_LOOPER called without request 03:39:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x4000000000000000, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x152, 0x1f000000) 03:39:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:39:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xd5cc, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x84, 0x6}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 03:39:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800f0001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1821.176180][T17645] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 1821.201096][T17649] binder: 17640:17649 ERROR: BC_REGISTER_LOOPER called without request 03:39:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000002480)={0x0, 0x0, 0x2080, {0x0, 0x16004, 0x2}, [], "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", "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"}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfffffcbe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x1}], 0xda, 0x0, &(0x7f0000000300)="04253e775aa1ddc378bb730779f23462369cf86b65ec5033626e4a6c4f577c6806ca1653709927574dbc15f99d57146438f075107963497b2c41d07328a652fdcf6a2f11033fddac876108a77417e21748c4809a572f5499497728ec1103850ce55bac3ce0177f01c0b8a86da9e2e730a40a198316f950cc8f5f2509ae3b2c1d0d44537e560ef0b8212068119ac8b4a628d00f4b9e729577c531076d0ac70e2c105bc731718b05e4c2c5eba528e2969a66f8c1b45d59fbc898b17638efb0c94f1cc238394fab03c9d017adf4030246ea3dd2e7963072c61f152e"}) read(r1, &(0x7f0000000000)=""/81, 0xffffffd5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x40031, r1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r3 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000000)="34a4c9fc", 0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) [ 1821.225245][T17647] binder: 17644:17647 ERROR: BC_REGISTER_LOOPER called without request 03:39:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400480, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0xec) r2 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 03:39:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000022300190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1821.402493][T17666] binder: 17661:17666 ERROR: BC_REGISTER_LOOPER called without request [ 1821.438502][T17672] kernel msg: ebtables bug: please report to author: Num_counters wrong 03:39:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x153, 0x1f000000) [ 1821.460234][ T26] audit: type=1804 audit(2000000344.570:333): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/264/file0/memory.events" dev="sda1" ino=16646 res=1 [ 1821.489167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.495418][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.628421][ T26] audit: type=1800 audit(2000000344.570:334): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=16646 res=0 [ 1821.718539][ T26] audit: type=1804 audit(2000000344.570:335): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/264/file0/memory.events" dev="sda1" ino=16646 res=1 [ 1821.795428][ T26] audit: type=1804 audit(2000000344.800:336): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/264/file0/memory.events" dev="sda1" ino=16646 res=1 [ 1821.830474][ T26] audit: type=1800 audit(2000000344.800:337): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=16646 res=0 [ 1821.853137][ T26] audit: type=1804 audit(2000000344.800:338): pid=17660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/264/file0/memory.events" dev="sda1" ino=16646 res=1 [ 1821.975363][T17655] binder: BINDER_SET_CONTEXT_MGR already set [ 1821.981606][T17655] binder: 17644:17655 ioctl 40046207 0 returned -16 [ 1821.988794][T17693] binder: 17644:17693 ERROR: BC_REGISTER_LOOPER called without request 03:39:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="92080000000000007c3413302a38e17fbbea2afe755f93a0c6143dfcdc096f1940b72f22bc70b51863b3e3df25b108f75ac161e4db9a3258598f4fe911a0f4734ff3796c9cd54b34a646b5a404837b34cc28a3b7f222f47b5c6087b27f275b417bf3e3d9d67236e9b0103ab1b1389f295e4786403e0fcd2ea0a151909169"], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:05 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x22402) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0xfffffffffffffe61) r1 = getpid() r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x2) setpgid(r1, r1) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getpid() getpgid(0x0) rt_tgsigqueueinfo(0x0, r1, 0x3b, &(0x7f0000000680)={0x12, 0x9, 0x8}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x80000000012, r3, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000480)=0xe8) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@multicast1, 0x4e24, 0x8, 0x4e20, 0x0, 0xa, 0x1d, 0xa0, 0x11, r4, r5}, {0x2a7c, 0x690, 0x8, 0x9, 0x400, 0x4, 0x6, 0x2}, {0x1, 0x413b, 0x5, 0x7}, 0x100, 0x6e6bb7, 0x3}, {{@in6=@remote, 0x4d2, 0x7f}, 0x0, @in6=@loopback, 0x3500, 0x7, 0x1, 0x7, 0x8, 0x2, 0xffffffffffff8000}}, 0x296) r6 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x8ad) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000100)=0x3, 0x19) r7 = dup(r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_int(r3, 0x29, 0x7e, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r7, r8, &(0x7f0000d83ff8), 0x8000fffffffe) 03:39:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000004000190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\xd1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7[\x1f\xe8\xaf\xb4N\xe8\xdf\v5\xa0\xfdj\x1f\x02\x00\xd3\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\x00\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0xa82, 0x4) sendfile(r1, r2, &(0x7f0000000180)=0xf0110, 0x100000001) 03:39:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x154, 0x1f000000) [ 1822.111422][ T26] audit: type=1804 audit(2000000345.220:339): pid=17698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir570565405/syzkaller.VTm4Uq/3168/bus" dev="sda1" ino=16678 res=1 [ 1822.143801][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1822.150347][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1822.157063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1822.163308][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:39:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000ec000190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1822.284938][ T26] audit: type=1804 audit(2000000345.390:340): pid=17698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir570565405/syzkaller.VTm4Uq/3168/bus" dev="sda1" ino=16678 res=1 03:39:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x155, 0x1f000000) [ 1822.432826][T17718] binder: 17716:17718 ioctl c0306201 0 returned -14 [ 1822.445803][ T26] audit: type=1804 audit(2000000345.430:341): pid=17698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir570565405/syzkaller.VTm4Uq/3168/bus" dev="sda1" ino=16678 res=1 03:39:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480002001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:39:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 1822.570895][ T26] audit: type=1804 audit(2000000345.430:342): pid=17713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir570565405/syzkaller.VTm4Uq/3168/bus" dev="sda1" ino=16678 res=1 [ 1822.759663][T17735] binder: 17731:17735 ioctl c0306201 0 returned -14 03:39:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x5, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000340)) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09637224b3848e4db2a8cfd29f0000292963c99c27f3fd6cf029011b4a2eeafa48658aabb0b07c6b48bb8950c4cd452cb400d64ce4a8f2c01a5409caca58c086b314e5e88d4c1b0e74a59231ff5d83b036ec9fb211ed4832e334fb2a3871f51fe4eb5a56afb1bc47437e03a494d1eca86aeb954cd6cbaa111a05a3821d84997dabf1fe2125effffb1c7d7a39fc58307592b71a110c63a8bf968c78edf1728d0a1b0b8b0f20db0c0463115c25c14ca237326caa"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x5, 0x202000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4, 0x6, 0x1, 0x9, 0x9, 0x3c, 0x8, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x20, 0x8, 0x4, 0x4, 0x4}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r4, 0xd2bf}, 0x8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000140)="6f86fffe6505ce1762189589beafc119e58bc1970b1ee45cbc4b68a9f381c15a1f4e6d2676a3f7") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000004c0)) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0x7f, @ipv4={[], [], @multicast2}, 0xffffffffffff35aa}}, 0x0, 0x3, 0x0, "266798027807ba4f7d1b0646cadeb06aaca49796c5caaaf08fe4a55d7cd1e06a22a4a7069e948952dd7fa43a60fe7ff764532a35936ae830cfe883aa6b1be852f0eeae659309d02c6d129f8d20c07bb0"}, 0xd8) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x156, 0x1f000000) 03:39:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480004001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:06 executing program 1: socket$kcm(0x2b, 0x200000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='0\x00') 03:39:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 1822.955753][T17714] binder: BINDER_SET_CONTEXT_MGR already set [ 1822.961867][T17714] binder: 17703:17714 ioctl 40046207 0 returned -16 [ 1823.023603][T17748] binder: 17746:17748 ioctl c0306201 0 returned -14 03:39:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x17, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d) r5 = socket$kcm(0x29, 0xfffffffffffffffe, 0x0) sendmsg$kcm(r5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)=@generic={0x0, "ddf95228adcb80d455a64ea96b388c597669d14253d4c01472089f2cfd33ee18601957bc7a0ee267debd46825d7baa4d9ff4e47649ba1ba27857ff311486d58cb08b2eb1bed032bbb59941c2626fde700c63a1aa80847916e8d614a8e84b706c2aff16592e209b8b80a7e685e9f9d3aaa59d695e36cb12585ccbda1b29d8"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000700)={r4}) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)) close(r4) r6 = socket$kcm(0x2b, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000140)=r6, 0x1e4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="c6e55c598710ce3e362b948028c6e6a5114ce2cfba22e740258eef368e97ace90cd92b5483f284196b936bfa1645522bad1376c19192d6f6d0bcc5cb8820802f7f041fdfc64b80866f0acdebd2510a64332b86109c9e2a591b10836e0bccd7658b6cba91185e", 0x66}], 0x1}, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000580)={r2}) sendmsg$kcm(r2, 0x0, 0x0) 03:39:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480008001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1823.106051][T17758] binder: 17755:17758 ioctl c0306201 20008fd0 returned -14 03:39:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x157, 0x1f000000) 03:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000a001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x40000007ffffffc) 03:39:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x7}, &(0x7f0000000200)=0x8) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f00000007c0)=@x25, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000840)=""/180, 0xb4}, 0x100) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000000000000065bc934b1215c49e396717f2781d7064fcf03c3ab49651879bdc1ef1edb31d0579a2503f6693add4620e044b4af6a418f6205ce87ab7f2870f7a74034611fc3603cf12a57ea4d40e5a3f3c50a8f9203fa5398f4ca686e3bf237791490a33ab11c7c20fa6eb446d952ebb05535fa64aef9649abb5fb10a8bf848f781306dab4c658865ff8b7b93b94716ca4997863c7d7643a6fe36d07b145f56a4ad64526a2a02aa912c0a403ec38d7337d"], 0xfffffffffffffe8a, 0x0, &(0x7f0000002000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x170, 0x0, &(0x7f0000000580)=[@register_looper, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000240), &(0x7f0000000280)=[0x48, 0x48, 0x30, 0x38, 0x30, 0x48, 0x18]}}, @exit_looper, @acquire={0x40046305, 0x4}, @increfs_done={0x40106308, r4, 0x4}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000300)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @fda={0x66646185, 0xa, 0x0, 0xc}], &(0x7f0000000340)=[0x0]}, 0xffff}}, @increfs_done={0x40106308, r4, 0x1}, @request_death={0x400c630e, 0x0, 0x2}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x48, 0x8, &(0x7f0000000440)=[@fda={0x66646185, 0x6, 0x4, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400), 0x1, 0x1, 0x26}], &(0x7f00000004c0)=[0x28]}, 0x1}}, @reply_sg={0x40486312, {{0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000500), &(0x7f0000000540)=[0x78, 0x38, 0x78, 0x0, 0x40, 0x0]}, 0x40}}], 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:07 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/67, 0x43) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) msgrcv(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) lstat(0x0, &(0x7f0000000000)) 03:39:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x158, 0x1f000000) 03:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000e001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1823.860047][T17768] binder: BINDER_SET_CONTEXT_MGR already set [ 1823.866115][T17768] binder: 17755:17768 ioctl 40046207 0 returned -16 [ 1823.873767][T17795] binder: 17755:17795 ioctl c0306201 20008fd0 returned -14 03:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000f001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1823.990007][T17803] binder: 17801:17803 ioctl c018620b 200002c0 returned -14 [ 1824.057506][T17803] binder_alloc: binder_alloc_mmap_handler: 17801 20000000-20002000 already mapped failed -16 [ 1824.090265][T17803] binder: BINDER_SET_CONTEXT_MGR already set 03:39:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480010001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1824.109629][T17803] binder: 17801:17803 ioctl 40046207 0 returned -16 [ 1824.130008][T17812] binder: 17801:17812 ioctl c018620b 200002c0 returned -14 03:39:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x159, 0x1f000000) 03:39:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480060001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:07 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x1f8, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4a1e2a2a198ff6b9dd276c8e8e0bf127d0ed8e8fcb82ffc131650dc56d1111f5aa1741eaeb19a7f1b7233af37c415ea40223e28169e09a5d7c4789255d0257d79ece2a6b906581b240f41e70194ed39bf6b9184fc907832c2984ade5f97257869968999d8473a9e9bec1a05d31199cdf306918f875369501d6bfd8a76f80d9abf6c19834435634df6377a4d8746ec672d2c30ab7dd9c5ea72537bef3b20d3ca528c0a2dcb6f03cfe067c789bd6d186e61e8c9bec574e3c6a22efb476fdc684f0b6e8dab63e0873aa662b90b0d832dcbd6f0b3d68e6ec889dd542c61e91362b1acb9d449abfe0c497dddbcdcb8a13e08dcee5a054e8f7042a2f2e69b3e2d651632108b27a4f86a352b21811b13e27b757624bfd07432633c63c175180cbd3660aa6acc45acdf37e71c56287581e91e"}], 0x1f8}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:39:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x15a, 0x1f000000) 03:39:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000000000e2ff00"], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1824.607406][T17843] binder_thread_write: 10 callbacks suppressed [ 1824.607474][T17843] binder: 17842:17843 ERROR: BC_REGISTER_LOOPER called without request 03:39:07 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x110, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4a1e2a2a198ff6b9dd276c8e8e0bf127d0ed8e8fcb82ffc131650dc56d1111f5aa1741eaeb19a7f1b7233af37c415ea40223e28169e09a5d7c4789255d0257d79ece2a6b906581b24"}], 0x110}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800f0001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:07 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x210, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4a1e2a2a198ff6b9dd276c8e8e0bf127d0ed8e8fcb82ffc131650dc56d1111f5aa1741eaeb19a7f1b7233af37c415ea40223e28169e09a5d7c4789255d0257d79ece2a6b906581b240f41e70194ed39bf6b9184fc907832c2984ade5f97257869968999d8473a9e9bec1a05d31199cdf306918f875369501d6bfd8a76f80d9abf6c19834435634df6377a4d8746ec672d2c30ab7dd9c5ea72537bef3b20d3ca528c0a2dcb6f03cfe067c789bd6d186e61e8c9bec574e3c6a22efb476fdc684f0b6e8dab63e0873aa662b90b0d832dcbd6f0b3d68e6ec889dd542c61e91362b1acb9d449abfe0c497dddbcdcb8a13e08dcee5a054e8f7042a2f2e69b3e2d651632108b27a4f86a352b21811b13e27b757624bfd07432633c63c175180cbd3660aa6acc45acdf37e71c56287581e91e85f102e421ef15052cca6218d70584c93b9530c6fc30a5ba37bb286e0d6995"}], 0x210}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:39:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x15b, 0x1f000000) 03:39:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000a1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:08 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0xd8, 0x0, 0x0, "b78d9fc5911095107f80aace8d4098678255d6fb368daeb0e6fa9ba5c041d0380cb33696fb219b79321defcf20fde74f3265583b605d510d0c722ccb57eb5995b822d269d81a04322b6048e7b02ac159331ff80853a741a12742734ebdf8463196b65fe3d397a8805761d3f07bd32a574237c529660ba8c3b8f787d2a36124002d621efb9e14e9c13bc3866bfe51c47ed43d24e3a45a288ec903b319f88a8060097da0686bf3b9e7a0984b1f538a7e4a7ed7b4a1e2a2a198ff6b9dd276c8e8e0bf127d"}], 0xd8}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:39:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x15c, 0x1f000000) 03:39:08 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000380)="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", 0x763}], 0x1) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000000000)) 03:39:08 executing program 3: 03:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000e1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1825.129869][T17879] binder: 17877:17879 ERROR: BC_REGISTER_LOOPER called without request [ 1825.342579][T17847] binder: BINDER_SET_CONTEXT_MGR already set [ 1825.348703][T17847] binder: 17842:17847 ioctl 40046207 0 returned -16 [ 1825.356822][T17892] binder: 17842:17892 ERROR: BC_REGISTER_LOOPER called without request 03:39:08 executing program 3: 03:39:08 executing program 1: 03:39:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x15d, 0x1f000000) 03:39:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) unshare(0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000140)="e062826470609a01583b3736d24c56a16946e90858fedec43ba94613901332b2b73eef7176fe34e740eccdf41de143de2402c67ab22387bd239f711f66a2d5d4f930bb74c11382e3bdfae74e7122eb9a354172c054f79c3bedd3aff9c5cfd6260157b5dd1f1e8fd616", 0x69, r0}, 0x68) setpriority(0x2, 0x0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800c00e1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:08 executing program 1: 03:39:08 executing program 3: [ 1825.491697][T17900] binder: 17898:17900 ERROR: BC_REGISTER_LOOPER called without request 03:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000f1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1825.592343][T17904] binder: 17902:17904 ERROR: BC_REGISTER_LOOPER called without request 03:39:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:39:08 executing program 1: 03:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800ac111400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1825.649167][ C1] net_ratelimit: 18 callbacks suppressed [ 1825.649175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1825.660757][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x15e, 0x1f000000) 03:39:08 executing program 3: [ 1825.806141][T17925] binder: 17921:17925 ERROR: BC_REGISTER_LOOPER called without request [ 1826.289162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.294973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.300844][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.306593][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.323964][T17939] binder: BINDER_SET_CONTEXT_MGR already set [ 1826.326568][T17940] binder: 17902:17940 ERROR: BC_REGISTER_LOOPER called without request 03:39:09 executing program 1: 03:39:09 executing program 3: 03:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800003f1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000df36)}) 03:39:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x48012, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000002c0)=0x200, 0xfffffffffffffead) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000dfac), 0x97, 0x0, &(0x7f0000000180)="984c4004afbfa83e815ee6d6189e7c1fe8e0704ffedc5e4ba4d192446d14912ad6516ee44df82aaf536e673b6f9cd73d548ffaff35cbd81fcbf35573c723b64c458174a7201fefd4d46ae26f6b5d74ed6e5eeb97eee1463ea8c3230942ba92a7bd53040c26cefb77f48359aedb7c9ce1e924c18c9f25b0b80d8fc026740894e180e2473c3829ec7eb0e885ef6a4866a59f3676176a2f00"}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) fcntl$setsig(r0, 0xa, 0x3c) 03:39:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x15f, 0x1f000000) [ 1826.336698][T17939] binder: 17902:17939 ioctl 40046207 0 returned -16 [ 1826.369078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.374822][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:09 executing program 1: 03:39:09 executing program 3: [ 1826.461159][T17949] binder: 17944:17949 ERROR: BC_REGISTER_LOOPER called without request 03:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000601400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1826.550515][T17951] binder: 17950:17951 ERROR: BC_REGISTER_LOOPER called without request 03:39:09 executing program 3: 03:39:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000df36)}) 03:39:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = dup2(r1, r0) connect$bt_sco(r2, &(0x7f0000000140), 0x8) 03:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480011ac1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x160, 0x1f000000) 03:39:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000001, 0x2) 03:39:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r0, r1) [ 1826.839982][T17976] binder: 17971:17976 ERROR: BC_REGISTER_LOOPER called without request [ 1826.850210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.856066][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.295846][T17991] binder: BINDER_SET_CONTEXT_MGR already set [ 1827.301885][T17991] binder: 17950:17991 ioctl 40046207 0 returned -16 03:39:10 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) tkill(r2, 0x29) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x427, 0x80000001, 0x5, 0x2, 0x0, 0x7f, 0x1, 0x8, 0x3, 0xffff, 0x5}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000ec01400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:10 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) preadv(r1, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/203, 0xcb}], 0x1, 0x0) 03:39:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000df36)}) 03:39:10 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x40000007ffffffc) 03:39:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x161, 0x1f000000) 03:39:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000f01400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:39:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000020000190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x162, 0x1f000000) 03:39:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000000f00190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1828.246699][T18038] binder: BINDER_SET_CONTEXT_MGR already set [ 1828.259955][T18038] binder: 18005:18038 ioctl 40046207 0 returned -16 03:39:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001200190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x163, 0x1f000000) 03:39:11 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b630000bb8a5ac6b6cc5bbe6ed060296e218fd41aa14942ef7693653de1779cf890cc24d1109edbe223c4a1739c646011c13d814a61d9d8b913dc9f809fed4ddd18b3eeb84e2ae4c86791afde9f1e574664c2b76ce5abe50760b81c692ca9db93e15426c1f79b53a3491b4ab2579989bf1c48fad6630118260432105f318944b6c2344cfad097df3896ac93d04a8c0313ee3adfd54a039e39f2ba077670492ebabacd3c03275dfec3ef000000000000000000000000"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$getenv(0x4201, r2, 0x1, &(0x7f0000000180)) accept(r0, &(0x7f00000001c0)=@rc, &(0x7f0000000240)=0x80) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:11 executing program 3 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7641bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a73987a938fdedfce7bbba4fec2d8a09c41fb23326079ec15ef2818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='we43t7ood\x00x\xa44\x15\xc5\xab&A\x9d\xc5\xf87}\x0fL\x10\x15\x93\x18\x99\x9e\x1a,\xf1\xef\x1c\x8c\xd0zQ\x16Y\x1cOj\xear\xa4Z\x92\xea4\x9e\xe2\xe4\xd9\x86\x9a\x11$3\xf5|\xd9p\x03\xf0H\x95\x02@_w\x8d\xfd\xd6\x86l\xa0\x9cM}A\xa4#\xe9\xd9Y\xb9\x13\xf2\xa1\xe5\xd9Q)\xb5\xac\xeb&\x00@\xb0\x1d\r\xcd\xf6', 0xffbf) recvmsg(r0, &(0x7f0000000240)={0x0, 0x80fd000000000000, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) getpgid(r1) 03:39:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001300190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x164, 0x1f000000) [ 1828.409875][T18052] binder: 18049:18052 ioctl c0306201 20008fd0 returned -14 03:39:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000021400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x165, 0x1f000000) 03:39:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000041400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x166, 0x1f000000) 03:39:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000081400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000a1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1829.150074][T18045] FAULT_INJECTION: forcing a failure. [ 1829.150074][T18045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1829.163573][T18045] CPU: 1 PID: 18045 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1829.172505][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1829.182554][T18045] Call Trace: [ 1829.185870][T18045] dump_stack+0x1db/0x2d0 [ 1829.190207][T18045] ? dump_stack_print_info.cold+0x20/0x20 [ 1829.195926][T18045] ? __unlock_page_memcg+0x53/0x100 [ 1829.201139][T18045] ? find_held_lock+0x35/0x120 [ 1829.205919][T18045] should_fail.cold+0xa/0x14 [ 1829.209539][T18094] binder_alloc: binder_alloc_mmap_handler: 18049 20000000-20002000 already mapped failed -16 [ 1829.210552][T18045] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1829.210567][T18045] ? lock_downgrade+0xbe0/0xbe0 [ 1829.210584][T18045] ? kasan_check_read+0x11/0x20 [ 1829.210601][T18045] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1829.210622][T18045] ? rcu_read_unlock_special+0x380/0x380 [ 1829.228445][T18059] binder: BINDER_SET_CONTEXT_MGR already set [ 1829.231385][T18045] ? print_usage_bug+0xd0/0xd0 [ 1829.231412][T18045] should_fail_alloc_page+0x50/0x60 [ 1829.231428][T18045] __alloc_pages_nodemask+0x323/0xdc0 [ 1829.231459][T18045] ? __alloc_pages_slowpath+0x2c60/0x2c60 [ 1829.231475][T18045] ? print_usage_bug+0xd0/0xd0 [ 1829.231498][T18045] ? kasan_check_read+0x11/0x20 [ 1829.231520][T18045] ? page_mapcount+0x397/0x5b0 [ 1829.237740][T18094] binder: 18049:18094 ioctl c0306201 20008fd0 returned -14 [ 1829.242315][T18045] ? fault_around_bytes_set+0xa0/0xa0 [ 1829.242331][T18045] ? kasan_check_write+0x14/0x20 [ 1829.242346][T18045] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1829.242369][T18045] alloc_pages_current+0x107/0x210 [ 1829.242387][T18045] __get_free_pages+0xc/0x40 [ 1829.242401][T18045] __tlb_remove_page_size+0x2ee/0x510 [ 1829.242421][T18045] unmap_page_range+0xf45/0x25a0 [ 1829.242467][T18045] ? vm_normal_page_pmd+0x400/0x400 [ 1829.242482][T18045] ? __kernel_text_address+0xd/0x40 [ 1829.242506][T18045] ? unwind_get_return_address+0x61/0xa0 [ 1829.256452][T18059] binder: 18049:18059 ioctl 40046207 0 returned -16 [ 1829.258862][T18045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.258880][T18045] ? uprobe_munmap+0x141/0x430 [ 1829.258899][T18045] ? uprobe_mmap+0x1190/0x1190 [ 1829.258911][T18045] ? do_group_exit+0x177/0x430 [ 1829.258942][T18045] ? get_signal+0x8b4/0x19b0 [ 1829.380762][T18045] ? do_signal+0x91/0x1ea0 [ 1829.385179][T18045] ? do_syscall_64+0x696/0x800 [ 1829.389953][T18045] ? trace_hardirqs_off+0xb8/0x310 [ 1829.395060][T18045] ? kasan_check_read+0x11/0x20 [ 1829.400429][T18045] unmap_single_vma+0x19d/0x300 [ 1829.405288][T18045] unmap_vmas+0x1a8/0x350 [ 1829.409614][T18045] ? zap_vma_ptes+0x110/0x110 [ 1829.414298][T18045] ? kasan_check_write+0x14/0x20 [ 1829.419238][T18045] exit_mmap+0x2d4/0x5d0 [ 1829.423476][T18045] ? __ia32_sys_munmap+0x80/0x80 [ 1829.428411][T18045] ? __khugepaged_exit+0x42e/0x630 [ 1829.433535][T18045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.439773][T18045] ? __might_sleep+0x95/0x190 [ 1829.444457][T18045] mmput+0x240/0x640 [ 1829.448346][T18045] ? is_current_pgrp_orphaned+0xa0/0xa0 [ 1829.453892][T18045] ? set_mm_exe_file+0x200/0x200 [ 1829.458822][T18045] ? do_raw_spin_unlock+0xa0/0x330 [ 1829.463936][T18045] ? up_read+0x212/0x2b0 [ 1829.468179][T18045] ? do_raw_spin_trylock+0x270/0x270 [ 1829.473509][T18045] ? __down_interruptible+0x740/0x740 [ 1829.478875][T18045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.485115][T18045] do_exit+0x9d4/0x2af0 [ 1829.489268][T18045] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1829.495560][T18045] ? mm_update_next_owner+0x970/0x970 [ 1829.500924][T18045] ? trace_hardirqs_on+0xbd/0x310 [ 1829.505968][T18045] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1829.511968][T18045] ? call_rcu+0xb/0x10 [ 1829.516037][T18045] ? trace_hardirqs_off_caller+0x300/0x300 [ 1829.521854][T18045] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1829.528095][T18045] ? mark_held_locks+0x100/0x100 [ 1829.533031][T18045] ? kzfree+0x29/0x30 [ 1829.537014][T18045] ? add_lock_to_list.isra.0+0x450/0x450 [ 1829.542671][T18045] ? kzfree+0x29/0x30 [ 1829.546653][T18045] ? apparmor_file_free_security+0x12e/0x1a0 [ 1829.552638][T18045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.558880][T18045] ? check_preemption_disabled+0x48/0x290 [ 1829.564586][T18045] ? apparmor_task_getsecid+0xd0/0xd0 [ 1829.569957][T18045] ? task_work_run+0x1bb/0x2b0 [ 1829.574718][T18045] ? find_held_lock+0x35/0x120 [ 1829.579479][T18045] ? add_lock_to_list.isra.0+0x450/0x450 [ 1829.585124][T18045] ? memset+0x32/0x40 [ 1829.589102][T18045] ? __dequeue_signal+0xeb/0x730 [ 1829.594030][T18045] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1829.599311][T18045] ? get_signal+0x963/0x19b0 [ 1829.603909][T18045] ? find_held_lock+0x35/0x120 [ 1829.608691][T18045] ? get_signal+0x963/0x19b0 [ 1829.613286][T18045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.619524][T18045] ? _raw_spin_unlock_irq+0x28/0x90 [ 1829.624713][T18045] ? _raw_spin_unlock_irq+0x28/0x90 [ 1829.629940][T18045] do_group_exit+0x177/0x430 [ 1829.634552][T18045] ? trace_hardirqs_off_caller+0x300/0x300 [ 1829.640344][T18045] ? __ia32_sys_exit+0x50/0x50 [ 1829.645119][T18045] get_signal+0x8b4/0x19b0 [ 1829.649541][T18045] ? ptrace_notify+0x130/0x130 [ 1829.654347][T18045] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1829.659807][T18045] ? retint_kernel+0x2d/0x2d [ 1829.664429][T18045] do_signal+0x91/0x1ea0 [ 1829.668674][T18045] ? do_vfs_ioctl+0x9e/0x17d0 [ 1829.673353][T18045] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 1829.679585][T18045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.685816][T18045] ? do_vfs_ioctl+0x11e/0x17d0 [ 1829.690569][T18045] ? setup_sigcontext+0x7d0/0x7d0 [ 1829.695580][T18045] ? check_preemption_disabled+0x48/0x290 [ 1829.701303][T18045] ? exit_to_usermode_loop+0x98/0x3b0 [ 1829.706682][T18045] ? exit_to_usermode_loop+0x98/0x3b0 [ 1829.712042][T18045] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1829.717336][T18045] ? trace_hardirqs_off_caller+0x300/0x300 [ 1829.723137][T18045] ? cpumask_weight.constprop.0+0x3f/0x3f [ 1829.728844][T18045] ? fput+0x128/0x1a0 [ 1829.732817][T18045] ? do_syscall_64+0x8c/0x800 [ 1829.737518][T18045] exit_to_usermode_loop+0x2f7/0x3b0 [ 1829.742812][T18045] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1829.748869][T18045] ? syscall_trace_enter+0x12a0/0x12a0 [ 1829.754316][T18045] ? ksys_ioctl+0x82/0xd0 [ 1829.758646][T18045] do_syscall_64+0x696/0x800 [ 1829.763236][T18045] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1829.768862][T18045] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1829.774598][T18045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1829.780147][T18045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1829.786048][T18045] RIP: 0033:0x457ec9 [ 1829.789945][T18045] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1829.809540][T18045] RSP: 002b:00007f076d5c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.817954][T18045] RAX: fffffffffffffe00 RBX: 00007f076d5c5c90 RCX: 0000000000457ec9 [ 1829.825971][T18045] RDX: 000000002000dfd0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1829.833942][T18045] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1829.841927][T18045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f076d5c66d4 [ 1829.849899][T18045] R13: 00000000004bf216 R14: 00000000004d0808 R15: 0000000000000005 03:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000e1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x167, 0x1f000000) 03:39:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x80400) 03:39:13 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) tkill(r2, 0x29) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x427, 0x80000001, 0x5, 0x2, 0x0, 0x7f, 0x1, 0x8, 0x3, 0xffff, 0x5}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:13 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) pipe(0x0) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1f}, &(0x7f0000000100)=0x8) r5 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) ftruncate(r5, 0x1000000) sendfile(r3, r5, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r3) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000380)=""/100) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) write$P9_RVERSION(r3, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@initdev, @in6}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000700)=0xe8) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='bpf\x00', 0x2001, &(0x7f0000000800)=ANY=[@ANYBLOB='mode=00000000000000000000002,mode=00000000000000000000010,audit,context=system_u,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66737472616e736d7574653dac002c61707072616973652c7375626a5f726f6c653d706964732e6576656e7473002c657569643e", @ANYRESDEC=r6, @ANYBLOB="240002000000"]) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000000000002, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000340)={0x6, 0x9}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x7, 0xf07}, 0x8) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x6) [ 1830.083611][T18111] binder_thread_write: 8 callbacks suppressed [ 1830.083680][T18111] binder: 18110:18111 ERROR: BC_REGISTER_LOOPER called without request [ 1830.117304][T18112] binder: 18106:18112 ERROR: BC_REGISTER_LOOPER called without request [ 1830.126071][T18116] binder: BINDER_SET_CONTEXT_MGR already set [ 1830.130202][T18118] Sensor A: ================= START STATUS ================= [ 1830.149247][T18116] binder: 18113:18116 ioctl 40046207 0 returned -16 03:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000f1400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1830.177862][T18118] Sensor A: Test Pattern: 75% Colorbar [ 1830.185221][T18116] binder: 18113:18116 ERROR: BC_REGISTER_LOOPER called without request [ 1830.197448][T18118] Sensor A: Vertical Flip: false [ 1830.212329][T18118] Sensor A: Horizontal Flip: false [ 1830.220771][T18118] Sensor A: Brightness: 128 03:39:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1830.225715][T18118] Sensor A: Contrast: 128 [ 1830.230426][T18118] Sensor A: Hue: 0 [ 1830.234432][T18118] Sensor A: Saturation: 128 [ 1830.242072][T18118] Sensor A: ================== END STATUS ================== 03:39:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x168, 0x1f000000) 03:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000101400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1830.336822][T18128] binder: 18126:18128 ERROR: BC_REGISTER_LOOPER called without request [ 1830.381584][T18128] binder: 18126:18128 ERROR: BC_REGISTER_LOOPER called without request 03:39:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000601400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x169, 0x1f000000) [ 1830.573340][T18142] binder: 18141:18142 ERROR: BC_REGISTER_LOOPER called without request 03:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1830.616909][T18142] binder: 18141:18142 ERROR: BC_REGISTER_LOOPER called without request [ 1830.736189][T18156] binder: 18155:18156 ERROR: BC_REGISTER_LOOPER called without request [ 1830.779196][T18156] binder: 18155:18156 ERROR: BC_REGISTER_LOOPER called without request [ 1830.877205][T18120] binder: 18113:18120 ERROR: BC_REGISTER_LOOPER called without request [ 1830.877787][T18162] Sensor A: ================= START STATUS ================= [ 1830.908571][T18162] Sensor A: Test Pattern: 75% Colorbar [ 1830.915735][T18162] Sensor A: Vertical Flip: false 03:39:14 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x0, 0x9296, 0x100}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xdbd7, 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x3, 0x2, 0x1000, 0x3, 0x80000001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000022300190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x16a, 0x1f000000) 03:39:14 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) tkill(r2, 0x29) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x427, 0x80000001, 0x5, 0x2, 0x0, 0x7f, 0x1, 0x8, 0x3, 0xffff, 0x5}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:14 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @multicast1}, 0xfffffd2a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) syz_emit_ethernet(0x3de, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr=0xac14140d, @multicast1}, @dccp={{0x4e22, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) [ 1830.923049][T18162] Sensor A: Horizontal Flip: false [ 1830.933227][T18162] Sensor A: Brightness: 128 [ 1830.938283][T18162] Sensor A: Contrast: 128 [ 1830.943315][T18162] Sensor A: Hue: 0 [ 1830.948019][T18162] Sensor A: Saturation: 128 [ 1830.953020][T18162] Sensor A: ================== END STATUS ================== [ 1831.009115][ C1] net_ratelimit: 22 callbacks suppressed [ 1831.009123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.020604][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x200000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xeb, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=""/235}, &(0x7f0000000240)=0x78) r1 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000000000003e, &(0x7f0000000180)=0x1004, 0x4) [ 1831.132534][T18179] binder: 18177:18179 ioctl c0145401 20000140 returned -22 [ 1831.161875][T18183] binder: BINDER_SET_CONTEXT_MGR already set [ 1831.168024][T18183] binder: 18178:18183 ioctl 40046207 0 returned -16 03:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000004000190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x16b, 0x1f000000) [ 1831.179159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.185001][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000ec000190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0xfffffffffffffc85, 0x5, 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x600000000000000, [], [0xc2]}) [ 1831.880093][T18215] binder: BINDER_SET_CONTEXT_MGR already set [ 1831.886133][T18215] binder: 18177:18215 ioctl 40046207 0 returned -16 [ 1831.892875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.892951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1831.905652][T18189] binder: 18177:18189 ioctl c0145401 20000140 returned -22 03:39:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x311000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @rand_addr=0x9}, @in={0x2, 0x4e24, @rand_addr=0x5}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r3, 0xbea}, 0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x16c, 0x1f000000) 03:39:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000000f00190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="b93c564b7421679a3485647fe967000000", 0xfffffffffffffcf3) 03:39:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @loopback}}, 0x1e) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x7}, 0x18) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x4}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0x50, &(0x7f0000000180)}, 0x10) r2 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{0x3, 0x7, 0x0, 0x5, 'syz0\x00', 0x9}, 0x6, 0x10000000, 0x8000, r2, 0x5, 0xf5e, 'syz0\x00', &(0x7f0000000240)=['/dev/snd/pcmC#D#c\x00', '\x00', '/dev/snd/pcmC#D#c\x00', '%nodev-\x00', '/dev/sequencer2\x00'], 0x3d, [], [0x90, 0xffff, 0x6, 0xffffffff]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000003c0)) prctl$PR_SET_SECUREBITS(0x1c, 0x24) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x6, [0x6, 0x6, 0x10001, 0xfffffffffffffffa, 0x100000000000000, 0xeb]}, &(0x7f0000000440)=0x10) read$FUSE(r0, &(0x7f0000000480), 0x1000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000001480)) connect$llc(r0, &(0x7f00000014c0)={0x1a, 0x303, 0x3, 0x2, 0x3cca, 0x0, @local}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001580)={0xa30000, 0x8e, 0x5, [], &(0x7f0000001540)={0x990968, 0x7ff, [], @p_u32=&(0x7f0000001500)=0x2}}) mount(&(0x7f00000015c0)=@nullb='/dev/nullb0\x00', &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='cgroup2\x00', 0x902870, &(0x7f0000001680)='syz0\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x424, 0x3, 0x0, 0x4, 0x8, 0xfffffffffffffffb}, 0x20) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001700), &(0x7f0000001740)=0x4) r3 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001780)=""/137) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001840)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000001880)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000018c0)) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x25fb) 03:39:15 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, &(0x7f0000000000)=0x100) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) 03:39:15 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendto$unix(r0, &(0x7f0000000280)="e7cf79b2d74c6dbe268d5074c5ef021655ed170031caf2f6fe1b165fc9d8797247fe6d1f2cdf0f9dc5849a3716df1bb1527ef189889005aec3d2a5d9778c8b0124e488d356ec88c18fe22747f66fdd23e4f4bfacf8f8311c528ba1a989cc6def0ce4ebd22cb1408eda1e7a901d03c00bcae1a71690b50c2eaaa2a315a445ae3e1355", 0x82, 0x20040000, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40090) 03:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001200190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="0adc1f023c12473188a070") prctl$PR_CAPBSET_DROP(0x18, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000340)=0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, 0x8) socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000003c0)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x401, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0xfff, 0x6ea6, 0x0, 0x0, 0x2, 0x1380000000000000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0xa00005, 0x0) umount2(0x0, 0x0) clone(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000001580)="fe8000a7d1207ec1e03c254c2dbbba25dd00299d12580e0fe90fe37793da9bf1e3334892f2116217b214a45669be870ae1bb4cac7a40a82a90326c0127ff2c4aa93b640996fd64a7ed57c74e02376290278e7d80e7baa4ef6b715c4b22671fe91f12698ab120c0455e5314b46878999144ebed7e433a7ed2857908d16013c026ad7e310633372ce65bdfc32dfbe88883850ab736c62edc675579d7129671724cf7a28ef7cb3dc10bb069d25f6f9124037371b91c7aa06671a9ab0036755cb9c062aae7b346508f2dbc4cdb98cf1b26ad596b5a4a067d6919") mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB=',\x00']) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000380), 0x1) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000200)) 03:39:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x16d, 0x1f000000) [ 1832.529096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.534994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1832.540857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.546632][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001300190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:15 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}) r0 = socket(0x11, 0x80002, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) prctl$PR_GET_NO_NEW_PRIVS(0x27) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x6) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200, 0x0) 03:39:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x20}, 0x492) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x16e, 0x1f000000) 03:39:15 executing program 5: r0 = dup(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) write$apparmor_current(r3, &(0x7f00000003c0)=@hat={'changehat ', 0x1, 0x5e, ['threaded\x00', 'vcan0\x00', 'wlan1cpusetvmnet0*\x00', 'syz_tun\x00', 'keyring\x00', '#\x00', 'syz_tun\x00']}, 0x59) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="772bd951b7bc495473658a779a6d300300000000000000a1e45d9ef827505e14829bad89dbcfe90e0293f63bcc9e31c3aab29d08b802b14ee3ccc3c6d7e2d4a884cf8b1f0a5e243dea5385e7b743be0c590f33c87750b21baa5ff3b80f70f25676f63f503039052c1251f7eb19384f577dd8347e0008ef7ea55a3a00642dbf71c5e625bfb487e7942ff591706a1c0e3e90"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @broadcast}, 0x282, 0x0, 0x0, 0x46a, 0x8, 0x0, 0x1000, 0x0, 0x3}) sendmmsg(r2, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x12, r4) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) creat(&(0x7f0000000380)='./file0\x00', 0x800000000000000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0x1c3968b2) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) [ 1832.837307][T18274] binder: BINDER_SET_CONTEXT_MGR already set [ 1832.844311][T18274] binder: 18228:18274 ioctl 40046207 0 returned -16 [ 1832.915855][T18281] binder: BINDER_SET_CONTEXT_MGR already set [ 1832.945693][T18281] binder: 18280:18281 ioctl 40046207 2000dfd0 returned -16 03:39:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x16f, 0x1f000000) 03:39:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x170, 0x1f000000) 03:39:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x171, 0x1f000000) 03:39:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1833.744503][T18331] binder: BINDER_SET_CONTEXT_MGR already set [ 1833.750756][T18331] binder: 18287:18331 ioctl 40046207 0 returned -16 03:39:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0xfffffffffffffe24) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003ec0)=[{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000001701000003000000499401000000be00"], 0x18}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x22) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18}], 0x18}], 0x4924944, 0x0) 03:39:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x172, 0x1f000000) 03:39:17 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair(0x2, 0x80003, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xfffffffffffff001, 0x4) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) uselib(&(0x7f0000000140)='./file1\x00') mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2f}) 03:39:17 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000580)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x5, 0x5}, {0x0, 0x1}], r3}, 0x18, 0x2) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x200, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000340)={0x1, [0x0]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000300)=@buf={0xa9, &(0x7f0000000240)="6afdcd344f7188a70286830152b6a3e41fe7247ad8f5c86c74107df1718316c58a00308addf9e1a3e83eef8bd392e2bff97a64549504d36f94c14290681351a2a54a79c599bd4f9aa91a00d7137ef4d5017bfff0cfe92d94f39ba726de17cfbd2dc709e2ff240d31ae0155068de97c5040b2219cb4ac7b58d039182d1e8c34d09a43e17ad09b89ef3575cfb120e12a9502f240fa4ace73dcc1a81e97a708488aa6298d8af433303bfe"}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r6, 0x4) 03:39:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000002302190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000c00e190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:17 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x20000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)={&(0x7f00000001c0)='./file0\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) write$binfmt_aout(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xae9) read(r3, &(0x7f00000000c0)=""/85, 0x321) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000025, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x1d) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000840)={0x0, 0x6}, &(0x7f0000000880)=0x8) r5 = shmget$private(0x0, 0x1000, 0x54000020, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000007c0)=@assoc_id=r4, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f00000003c0)=""/179, 0xb3}}, 0x10) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000000)) write$smack_current(r3, &(0x7f00000004c0)='*vmnet1\x00', 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) prctl$PR_SET_TSC(0x1a, 0x3) 03:39:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x173, 0x1f000000) 03:39:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x330, @empty, 0x6}, @in6={0xa, 0x4e22, 0x2}, @in6={0xa, 0x4e23, 0x74d6c9b, @local, 0x80}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x12}, 0x8}, @in6={0xa, 0x4e20, 0x16, @mcast1, 0x800}, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0xe09f, @mcast2}, @in6={0xa, 0x4e24, 0x8001, @mcast2, 0x2}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, &(0x7f0000000240)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x80086601) 03:39:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001402000d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x174, 0x1f000000) 03:39:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001402190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) [ 1835.094698][T18396] binder_thread_write: 31 callbacks suppressed [ 1835.094745][T18396] binder: 18394:18396 ERROR: BC_REGISTER_LOOPER called without request [ 1835.121111][T18396] binder: 18394:18396 ioctl c018620c 2000dfd0 returned -1 [ 1835.178167][T18396] binder: 18394:18396 ERROR: BC_REGISTER_LOOPER called without request 03:39:18 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") getgid() r2 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x7e, 0x10000) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000440)={&(0x7f0000000000/0x3000)=nil, 0x7, 0x1, 0x5a, &(0x7f0000ff9000/0x4000)=nil, 0x3}) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) fchmod(r0, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7fffffff, 0x4000) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000002c0)) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28542d5bdeebbf4513990204244e5607de50be4c271eb464b078428ac7a1c64c60e8802cae12ca93ce9710a113e3f8e948ce53c2bfaa481273a58a806d121798c03b7c3cad845c67ce145feb10d12975287f4ba1783bd5a87726fa0fd6545929f795a84d08df702f19a185a2b2210889324a887d2c50d43f7a511e50f56776d8d435297b98edac839d7e3b61525999e07c98c2d6b64de6a18db13e990dad4417acec9784b98b93fa98b45bc77ecb760b03bfd7c738da65"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x3, 0x22, 0xa, 0xd, 0xb, 0x5, 0x1, 0xa, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000200)) 03:39:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) sendfile(r0, r1, &(0x7f0000000480), 0x200) r3 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000500)={{0x0, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x0, 'ovf\x00', 0x20, 0x80000000, 0x3}, {@loopback, 0x4e22, 0x2003, 0x9, 0x2, 0xffffffffffffffff}}, 0x44) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r3, 0x0, 0x0, &(0x7f00000001c0)='^\x00', 0xffffffffffffffff}, 0x25f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffff9c, 0x0, 0xc4, &(0x7f0000000000)='GPL#\x00', r4}, 0xe) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x400040) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000003c0)={@empty, @multicast2, 0x0}, &(0x7f0000000400)=0xc) recvfrom$packet(r3, &(0x7f0000000180)=""/57, 0x39, 0x40000000, &(0x7f0000000580)={0x11, 0x18, r6, 0x1, 0x2}, 0x14) r7 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x4000) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000040)=@int=0xd3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000002740)={{{@in=@dev, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000002840)=0xe8) r9 = dup2(r3, r0) r10 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000600)={0x3, 0x0, 0x2080, {0x7005, 0x2, 0x1}, [], "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", "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"}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000440)={0x0, 0xffff}, &(0x7f0000002680)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000026c0)={r11, 0x1}, &(0x7f0000002700)=0x2bf) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0xfffffffffffffffb) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x82110, r5, 0x0) membarrier(0x40, 0x0) 03:39:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001404190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1835.303261][T18406] binder: BINDER_SET_CONTEXT_MGR already set [ 1835.309436][T18406] binder: 18341:18406 ioctl 40046207 0 returned -16 [ 1835.317215][T18357] binder: 18341:18357 ERROR: BC_REGISTER_LOOPER called without request [ 1835.385743][T18414] binder: 18410:18414 ERROR: BC_REGISTER_LOOPER called without request [ 1835.420732][T18417] binder: 18410:18417 ERROR: BC_REGISTER_LOOPER called without request [ 1835.461116][T18416] binder: 18415:18416 ioctl c0306201 20008fd0 returned -14 [ 1835.530309][T18416] binder: BINDER_SET_CONTEXT_MGR already set [ 1835.537157][T18416] binder: 18415:18416 ioctl 40046207 0 returned -16 [ 1835.553583][T18416] binder: 18415:18416 ioctl c0306201 20008fd0 returned -14 03:39:18 executing program 1: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000280)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) semget$private(0x0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200000000007ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, &(0x7f0000000200)=0xffffffffffffff9f) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0x151) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000001640)={0x1d, r8}, 0x10) setsockopt(r7, 0x65, 0x1, &(0x7f0000000040)="92a88ed40ca365e96b138d573ae703afe0680a8d7ef762f39fd5f790ffffffdf137dc737f5953735c9e86297d2a3cbc679e5a12ea1e14a8b68f6cdcd62e119311b04ba5e0effc1dd46fbba8099ea73aa23f5de9a0523e61fafb03fe7682d9ce61c0450032e369ce18a7ea3bd10e75a4efdecd23143c9bd8d", 0x78) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40800000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000440)=""/62) keyctl$assume_authority(0x10, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) 03:39:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x175, 0x1f000000) 03:39:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001408190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) getresuid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f0000000440)=[{&(0x7f00000000c0)="fcf346e2bc84f4855ed1501298734dec37e9760ce01b0c88578593a8e1d94a1aa3e259a277b0c5e2c1cc7f6c50ced7bb4781fbebc4475a3aedcc95e4315acc1d5570d5f920619ce14bddcee4c67be5f28fb1ca1514a759cbd9b354a02d6b756bd9fd7f98f27ee6cca4bbd6d93174dcd9655c4228c729ae6a045756601bfa37b70fd2259ad3db93e935f598d044150153b310c34012e5ffd2f8065eec0c96a86651114c0d18e43ffa775a370aa6756fda07d08ebf9e7f47fb72d24e53c76c5e15763929f45492462329744ac5725576fb95ae005dac95a113e5149ecdd77844f72ad0bfee7978b5de9b5ec9bcfb558f1db0d110c9110f1c9aff", 0xf9, 0x1000}, {&(0x7f00000001c0)="6a5a21241b681fb7fd9a2a84a4938274be259f6bbec7bd8ce357661d8a53649d4b2f317c55327913764e4bcb34a603a65768e4e2c0319b0482817366dec169312c8706446a7a9986e1f4a0a01d8f8e3eed8a289db4fd3b803aec7fdad3f791f618d7462bda6a32061e4165aa23bf1d3f511efd2bddb6710c095006184f85a51b6da3db3e38d343a7ed156a9477090f1952adbf35b71edcccb6146166070427105ced541fd24deb40778d14ddc379c4abd78b2a2981ec0658adb2815577337d28aae1dfb84d20633a0ccc", 0xca, 0x3}, {&(0x7f00000002c0)="d7fd22fea47201efd7a4a2e1d05bd66a7f5cf0ebaeef00009dbc7d5f2699675a846d8a34ec76f00acbee3ae18c91496b5e10cddaadb123c705", 0x39, 0x7}, {&(0x7f0000000300)="ec56684296c292a4a2951c32fc9e1f8d70d6525c7d0bcfd6621162f2bd967c3e003e34f8a3c07cb2cdc2b316278907f5789228e6707b584df2d45f17cb20077c920fbd7400c026a6c5aff8991982d420aa0f1d2212ce8b93d25fcdc60be00703f9f252b431f0c5af001aafc4c6a277e1c8cec30d9f83f0795a1eddd39606a10632ea367825a0d98c1e7036b1cd7ae412730f5b1703fbabb17c90475997b5f1267194adeaab0040e0a5f989489c774343ca0911f526a8dd32df27", 0xba, 0x7}, {&(0x7f00000003c0)="0b8d225177ba9a27c7ea330f5e3c690cb2900b34990ad134eca6f594e11f177c655cc3e4b44eec0d3365e3b138e5757269ad85ab47aefbb1405e15e85c1f0909de58c84c7f00768f7276d37e3b32760f7e9c8c6c0a0d5716f70c18c7ab9f7d3a0578654291aa9caddb55591c8d556bb878", 0x71, 0xfffffffffffffffc}], 0x400, &(0x7f00000006c0)={[{@nodiscard='nodiscard'}, {@gqnoenforce='gqnoenforce'}, {@noattr2='noattr2'}, {@uquota='uquota'}, {@ikeep='ikeep'}, {@uquota='uquota'}, {@pqnoenforce='pqnoenforce'}, {@noalign='noalign'}, {@quota='quota'}, {@qnoenforce='qnoenforce'}], [{@audit='audit'}, {@uid_eq={'uid', 0x3d, r1}}, {@smackfshat={'smackfshat', 0x3d, '\\'}}, {@subj_role={'subj_role', 0x3d, 'fnodev,#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#vmnet1'}}, {@permit_directio='permit_directio'}, {@euid_eq={'euid', 0x3d, r2}}]}) vmsplice(r0, 0x0, 0xfffffffffffffeec, 0x8000) 03:39:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@buf={0x37, &(0x7f00000000c0)="634afbfa3960afbb9dd91e899ff09d53e7041695187ff8824cc008665286f1711b7902eda85d6676032916b0caefbed3f1214796c7c65e"}) [ 1835.770915][T18431] binder: 18427:18431 ERROR: BC_REGISTER_LOOPER called without request 03:39:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000140a190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1835.822356][T18431] binder: 18427:18431 ERROR: BC_REGISTER_LOOPER called without request 03:39:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x1000000, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:19 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6000000]}}) connect$l2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4}}, 0xffffffffffffffc2) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) io_setup(0x81, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080), 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xe}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f0000000080)}, 0x10) r3 = socket$kcm(0xa, 0x200000002, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000080), 0x301) [ 1835.945148][T18445] binder: 18440:18445 ERROR: BC_REGISTER_LOOPER called without request [ 1836.044913][T18457] binder: 18456:18457 ERROR: BC_REGISTER_LOOPER called without request [ 1836.049896][ C1] net_ratelimit: 18 callbacks suppressed [ 1836.049904][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.060015][T18457] binder: 18456:18457 ioctl c0306201 2000dfd0 returned -14 [ 1836.065562][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.087042][T18457] binder: 18456:18457 ERROR: BC_REGISTER_LOOPER called without request 03:39:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x176, 0x1f000000) 03:39:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0xfdfdffff, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000140e190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1836.245135][T18466] binder: 18465:18466 ioctl c0306201 2000dfd0 returned -14 03:39:19 executing program 1: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000280)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) semget$private(0x0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200000000007ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, &(0x7f0000000200)=0xffffffffffffff9f) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0x151) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000001640)={0x1d, r8}, 0x10) setsockopt(r7, 0x65, 0x1, &(0x7f0000000040)="92a88ed40ca365e96b138d573ae703afe0680a8d7ef762f39fd5f790ffffffdf137dc737f5953735c9e86297d2a3cbc679e5a12ea1e14a8b68f6cdcd62e119311b04ba5e0effc1dd46fbba8099ea73aa23f5de9a0523e61fafb03fe7682d9ce61c0450032e369ce18a7ea3bd10e75a4efdecd23143c9bd8d", 0x78) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40800000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000440)=""/62) keyctl$assume_authority(0x10, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) 03:39:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x177, 0x1f000000) 03:39:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0xfffffdfd, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000140f190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1836.458429][T18483] binder: 18482:18483 ioctl c0306201 2000dfd0 returned -14 03:39:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x178, 0x1f000000) [ 1836.673767][T18495] binder: BINDER_SET_CONTEXT_MGR already set [ 1836.684234][T18495] binder: 18440:18495 ioctl 40046207 0 returned -16 [ 1836.691147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.691224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.691334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.691383][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:19 executing program 1: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000280)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) semget$private(0x0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200000000007ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00bc080000006f7c388c5c9f1b372f7a085d878df3f85a0f0699b9cb9e1d24f45265499347e31612e80a971034903c3ffe94003ec2f34669e42c8bf518a55c923bd83428b19f14fa0ad3744822b7dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1eb4870900000000000000eb4b24a052e2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b19482ccbab150760201efd890e96e8eb1cc5fcd404d6ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714c762b8cd84636c468988df22619e2c2a30000000c5032f9e0e7c8d946406fc4570d991920000a1d3063a06f238837511b06710cc9e9d0294b16f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb9e4b0803c5c60b5c247c00ae191f093a6ae9b4c803351b9a3855064f9aac77251d4e4d1af3580c11f63e235a968320e0000ea12d1e7ba6a7ae7d12b2c7881457f003ffc94"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, &(0x7f0000000200)=0xffffffffffffff9f) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0x151) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000001640)={0x1d, r8}, 0x10) setsockopt(r7, 0x65, 0x1, &(0x7f0000000040)="92a88ed40ca365e96b138d573ae703afe0680a8d7ef762f39fd5f790ffffffdf137dc737f5953735c9e86297d2a3cbc679e5a12ea1e14a8b68f6cdcd62e119311b04ba5e0effc1dd46fbba8099ea73aa23f5de9a0523e61fafb03fe7682d9ce61c0450032e369ce18a7ea3bd10e75a4efdecd23143c9bd8d", 0x78) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40800000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000440)=""/62) keyctl$assume_authority(0x10, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) 03:39:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1150482fb90e8e7d24fcc633242840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x100000000000000, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001410190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:19 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@default, @bcast, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xa7, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xff0d, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002500e14bf65ae087185082cf04250300a06ec43f0016914879008cd9008000303c23", 0x30}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000009c0)=0x1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast2}}}, 0xf37, 0xffffffffffffff00, 0xf02, 0x40, 0x18}, &(0x7f00000008c0)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000980)=@assoc_value={r3, 0x3}, 0x8) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f00000001c0)="5c0f709f9bea9a8b03f4617c07b89192110701e9c12b782c868ccd2a0b7202e94d750974327d40ff6dfae4fbb8d9dc749e161fda2bf12655429247592a3b7bf384e7dad843ade089840d5427e904de621064f8e1d4625b7509b6aa55159b7d56375077b807f9c2e8265c5f56ed7b502a3c1bb2d012724befaf7514f45ce1a7b7a7e72b75696eeb45a9f834d7aee276dfcf637272ee91ff7002f1f8454dd8c8c04444c439caeb5571", 0xa8, 0x6}, {&(0x7f00000002c0)="48142c117d5732d628de1808f6fe1d6f1ef291c7bcbf50a008e3621f9bf614e3ebddbd90310403874b57ad0c4c16ca0de977ff2f4e632869023e8584403b6e0c6f263a24f9835a6eab93b2ccb079f48c5f0fcbaea01987e3aaef05d2d589329356eb9fd97ab19111426835d488da3795215362790d76e47df0e621b394143e816126b681bc043eb1da0a3f2ed1a2ae6ebd93b5938436efd5dba32e9f7bbf0eecb3d9f95a4385c8", 0xa7, 0x8}, {&(0x7f0000000380)="feed3b821a6ed73a9dafdb7580461ccbe81ab988ae5ff6559465cdf67d7257620643fccab956b84878b4dd9a4b22f04ab6fe340d12a0a4697b02eecfe2a757287fa96f7aa06afb21b277ee153f498cc09b8e5e4aa7e27b65f07f0d2ff82391d1b175358a0eeb274b3b1275dac211f7e11f48184a29c63d04447ee56ff75deaea4cdc51e5bd83", 0x86, 0xffffffffffff8fc2}, {&(0x7f0000000440)="d51ca00ca6a315", 0x7, 0xef0}], 0x1, &(0x7f0000000640)={[{@utf8='utf8=1'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_winnt='shortname=winnt'}, {@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}], [{@uid_gt={'uid>', r2}}, {@appraise='appraise'}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000006c0)={0x0, 0xfffffffffffffc00}, &(0x7f0000000700)=0x8) ioctl$PPPIOCDISCONN(r0, 0x7439) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x9, 0x2, 0x0, 0xff, 0x10000, 0x401, 0x81, 0x1, r4}, &(0x7f0000000780)=0x20) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000007c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 1836.769085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.774902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.853171][T18504] binder: 18500:18504 ioctl c0306201 2000dfd0 returned -14 03:39:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x179, 0x1f000000) 03:39:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001460190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1836.910034][T18504] binder: 18500:18504 ioctl c0306201 2000dfd0 returned -14 03:39:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0xfdfdffff00000000, 0x0, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:20 executing program 1: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000280)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) semget$private(0x0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200000000007ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, &(0x7f0000000200)=0xffffffffffffff9f) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0x151) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000001640)={0x1d, r8}, 0x10) setsockopt(r7, 0x65, 0x1, &(0x7f0000000040)="92a88ed40ca365e96b138d573ae703afe0680a8d7ef762f39fd5f790ffffffdf137dc737f5953735c9e86297d2a3cbc679e5a12ea1e14a8b68f6cdcd62e119311b04ba5e0effc1dd46fbba8099ea73aa23f5de9a0523e61fafb03fe7682d9ce61c0450032e369ce18a7ea3bd10e75a4efdecd23143c9bd8d", 0x78) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40800000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000440)=""/62) keyctl$assume_authority(0x10, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) 03:39:20 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@default, @bcast, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xa7, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xff0d, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002500e14bf65ae087185082cf04250300a06ec43f0016914879008cd9008000303c23", 0x30}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000009c0)=0x1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast2}}}, 0xf37, 0xffffffffffffff00, 0xf02, 0x40, 0x18}, &(0x7f00000008c0)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000980)=@assoc_value={r3, 0x3}, 0x8) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f00000001c0)="5c0f709f9bea9a8b03f4617c07b89192110701e9c12b782c868ccd2a0b7202e94d750974327d40ff6dfae4fbb8d9dc749e161fda2bf12655429247592a3b7bf384e7dad843ade089840d5427e904de621064f8e1d4625b7509b6aa55159b7d56375077b807f9c2e8265c5f56ed7b502a3c1bb2d012724befaf7514f45ce1a7b7a7e72b75696eeb45a9f834d7aee276dfcf637272ee91ff7002f1f8454dd8c8c04444c439caeb5571", 0xa8, 0x6}, {&(0x7f00000002c0)="48142c117d5732d628de1808f6fe1d6f1ef291c7bcbf50a008e3621f9bf614e3ebddbd90310403874b57ad0c4c16ca0de977ff2f4e632869023e8584403b6e0c6f263a24f9835a6eab93b2ccb079f48c5f0fcbaea01987e3aaef05d2d589329356eb9fd97ab19111426835d488da3795215362790d76e47df0e621b394143e816126b681bc043eb1da0a3f2ed1a2ae6ebd93b5938436efd5dba32e9f7bbf0eecb3d9f95a4385c8", 0xa7, 0x8}, {&(0x7f0000000380)="feed3b821a6ed73a9dafdb7580461ccbe81ab988ae5ff6559465cdf67d7257620643fccab956b84878b4dd9a4b22f04ab6fe340d12a0a4697b02eecfe2a757287fa96f7aa06afb21b277ee153f498cc09b8e5e4aa7e27b65f07f0d2ff82391d1b175358a0eeb274b3b1275dac211f7e11f48184a29c63d04447ee56ff75deaea4cdc51e5bd83", 0x86, 0xffffffffffff8fc2}, {&(0x7f0000000440)="d51ca00ca6a315", 0x7, 0xef0}], 0x1, &(0x7f0000000640)={[{@utf8='utf8=1'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_winnt='shortname=winnt'}, {@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}], [{@uid_gt={'uid>', r2}}, {@appraise='appraise'}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000006c0)={0x0, 0xfffffffffffffc00}, &(0x7f0000000700)=0x8) ioctl$PPPIOCDISCONN(r0, 0x7439) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x9, 0x2, 0x0, 0xff, 0x10000, 0x401, 0x81, 0x1, r4}, &(0x7f0000000780)=0x20) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000007c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 03:39:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400400d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17a, 0x1f000000) [ 1837.229623][T18534] binder: 18530:18534 ioctl c0306201 2000dfd0 returned -14 [ 1837.249115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1837.254958][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d0c004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1837.294336][T18540] binder: 18530:18540 ioctl c0306201 2000dfd0 returned -14 03:39:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x810, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0baf1dd4630000"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='Hc', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:20 executing program 5: memfd_create(0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0x1f}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r2+10000000}) 03:39:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x1000000, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:20 executing program 1: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000140)='./bus\x00', 0x80) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000300)={0x7e9, 0x1, 0x4, 0x0, 0x8}, 0xc) syz_read_part_table(0x694, 0x7, &(0x7f0000000700)=[{&(0x7f0000000200)="3e63a49e31e344884b5b4b7a622ac361af9ead24b07fa96e68bed861e305864884f4ae00064c989c3d67295c2996be68e8a9c7659f35dc76c798195f6d7f6979c90acbc64226f6e2a2a6051d6dc9ab67a493c9bbe635ef417eb8192738ba970d798ecd7a9b199c0a96263b68ade9ee09b51268218ebf8e1c0bdc1b4eccd295698da55586edbcbfd2b982e9eef975b781e703c74c2446c6bb991d113470ef2736379d93227ec8bb827a27438da617bcc2", 0xb0}, {&(0x7f0000000380)="8186bc0f9937e9ae7ad1234cb57d24b10981478d40d5bcafb8a4e94e83c3a648acafe86829707cf49dfb09533a1dd5b8c4004ae1fd0d0e96795433f608f543d84f608e70b95eb2e8af6d6962ecd0537bd032e0", 0x53, 0x8001}, {&(0x7f0000000400)="53dd453858b9330947582e6b418dc1d79b789c2d17604c170fb8078df51063d464a29291f073f1f94bdca8cc85de6877abf5ffbdd4f31e47709ecd052d970bbff35e944b578e9837b6fb54dc48172520e91326f28f33347c5f0fcf0ea008da4ebff7338a0842e597bc73ce421e4893fc298316f48baa80c06016138b1b90f5ecfe699e83e3007e80fef68a4c37e26e0071a4111808d9a68648d5cdf89a6032fcc4840caca67101c6", 0xa8, 0x80000001}, {&(0x7f00000004c0)="f984d444908bc240d28a5b1e3c0879dced3b4426cd853bfcf3473410f2e88bae7a058c8e71769a31c3553ecb411c70c508884fae3d9cf9fa9eb95fe24b0219285e09aa6880eb2893e43e4cf41d0735341fe84b39cc6d072a013cca29", 0x5c, 0x8000}, {&(0x7f0000000540)="5ae2f659cee37e24e9bcc95f7ef07fff2c3ed31a90b2371fac680b580721f3aeecc1d115118518e40a2d01441e1b0d500b189c85bf7e43903ca9f1d7a21d96b2da139ae1beb58be6c54ad168bc955b4e0b95606596189394b7db540c90cfc7706b42c05331372bc80ff89b5f608dbb24c4e02ddf7f8d54265cbb2f246080268a059beec7a1f2f0caac2ae7a7945396c0f2cebe036cda71282dac98dd201743cdad6973980af34a2ce655581c88a1e021abd98e1367f3e8c4918e6799ac0efda8b6733471aac81c14b935b0f440c126ab83ab0a20eb", 0xd5, 0x1}, {&(0x7f0000000640)="c30bc9d681299f125b7b10f9f62971a1b18a31248f84607c93b91d1769bcb258d0f2cd8059addde7b1f56f12d54068d1ffacd1b33e8453724d6bdf877723d99e1742f0cae12a4be1b009076b16b55d4f315782811fa61f84fdc1f38147f7fe55bfee4dee822f429b3c834426399086370ffbd6cabc226cc84cff434dbe60c36d95d4f5a7661b4e68f38c29f6691b", 0x8e, 0xa}, {&(0x7f0000000040)="6820b7169340baee9b1c3480da6b347ffbe4ad255fe55019c36fb70fbec2", 0x1e, 0x4}]) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0xbc010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000800)="a29f8384ddb18ff8051c900f7c29b469bfbee2ab8a142bd9c10c489acc32cc80d81985eca96698c4fb3b697cca9d304689a675f944c25323f676f61abce6d057ead8b2f5259146aaee9df6bf52bc55a1241bc1e7589e83ba6e5e8d1e484d6f48a8b119adfbf83d2c62eec6808cc3dcc80440935509853e1366f99ad76daab28a5ed0f2defab77b17e7a0f8babaf5ad317e66650a01cb63478759dad131acb37b3aacca242d0987bf415d15d422e53935de1a2bacd55e74748508912f2e7a3bcc30ee389b21c141ff0db62a858cf307b93f79283d6209d727bce0066ae9d25c9d55f82fd0ce60bcfefaa4f57192609eb8") msgget$private(0x0, 0x80) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000007c0)="7f6ce362056d09b56b45cbaf55ceef9aa9e6b046a77d263f712e59ff47a64d") ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1) 03:39:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17b, 0x1f000000) 03:39:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d090200eafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1837.749989][T18555] binder: BINDER_SET_CONTEXT_MGR already set [ 1837.756057][T18555] binder: 18510:18555 ioctl 40046207 0 returned -16 [ 1837.890294][T18569] binder: 18568:18569 unknown command -736252149 [ 1837.905569][T18569] binder: 18568:18569 ioctl c0306201 20008fd0 returned -22 03:39:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09024beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1837.933055][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1837.933095][ T26] audit: type=1804 audit(2000000361.040:344): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/293/bus" dev="sda1" ino=16594 res=1 03:39:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17c, 0x1f000000) [ 1838.112605][T18560] __loop_clr_fd: partition scan of loop1 failed (rc=-22) 03:39:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09044beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1838.251684][ T26] audit: type=1804 audit(2000000361.360:345): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/293/bus" dev="sda1" ino=16594 res=1 03:39:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17d, 0x1f000000) 03:39:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09084beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1838.314736][ T26] audit: type=1804 audit(2000000361.390:346): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir498432677/syzkaller.DuCJzR/293/bus" dev="sda1" ino=16594 res=1 03:39:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17a, 0x1f000000) [ 1838.674193][T18614] binder: BINDER_SET_CONTEXT_MGR already set [ 1838.699142][T18614] binder: 18568:18614 ioctl 40046207 0 returned -16 [ 1838.740255][T18614] binder: 18568:18614 unknown command -736252149 [ 1838.746600][T18614] binder: 18568:18614 ioctl c0306201 20008fd0 returned -22 03:39:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2400, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000400)={0x2, @win={{0x10001, 0x3, 0x3}, 0x0, 0x1, &(0x7f00000001c0)={{0x8, 0x3f, 0x10000, 0xc657}, &(0x7f0000000180)={{0x4, 0x7f, 0x6, 0x5}, &(0x7f0000000140)={{0x2, 0x42d, 0x8000, 0x1}}}}, 0x80, &(0x7f0000000200)="7645f67cdf9abfe2205e69b166628e0905a7fafb4dc38b6ad4ae3ab57d7a3500bf5735acc55770125fb40b482e3980dc58d3ce677cfa528e3da1d8d7f4001f3467c21cb2c031d5c0786cb3d359c39ac2bdfb2f1a913dfbc4fe0d8ad896767061f7542d57be0779e0b6fc9f3f7e1fabb5044a301f6caa18b435fad666c04fbf7329ae1903eed230d384560857921c60e6bb89acbd610323e9"}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1839.661133][T18621] binder: BINDER_SET_CONTEXT_MGR already set [ 1839.672911][T18621] binder: 18618:18621 ioctl 40046207 0 returned -16 03:39:22 executing program 5: memfd_create(0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0x1f}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r2+10000000}) 03:39:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17e, 0x1f000000) 03:39:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d090a4beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17d, 0x1f000000) 03:39:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0xfdfdffff, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) r2 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x100, 0x200000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r0}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) 03:39:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d090e4beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="281c99"]) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) acct(&(0x7f0000000080)='./file0\x00') 03:39:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x17f, 0x1f000000) 03:39:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d090f4beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x180, 0x1f000000) 03:39:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09104beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1840.715910][T18673] binder: BINDER_SET_CONTEXT_MGR already set [ 1840.716772][T18674] binder_thread_write: 17 callbacks suppressed [ 1840.716781][T18674] binder: 18623:18674 ERROR: BC_REGISTER_LOOPER called without request [ 1840.739138][T18673] binder: 18626:18673 ioctl 40046207 0 returned -16 [ 1840.759247][T18673] binder: 18626:18673 ERROR: BC_REGISTER_LOOPER called without request [ 1841.409084][ C1] net_ratelimit: 22 callbacks suppressed [ 1841.409094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1841.420609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1841.569077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1841.574905][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0xfdfdffff, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:24 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="098d9af0cfedb28aae1956fe75e4127e37293410c8507df1a1df9a1a6fac985617c69575e4bedec17687b4f8e057fc9b9f75c6f1c74bec37d5a18d4f77fb308438a1f3589033342782813ae7ccef6eb89d01b663ee2380508c4c33f7e0c4f12abf67f20a2f1e17ee0a48b669d4e7d96e791468d294e273d578e042343546332a8d0fb5ff26c9a68b529c51e326d7834edfb54c311ae6e82296c28abcc4a6dc8a134ed5", 0xa3}, {&(0x7f0000000100)="f1e1bae219c096befb031808bc35a3f6c2be4e77f28f0e36b8b7d0270c3e25ea543b7c8e2f232a94cf999dd7adae06ab01d09b0bb6a5b298b5dde8037c898eddc6919a3006c5608c6e7da7a444c10acf1d56548f31b3a423119501ddd1af5b1ff6bac498eef20a6e919b6d46e0787fe1fa96d62507facadd0e6ba79b931153a479b9cecaef73897fc0e3b7f9d186188342629f2816adfefde70c17c9292fb0852e98c2eacd67118443ca506a6d7430a9b921d1e81afee20759eb833a31fced959879954f9f56ed56bb0c", 0xca}, {&(0x7f0000000200)="49f507d00d139b8f605771de98c0366a09f7b0a35b2e1663fda393d35273db7ffda8d7e253864ada7d46149e03dba39115365b793e2c1c00", 0x38}, {&(0x7f0000000240)="40b4f7be0160f890bccfdb715e30a737b7b6be0eb5edb40a5bcdbf1adb3a16671189e87dda8779d1b579688616ee6488aaa3bc8311e38d21d6ada6fa7f2b2bbb2ae40c623f49b97c1561b35c7205d216b6f4099aacfe0084f75bb85d66586f85297b7fd43a6f04544fc6892555ececae64022dcde498ed26869c31fef0012f660da73012c1501fcdaa6a05a58f5eac864cf9f3f908bcf74877eb433809ca06844003212fe1a53b6134daf077e6a1d526274d58eb5b3d61e334673b27e7", 0xbd}, {&(0x7f0000000300)="859015b74bfa4d6a863a582f690e0285add3d27c1b1c08d3c84794c8936fb7540d7e0d86273155e3e879fdbc66dbf8d3170cf466330f31ddff65d5c131a66cb4cc3b0591078039b6ac068a5f13e06214e8ff1beac9307e107ec61791da321880a531ca26e149cf28e0d4ad024e10804a929e989d7c00511f5c0715b96a3cc6e8d68a5908b52bca75436d6f30b643d108453e33e1fcfe13ab5ecf44cc1c09c4cd1acffcc6d050f4c34246d2abed758f273cfaa28b135f5a598fcc55b8487f81bb4802dadb7ceb44eef721a7e7a4a39ae543f6abad9b4f2de55f459b0b6aefea1a04f39e37ba138c149ecb7a74ebaeee171a42e1f3df", 0xf5}, {&(0x7f0000000400)="1cf973de69f00f66c195933964db1e5c790b8c4222b26ef1612d2ca8c89f9ec624550447a2f38ec36965cca403339f4a36", 0x31}], 0x6, 0x8) r2 = inotify_init1(0x80000) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f00000004c0)={{0x7, @addr=0x9}, 0x8, 0xae9e, 0xffff}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000540)=0x30) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000580)=0x8) write$P9_RCLUNK(r0, &(0x7f00000005c0)={0x7, 0x79, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000600)={0x1, [0x0]}, &(0x7f0000000640)=0x8) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000008, 0x0, 0x100000) syz_genetlink_get_family_id$team(&(0x7f0000000680)='team\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) prctl$PR_SET_FPEMU(0xa, 0x3) accept$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) bind$packet(r0, &(0x7f0000000900)={0x11, 0xff, r4, 0x1, 0x8, 0x6, @remote}, 0x14) r5 = msgget$private(0x0, 0x400) msgsnd(r5, &(0x7f0000000940)={0x3, "e5f1f34cc0703b920197b25af516a987b07526ec8f6685bce2ec81ca51ecf8c5ba61916cad27cd03d79948a48396a3651ea0f143356b56a2344a3dcf9c5031eeea12d827c665bf050d9692cb1bd51543e6ad4effc0fb82ad3a243e05afbe664f6f3f49c2f47d64ac8d16e7b2bda86d95ddb5b80d3a17887e50870bced26be4d7a403fd3055e909"}, 0x8f, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000a00)) modify_ldt$write2(0x11, &(0x7f0000000a40)={0x19f80000000, 0x20000800, 0xffffffffffffffff, 0x3ff, 0x9, 0x8, 0x0, 0x20, 0x81, 0x7776e5a2}, 0x10) getsockname(r1, &(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b00)=0x80) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000bc0)={r3, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000c80)=0x84) msgget$private(0x0, 0x400) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000cc0)=0x1000, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/fuse\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000d80)={0x39, &(0x7f0000000d40)=""/57}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000dc0)={r3, 0x6}, &(0x7f0000000e00)=0x8) 03:39:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x181, 0x1f000000) 03:39:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09604beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0xfffffdfd, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b630000cc83dba8c319c4dfad1cfb38"], 0x0, 0x0, &(0x7f0000009000)}) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9d26, 0x10000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1841.844470][T18687] binder: 18681:18687 ERROR: BC_REGISTER_LOOPER called without request [ 1841.864123][T18686] binder: 18680:18686 ioctl c0306201 20008fd0 returned -14 03:39:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x1000, 0x8001, 0xecc6, 0x9bd8}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1}, 0x8) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0xfffffc41) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x6) fcntl$setflags(r0, 0x2, 0x1) fadvise64(r0, 0x2306, 0x3f000088, 0x4) [ 1841.899989][T18691] binder: 18688:18691 ERROR: BC_REGISTER_LOOPER called without request [ 1841.913782][T18693] binder: 18681:18693 ERROR: BC_REGISTER_LOOPER called without request 03:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c562c8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x100000000000000, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x182, 0x1f000000) 03:39:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x181, 0x1f000000) [ 1842.124765][T18708] binder: 18705:18708 ERROR: BC_REGISTER_LOOPER called without request 03:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470200ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1842.289091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1842.295012][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xff64) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'bond0\x00', 0x40}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x3ffe, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000100)={0x6, 0x604e18f140fab1a8, "39e461bc917a1480a4b0571bd7bf8f1030f91eb04e27cf256f9d13f5ac1bda9e", 0x101, 0x95, 0x9, 0xee2a, 0x1}) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013b81}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x100) socket$inet_udplite(0x2, 0x2, 0x88) 03:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447020bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x800000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x20000001, 0x0, "0d77bded71254f8de47145b71f2226c0b6950feba5007529b90d1f3509bb602e4818224696dafe09bd5ed1d5e1e8dd9525d4425e194707a00f8d06004c19b884282e4f743e0fc7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000003c0), 0x4) 03:39:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x183, 0x1f000000) 03:39:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x20000001fc}, 0x331) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@acquire], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) fchdir(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth1_to_team\x00', @ifru_ivalue=0x9b5d}}) [ 1842.622936][T18728] binder: BINDER_SET_CONTEXT_MGR already set [ 1842.632118][T18728] binder: 18680:18728 ioctl 40046207 0 returned -16 [ 1842.638930][T18728] binder: 18680:18728 ioctl c0306201 20008fd0 returned -14 03:39:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x184, 0x1f000000) 03:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447040bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1842.802388][T18741] binder: 18738:18741 ioctl c0306201 20008fd0 returned -14 03:39:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='gfs2meta\x00', 0x81020008, &(0x7f0000000140)=')]lolo,securityppp1\x00') [ 1842.895380][T18752] binder: 18705:18752 ERROR: BC_REGISTER_LOOPER called without request [ 1842.929122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1842.934956][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1842.940812][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1842.946585][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0xfdfdffff00000000, 0x0, 0x1, 0x0, &(0x7f000000df36)="12"}) 03:39:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447080bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 03:39:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') accept$packet(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x185, 0x1f000000) [ 1843.073449][T18763] binder: 18762:18763 ERROR: BC_REGISTER_LOOPER called without request 03:39:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470a0bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1843.564190][T18779] binder: BINDER_SET_CONTEXT_MGR already set [ 1843.583026][T18779] binder: 18738:18779 ioctl 40046207 0 returned -16 [ 1843.619542][T18779] binder: 18738:18779 ioctl c0306201 20008fd0 returned -14 [ 1843.627589][T18736] kasan: CONFIG_KASAN_INLINE enabled [ 1843.637341][T18736] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1843.645752][T18736] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1843.652678][T18736] CPU: 0 PID: 18736 Comm: syz-executor5 Not tainted 5.0.0-rc1-next-20190109 #8 [ 1843.661584][T18736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.671645][T18736] RIP: 0010:try_charge+0x12a8/0x1d00 [ 1843.676925][T18736] Code: c0 e8 dc bf fe ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c6 04 02 00 49 8d bc 24 40 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 0a 00 00 4c 89 f2 4d 8b a4 24 40 05 00 00 48 [ 1843.696542][T18736] RSP: 0018:ffff88805d6c6f78 EFLAGS: 00010202 [ 1843.702583][T18736] RAX: dffffc0000000000 RBX: ffff888088db2e80 RCX: 1ffff1100bad8ddd [ 1843.710531][T18736] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000540 [ 1843.718478][T18736] RBP: ffff88805d6c7180 R08: 1ffff11015cc5b8f R09: ffffed1015cc5b90 [ 1843.726438][T18736] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 0000000000000000 [ 1843.734409][T18736] R13: ffff88805d6c7158 R14: ffff88805d6c7118 R15: 0000000000000000 [ 1843.742379][T18736] FS: 0000000001f98940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1843.751282][T18736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1843.757839][T18736] CR2: 00000000200000c0 CR3: 0000000053adb000 CR4: 00000000001406f0 [ 1843.765789][T18736] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1843.773733][T18736] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1843.781675][T18736] Call Trace: [ 1843.784952][T18736] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1843.790488][T18736] ? __kmalloc_node_track_caller+0x3d/0x70 [ 1843.796277][T18736] ? mark_held_locks+0xb1/0x100 [ 1843.801107][T18736] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 1843.806713][T18736] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 1843.812318][T18736] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1843.817580][T18736] ? trace_hardirqs_on+0xbd/0x310 [ 1843.822594][T18736] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1843.828818][T18736] ? sk_forced_mem_schedule+0x146/0x170 [ 1843.834350][T18736] ? trace_hardirqs_off_caller+0x300/0x300 [ 1843.840158][T18736] ? __this_cpu_preempt_check+0x1d/0x30 [ 1843.845680][T18736] mem_cgroup_charge_skmem+0x12f/0x280 [ 1843.851116][T18736] ? mem_cgroup_sk_free+0x90/0x90 [ 1843.856114][T18736] ? mark_held_locks+0xb1/0x100 [ 1843.860695][T18782] binder: 18762:18782 ERROR: BC_REGISTER_LOOPER called without request [ 1843.861037][T18736] sk_forced_mem_schedule+0x146/0x170 [ 1843.861059][T18736] tcp_send_fin+0x3b8/0xf30 [ 1843.879161][T18736] ? lock_sock_nested+0x40/0x120 [ 1843.884093][T18736] ? sk_forced_mem_schedule+0x170/0x170 [ 1843.889625][T18736] ? check_preemption_disabled+0x48/0x290 [ 1843.895440][T18736] ? lock_sock_nested+0x9a/0x120 [ 1843.900375][T18736] ? __local_bh_enable_ip+0x15a/0x270 [ 1843.905741][T18736] tcp_close+0xed1/0x1200 [ 1843.910061][T18736] ? tcp_check_oom+0x530/0x530 [ 1843.914815][T18736] ? down_write+0x8a/0x130 [ 1843.919220][T18736] ? __sock_release+0x89/0x250 [ 1843.923995][T18736] ? ip_mc_drop_socket+0x20c/0x270 [ 1843.929103][T18736] ? fcntl_setlk+0xfe0/0xfe0 [ 1843.933695][T18736] inet_release+0x105/0x1f0 [ 1843.938185][T18736] __sock_release+0xd3/0x250 [ 1843.942768][T18736] sock_close+0x1b/0x30 [ 1843.946912][T18736] __fput+0x3c5/0xb10 [ 1843.950887][T18736] ? __sock_release+0x250/0x250 [ 1843.955723][T18736] ? file_free_rcu+0xe0/0xe0 [ 1843.960301][T18736] ? ___might_sleep+0x1e7/0x310 [ 1843.965186][T18736] ? trace_hardirqs_off_caller+0x300/0x300 [ 1843.970995][T18736] ? arch_local_save_flags+0x50/0x50 [ 1843.976269][T18736] ____fput+0x16/0x20 [ 1843.980255][T18736] task_work_run+0x1f4/0x2b0 [ 1843.984830][T18736] ? task_work_cancel+0x2c0/0x2c0 [ 1843.989841][T18736] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1843.996085][T18736] ? switch_task_namespaces+0x9d/0xd0 [ 1844.001446][T18736] do_exit+0xad9/0x2af0 [ 1844.005614][T18736] ? mm_update_next_owner+0x970/0x970 [ 1844.011005][T18736] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1844.016807][T18736] ? try_to_wake_up+0xf9/0x1480 [ 1844.021658][T18736] ? __lock_is_held+0xb6/0x140 [ 1844.026430][T18736] ? mark_held_locks+0x100/0x100 [ 1844.031357][T18736] ? futex_wake+0x62c/0x7b0 [ 1844.035848][T18736] ? fixup_owner+0x250/0x250 [ 1844.040436][T18736] ? kasan_check_read+0x11/0x20 [ 1844.045289][T18736] ? do_raw_spin_unlock+0xa0/0x330 [ 1844.050409][T18736] ? add_lock_to_list.isra.0+0x450/0x450 [ 1844.056047][T18736] ? memset+0x32/0x40 [ 1844.060023][T18736] ? __dequeue_signal+0xeb/0x730 [ 1844.064963][T18736] ? get_signal+0x963/0x19b0 [ 1844.069564][T18736] ? find_held_lock+0x35/0x120 [ 1844.074317][T18736] ? get_signal+0x963/0x19b0 [ 1844.078898][T18736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1844.085145][T18736] ? _raw_spin_unlock_irq+0x28/0x90 [ 1844.090383][T18736] ? _raw_spin_unlock_irq+0x28/0x90 [ 1844.095572][T18736] do_group_exit+0x177/0x430 [ 1844.100151][T18736] ? trace_hardirqs_off_caller+0x300/0x300 [ 1844.105955][T18736] ? __ia32_sys_exit+0x50/0x50 [ 1844.110717][T18736] get_signal+0x8b4/0x19b0 [ 1844.115127][T18736] ? ptrace_notify+0x130/0x130 [ 1844.119875][T18736] ? find_held_lock+0x35/0x120 [ 1844.124629][T18736] ? __x64_sys_futex+0x524/0x670 [ 1844.129558][T18736] ? lock_acquire+0x1db/0x570 [ 1844.134225][T18736] ? ktime_get+0x182/0x410 [ 1844.138638][T18736] do_signal+0x91/0x1ea0 [ 1844.142878][T18736] ? kvm_clock_read+0x18/0x30 [ 1844.147546][T18736] ? setup_sigcontext+0x7d0/0x7d0 [ 1844.152583][T18736] ? exit_to_usermode_loop+0x98/0x3b0 [ 1844.157960][T18736] ? exit_to_usermode_loop+0x98/0x3b0 [ 1844.163352][T18736] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1844.168628][T18736] ? trace_hardirqs_off_caller+0x300/0x300 [ 1844.174431][T18736] exit_to_usermode_loop+0x2f7/0x3b0 [ 1844.179708][T18736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1844.185776][T18736] ? syscall_trace_enter+0x12a0/0x12a0 [ 1844.191256][T18736] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1844.196742][T18736] do_syscall_64+0x696/0x800 [ 1844.201327][T18736] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1844.206969][T18736] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1844.212686][T18736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1844.218225][T18736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1844.224105][T18736] RIP: 0033:0x457ec9 [ 1844.228033][T18736] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1844.247805][T18736] RSP: 002b:00007ffcff7b5728 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1844.256234][T18736] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 0000000000457ec9 [ 1844.264199][T18736] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000073bf08 [ 1844.272163][T18736] RBP: 000000000073bf00 R08: 00000000007409c0 R09: 0000000000000000 [ 1844.280120][T18736] R10: 00007ffcff7b57e0 R11: 0000000000000246 R12: 0000000000000003 [ 1844.288073][T18736] R13: 00000000000009d2 R14: 000000000073bf0c R15: 000000000073bf0c [ 1844.296029][T18736] Modules linked in: [ 1844.306186][T18736] ---[ end trace be0942bdff911156 ]--- [ 1844.313462][T18736] RIP: 0010:try_charge+0x12a8/0x1d00 [ 1844.318820][T18736] Code: c0 e8 dc bf fe ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c6 04 02 00 49 8d bc 24 40 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 0a 00 00 4c 89 f2 4d 8b a4 24 40 05 00 00 48 [ 1844.338554][T18736] RSP: 0018:ffff88805d6c6f78 EFLAGS: 00010202 [ 1844.344768][T18736] RAX: dffffc0000000000 RBX: ffff888088db2e80 RCX: 1ffff1100bad8ddd [ 1844.352854][T18736] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000540 [ 1844.361123][T18736] RBP: ffff88805d6c7180 R08: 1ffff11015cc5b8f R09: ffffed1015cc5b90 [ 1844.369516][T18736] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 0000000000000000 [ 1844.377569][T18736] R13: ffff88805d6c7158 R14: ffff88805d6c7118 R15: 0000000000000000 [ 1844.385662][T18736] FS: 0000000001f98940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1844.386415][ T3867] kobject: 'loop3' (000000008c91c470): kobject_uevent_env [ 1844.394688][T18736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1844.406378][ T3867] kobject: 'loop3' (000000008c91c470): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1844.408379][T18736] CR2: 0000000000da0978 CR3: 0000000092ae5000 CR4: 00000000001406e0 [ 1844.426625][T18736] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1844.435846][T18736] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1844.444402][T18736] Kernel panic - not syncing: Fatal exception [ 1844.451496][T18736] Kernel Offset: disabled [ 1844.455811][T18736] Rebooting in 86400 seconds..