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", 0x216, 0x0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) r7 = socket$inet(0x2, 0x800, 0x81) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) r9 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000a80)={0x20002002}) mq_getsetattr(r8, &(0x7f0000000040)={0x7, 0x2, 0x5, 0x0, 0x5, 0x1, 0x7, 0xff}, &(0x7f00000000c0)) sync_file_range(r9, 0x10001, 0x3, 0x3) write$binfmt_elf64(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4602ff080501004000010000000000000005000000620300000000000040000000000000006f0200000000000015000000acee3800020001000200000053e5746400040000060000000000000005000000000000000004000040200000ff7f000000000000df000000000000000400000000000000d32bd6453f37ddc8a24293a4b60c2a28eb48bb59e3c4db6c75285db2ddf6c211aba512bc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe3cbb10036c1f460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x59c) memfd_create(&(0x7f0000000140)='\x00', 0x2) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r10, 0x20000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) [ 604.539281] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 604.553004] binder: 31239:31267 got transaction to invalid handle [ 604.559667] binder: 31239:31267 transaction failed 29201/-22, size 0-0 line 2855 15:07:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x4) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) [ 604.590798] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 604.599764] binder: send failed reply for transaction 813 to 31239:31245 [ 604.618048] binder: undelivered TRANSACTION_ERROR: 29189 15:07:56 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xe0ffffff}, 0x18) [ 604.638085] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 604.704168] binder: undelivered TRANSACTION_ERROR: 29189 15:07:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe) r1 = socket(0xa, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0xa001]}, 0x76, r2}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @loopback, @dev={0xfe, 0x80, [], 0x19}, 0x43ab, 0x0, 0xcb2, 0x100, 0x401, 0x80000000, r2}) 15:07:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xeffdffff}, 0x18) 15:07:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:07:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:07:57 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 604.888676] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 604.897067] binder: 31293:31294 got transaction to invalid handle [ 604.897469] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 604.903475] binder: 31293:31294 transaction failed 29201/-22, size 0-0 line 2855 15:07:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x37) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a7849d2f591000000004e"}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000220000000700000000009b009500000000000000"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x9, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0x4, 0x0, 0x6, 0x7}, 0x10) r2 = msgget$private(0x0, 0x11) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000300)=""/21) 15:07:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 604.987321] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 604.996148] binder_alloc: binder_alloc_mmap_handler: 31293 20001000-20004000 already mapped failed -16 15:07:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xffffffe0}, 0x18) [ 605.047608] binder_alloc: 31293: binder_alloc_buf, no vma [ 605.048800] binder: BINDER_SET_CONTEXT_MGR already set [ 605.053421] binder: 31293:31311 transaction failed 29189/-3, size 0-0 line 2970 [ 605.065072] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:07:57 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 605.120278] binder: 31293:31318 got transaction to invalid handle [ 605.126765] binder: 31293:31318 transaction failed 29201/-22, size 0-0 line 2855 15:07:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000040)=0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x8, 0x1000, 0xffffffff80000000, 0x9d2f, 0xfffffffffffffffc, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000040000000000000000000000061104c00000000000000000000000000950000000000000042d18bc7cf45128b3ae4c077f0dfcacfe3fbfaf61a9c7f2aa37c6f113e9ed68c5076601ea095f83cdbbf16d44c6461238e1c9caefc6188f965ad0c949fe7f843a0047325b9686a2ef9dea8cfd81f471288d44eaae15750ff8413aa67cc2b1bf6d86329f82b1507dd62d139fa4f6de1d52e05944e2eea7a4b871266f8a9ecd80444c801b2f371cac9c97ed5"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 15:07:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xe0ffffff}, 0x18) 15:07:57 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x15) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300)=0x8, 0x4) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r2, 0x800, 0x0, 0x0, 0x0, @in, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0x5, 0x1}, &(0x7f00000002c0)=0x90) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000380)={0x4000, &(0x7f0000000340), 0x4, r0, 0x4}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x40000000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000003c0)={{0xba, @multicast1, 0x4e20, 0x1, 'lblc\x00', 0x4, 0x100000001, 0x2c}, {@multicast1, 0x4e24, 0x0, 0x935, 0x3f, 0x7fff}}, 0x44) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x2, @dev={[], 0x11}, 'veth0\x00'}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) [ 605.193097] binder_thread_release: 13 callbacks suppressed [ 605.193109] binder: release 31293:31294 transaction 818 out, still active [ 605.202600] binder: 31293:31294 ioctl 40046207 0 returned -16 [ 605.229786] binder: release 31293:31294 transaction 818 in, still active 15:07:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 605.259127] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 605.288604] binder: undelivered TRANSACTION_ERROR: 29189 [ 605.321524] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 605.345364] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:07:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 605.372053] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 605.513724] IPVS: ftp: loaded support on port[0] = 21 [ 605.574713] binder: 31347:31348 got new transaction with bad transaction stack, transaction 823 has target 31347:31348 [ 605.585792] binder: 31347:31348 transaction failed 29201/-71, size 0-0 line 2882 [ 605.683433] binder_alloc: binder_alloc_mmap_handler: 31347 20001000-20004000 already mapped failed -16 [ 605.701154] binder_alloc: 31347: binder_alloc_buf, no vma [ 605.713928] binder: BINDER_SET_CONTEXT_MGR already set [ 605.724778] binder: 31347:31348 ioctl 40046207 0 returned -16 15:07:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:07:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4000008004) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r0) close(r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 15:07:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xfffffffffffffdef}, 0x18) 15:07:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:07:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xfffffdef}, 0x18) 15:07:58 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000000040), 0x28ccfc94) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, r2+30000000}}, &(0x7f0000000380)) tkill(r1, 0x4000000000015) [ 605.738694] binder_alloc: 31347: binder_alloc_buf, no vma [ 605.778246] binder: release 31347:31348 transaction 823 out, still active [ 605.788978] binder: undelivered TRANSACTION_ERROR: 29189 [ 605.832089] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 605.847556] binder: release 31347:31348 transaction 823 in, still active [ 605.854556] binder_send_failed_reply: 1 callbacks suppressed [ 605.854563] binder: send failed reply for transaction 823, target dead 15:07:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 605.879108] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 605.899237] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:07:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 606.026281] binder: 31375:31378 got transaction to invalid handle [ 606.026536] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 606.050473] binder_alloc: binder_alloc_mmap_handler: 31375 20001000-20004000 already mapped failed -16 [ 606.064981] binder: BINDER_SET_CONTEXT_MGR already set 15:07:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xe0ffffff00000000}, 0x18) 15:07:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:07:58 executing program 5: r0 = socket(0x10, 0x2, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x8) write(r0, &(0x7f00003fe000)="24000000280007003200000800367700fbffffff0100000000000000ffffffff0100ff10", 0x24) [ 606.075855] binder: 31375:31381 ioctl 40046207 0 returned -16 [ 606.085553] binder_alloc: 31375: binder_alloc_buf, no vma [ 606.098336] binder: release 31375:31378 transaction 828 in, still active [ 606.105307] binder: send failed reply for transaction 828 to 31375:31378 15:07:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 606.209507] IPVS: ftp: loaded support on port[0] = 21 15:07:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xffffffe0}, 0x18) [ 606.266572] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 606.286549] binder: undelivered TRANSACTION_ERROR: 29189 [ 606.406880] binder: 31398:31401 got transaction to invalid handle [ 606.436131] binder_alloc: binder_alloc_mmap_handler: 31398 20001000-20004000 already mapped failed -16 [ 606.446207] binder: BINDER_SET_CONTEXT_MGR already set [ 606.451942] binder_alloc: 31398: binder_alloc_buf, no vma [ 606.452136] binder: 31398:31401 ioctl 40046207 0 returned -16 [ 606.463975] binder: 31398:31409 got transaction to invalid handle [ 606.470708] binder: release 31398:31401 transaction 832 out, still active [ 606.478399] binder: undelivered TRANSACTION_ERROR: 29189 [ 606.484514] binder: release 31398:31401 transaction 832 in, still active [ 606.491491] binder: send failed reply for transaction 832, target dead 15:08:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cf6f64205eb3bcdf866edef41e002e1c10", 0x11) 15:08:00 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:00 executing program 5: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x80) connect$packet(r2, &(0x7f0000001300)={0x11, 0x19, r3, 0x1, 0x2}, 0xffffff52) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) recvfrom(r2, &(0x7f0000000140), 0x0, 0x42, &(0x7f0000001340)=@pptp={0x18, 0x2, {0x3}}, 0x80) chroot(&(0x7f000009a000)='./file0\x00') getdents64(r2, &(0x7f0000000180)=""/4096, 0x1000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x338b}}, 0x3, 0x200, 0x2, 0x6, 0x100000001}, &(0x7f0000001240)=0x98) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x80000000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001280)={0x7, 0x8, 0x1ff, 0x4, r4}, &(0x7f00000012c0)=0x10) fchmod(r1, 0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 15:08:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffff00000000}, 0x18) 15:08:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xe0ffffff00000000}, 0x18) 15:08:00 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000ffffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 608.580853] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 608.590041] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 608.591915] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 608.610838] binder: 31412:31414 got new transaction with bad transaction stack, transaction 837 has target 31412:31414 [ 608.659231] binder_alloc: binder_alloc_mmap_handler: 31412 20001000-20004000 already mapped failed -16 [ 608.690262] binder: BINDER_SET_CONTEXT_MGR already set [ 608.711120] binder: 31412:31414 ioctl 40046207 0 returned -16 [ 608.736141] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 608.745344] binder_alloc: 31412: binder_alloc_buf, no vma [ 608.748857] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 608.759213] binder_alloc: 31412: binder_alloc_buf, no vma [ 608.765783] binder: release 31412:31414 transaction 837 out, still active [ 608.774474] binder: release 31412:31414 transaction 837 in, still active [ 608.781426] binder: send failed reply for transaction 837, target dead [ 608.805576] binder: undelivered TRANSACTION_ERROR: 29189 15:08:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 15:08:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635000800000f300f2325363e0f01cb66b9800000c00f326635002000000f30018c448b2e0f0171860fc72cba4200ed67f26cd0bf9f30", 0x3f}], 0x1, 0x0, &(0x7f0000000000), 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x40) write$P9_ROPEN(r4, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x40, 0x1, 0x4}, 0x9}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffb6, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) ioctl$KVM_NMI(r3, 0xae9a) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:01 executing program 0: r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffc}) fallocate(r0, 0x0, 0x0, 0x2cbd) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="c5d0000030e6af9e090000000000000000000000000000002101000000000000"]) 15:08:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:01 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000003796400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffffffffffff}, 0x18) 15:08:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xe0ffffff}, 0x18) [ 608.984052] binder: 31451:31452 got transaction to invalid handle [ 608.990504] binder_transaction: 10 callbacks suppressed [ 608.990521] binder: 31451:31452 transaction failed 29201/-22, size 0-0 line 2855 [ 609.006349] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.018149] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:01 executing program 2: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f00000000c0)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="c8b08c73a179d2f24780c7742c8a3d74b84bf4a2844577f5835bff010000137cb4587b299ab9aa78b6a8800a84807f7d58cc280410b3209c") r1 = syz_open_procfs(0x0, &(0x7f0000000380)='uid_map\x00') pread64(r1, &(0x7f0000000340)=""/12, 0x100000061, 0x0) [ 609.048162] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.072016] binder_alloc: binder_alloc_mmap_handler: 31451 20001000-20004000 already mapped failed -16 15:08:01 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 609.128549] binder: BINDER_SET_CONTEXT_MGR already set [ 609.162826] binder: 31451:31452 ioctl 40046207 0 returned -16 [ 609.171558] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.200279] binder_alloc: 31451: binder_alloc_buf, no vma [ 609.206726] binder: 31451:31484 transaction failed 29189/-3, size 0-0 line 2970 15:08:01 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000001c0)={0x2, 0x8}, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x4a, "32d2fdd37da492c8329f25e1e287a297a4fca3eb7a40815e8814d857c3404d20fd1c1989d860f45af7cdc39fa0e0d47b73a735a785229dae7fbf9c31774d4afb02300368cd68d8470939"}, &(0x7f0000000040)=0x52) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x8) accept$packet(r1, 0x0, &(0x7f0000000200)) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000000000), 0x8000fffffffe) 15:08:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 609.263161] binder: 31451:31488 got transaction to invalid handle [ 609.269554] binder: 31451:31488 transaction failed 29201/-22, size 0-0 line 2855 [ 609.298072] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:01 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0x1, 0x3, 0x4, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0x34}, @alu={0x0, 0x4, 0x6, 0x3, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x0, 0xc, 0x3, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, @map={0x18, 0xa, 0x1, 0x0, 0x1}, @jmp={0x5, 0x3, 0x9, 0x7, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x100000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x1, [], 0x0, 0x1}, 0x48) mmap(&(0x7f000061d000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x10000000000000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vcs\x00', 0x490102, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001280)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x4}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x3f}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}], 0x4c) 15:08:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffff}, 0x18) [ 609.309532] binder: release 31451:31452 transaction 842 in, still active [ 609.316468] binder: send failed reply for transaction 842 to 31451:31452 [ 609.369954] binder: undelivered TRANSACTION_ERROR: 29189 [ 609.406946] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffd}, 0x18) 15:08:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 609.421167] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.433804] binder: undelivered TRANSACTION_ERROR: 29189 15:08:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffffffffffff}, 0x18) 15:08:01 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 609.558076] binder: 31509:31510 got transaction to invalid handle [ 609.564480] binder: 31509:31510 transaction failed 29201/-22, size 0-0 line 2855 [ 609.641055] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.659173] binder_alloc: binder_alloc_mmap_handler: 31509 20001000-20004000 already mapped failed -16 [ 609.669287] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.704660] binder: BINDER_SET_CONTEXT_MGR already set [ 609.717603] binder: 31509:31510 ioctl 40046207 0 returned -16 [ 609.739541] binder_alloc: 31509: binder_alloc_buf, no vma [ 609.745240] binder: 31509:31526 transaction failed 29189/-3, size 0-0 line 2970 15:08:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551b, &(0x7f0000001000)) 15:08:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000feffff0700", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x98) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x600, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) 15:08:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffd}, 0x18) [ 609.768920] binder: 31509:31521 got transaction to invalid handle [ 609.775273] binder: 31509:31521 transaction failed 29201/-22, size 0-0 line 2855 [ 609.792581] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x349) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x7ce) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000900)=ANY=[@ANYBLOB="109be3cdf20717aab20000000000000039725f897d34a94206265e3772a10ce056101689b131b8cfb2d3277a1ec3aed4c6b3256727e23966d25f1175b0b6ad8e3b6cf5fb4c8315f8f3e8478645ddaf8fa5aeb14d421c25df78bc2d7b016a6bbf0544d9296c12ba063ce580bb045bfba13500081f34e6fc92dcac39eae241169e9a99140740d118"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) accept4$packet(r4, 0x0, &(0x7f0000000000), 0x80800) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d, 0x200000}, 0x1}) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) [ 609.835997] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 609.853334] binder: send failed reply for transaction 847, target dead [ 609.867232] binder: undelivered TRANSACTION_ERROR: 29189 15:08:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xfffffdef}, 0x18) 15:08:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000440)={0x7}, 0x7) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x22}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r3, 0x100}, 0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2a00000029010000000000c20000000000000000000000fe000000bc4f0000000700152f66696c6530744f496168c967be387359b134c6cb0cc374cb7f8def725826b3958e9c933ff2dda220f6f12e397ec9725c5697b9e9e32aba361a6726ee27a92f68e293f285ba62709d1e9566b1106f4c23c86275f46dd73039e17e7462cf382658a0bf2c5f2b4112"], 0x2a) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000180)) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x400000) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000140)=0x7) open(&(0x7f00000000c0)='./file0/file0\x00', 0x30101, 0x0) [ 609.886989] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:02 executing program 0: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x232c02, 0x0) bind$bt_sco(r1, &(0x7f00000005c0)={0x1f, {0x10000, 0x7, 0x3, 0xd973, 0x3, 0x7}}, 0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) [ 609.974234] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="0eff4a45de15627c", 0x8}], 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x400) pipe(&(0x7f0000000080)) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000180)={0x67, 0x6, 0x0, {0x0, 0x0, 0x255, 0x0, ':lokeyringem0em1wlan1posix_acl_access\\keyringtrustedwlan0ppp0$'}}, 0x67) [ 610.037155] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.056047] binder: 31557:31558 got transaction to invalid handle [ 610.062596] binder: 31557:31558 transaction failed 29201/-22, size 0-0 line 2855 15:08:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\f\r\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004300)={&(0x7f0000000100), 0xc, &(0x7f00000042c0)={&(0x7f0000003a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010500020000fcdbdf2580000000"], 0x14}}, 0x0) [ 610.135994] binder_alloc: binder_alloc_mmap_handler: 31557 20001000-20004000 already mapped failed -16 [ 610.155121] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.181022] binder: BINDER_SET_CONTEXT_MGR already set 15:08:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xfffffffffffffdef}, 0x18) [ 610.203501] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.209940] binder: 31557:31558 ioctl 40046207 0 returned -16 [ 610.227998] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.258222] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.269533] binder_alloc: 31557: binder_alloc_buf, no vma [ 610.275243] binder: 31557:31588 transaction failed 29189/-3, size 0-0 line 2970 15:08:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) write$cgroup_int(r1, &(0x7f0000000080)=0xee970200, 0x297ef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x2, 0xff, 0x1a, 0x0, 0x81, 0x0, 0x4, 0x6cff, 0x8, 0x0, 0x8, 0x80000000, 0x0, 0x7, 0x1, 0x0, 0x5, 0xa0, 0x0, 0x6a6, 0x0, 0xc0b, 0x0, 0x7, 0x100000000, 0x9, 0x0, 0x9, 0x2, 0x81, 0x0, 0x8, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x79f7bf0a, 0x0, 0x1, 0x0, 0x81}, 0x0, 0x0, r0, 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2000000000000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000004) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x2, 0x9, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x8, 0x1ff, 0x1, 0x6, 0x6, 0x5656, 0x1000, 0x1, 0x21, 0x2, 0x1, 0x6, 0x0, 0x0, 0x7fffffff, 0x5, 0x0, 0x80000000, 0x20, 0x4, 0xffff, 0x80000001, 0x0, 0x1000, 0x5, 0x8, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000480), 0xf}, 0x20, 0x100000000, 0x4, 0x2, 0xfffffffffffffff7, 0x6, 0x5}, 0x0, 0x5, r1, 0xa) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0xc) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7ff, 0x2, 0x5, 0x8, 0x0, 0x200, 0x8000, 0xb0eb920047bf6263, 0x1f, 0x9, 0x0, 0x0, 0x80000000, 0x2000, 0x0, 0x7, 0x40, 0x7, 0x45f3036e, 0x5, 0x2, 0x3, 0x463, 0x4660fe0a, 0x4, 0x6, 0x4, 0x3f, 0x100000001, 0x87, 0x1, 0x7, 0x7, 0x3cc, 0x3, 0x62a5, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x4d8, 0x6, 0x0, 0x2, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xf, 0x0, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x5}, 0x2c) 15:08:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000003796400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 5: pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004c00), &(0x7f0000004c40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000004e00)=0x185) getpgrp(0x0) fstat(0xffffffffffffffff, &(0x7f0000005b00)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000064c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006740)={{{@in6, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000006840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000006880)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)={0x1, {{0xa, 0x4e24, 0x62fa, @dev, 0x3f}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x10bb, @mcast1}}]}, 0x110) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r2, 0x1ff, 0xab9dfd4187abc067}, &(0x7f0000000380)=0xc) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000240)={[{@noacl='noacl'}]}) 15:08:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffffffffffff}, 0x18) [ 610.346218] binder: 31557:31573 got transaction to invalid handle [ 610.352591] binder: 31557:31573 transaction failed 29201/-22, size 0-0 line 2855 15:08:02 executing program 0: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) close(r0) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') fallocate(0xffffffffffffffff, 0x0, 0x20d0000000000, 0x3) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x1) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000001c0)={0x3, 0x2a}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffff7) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000000c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)=0x8b88) sysfs$3(0x3) [ 610.391927] binder_thread_release: 2 callbacks suppressed [ 610.391939] binder: release 31557:31558 transaction 852 out, still active [ 610.443460] binder: release 31557:31558 transaction 852 in, still active [ 610.443985] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.450423] binder: send failed reply for transaction 852, target dead [ 610.453411] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.523107] binder: undelivered TRANSACTION_ERROR: 29189 [ 610.537861] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffff00000000}, 0x18) 15:08:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 610.722092] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 610.756864] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xeffdffff}, 0x18) 15:08:03 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xe0ffffff}, 0x18) [ 610.992062] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000340), &(0x7f0000000380), 0x0, 0xfffffffffffffff9) r0 = syz_open_procfs(0x0, &(0x7f0000000480)="636c6561725f7265667300250d9888ebb88d0f3d45d8000000000000000147138dafbdf4b8cffb4462802699d423796badc105676384e8be07e5cc03000000934984844b574c16025c9f80f90936ffa5ab43accaa6fab334bf5645c42aea1c798c4d1d7474701a36d0f7ec6eb1a2a605000000329b4e6c3f8f9d5082b96cfad4ad0f152beb66db8cd2cd3561108bc2628b4ebe053b4629439855a363d3fffeffff06cbccfb4e3997cc2ac6ae2d7bb820123b0000000000000000000000000000066132445dde9eab8e0f908cd56d74d9814a31c64d9b9f9ad74e1cd6cc1ad009642c50ab40b0f0f65e281a8e609381b90000000000009e9d47a03eacf9f06fef20da3be8dd766615ff3e000000000000000000000000") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") sendfile(r0, r1, &(0x7f00000000c0), 0x1) [ 611.074640] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 611.089418] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:03 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 611.147261] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xfdef}, 0x18) 15:08:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x100) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x10200, 0x0, &(0x7f0000fff000/0x1000)=nil}) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x910, 0x70bd29, 0x2, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) [ 611.238649] binder: 31647:31648 got transaction to invalid handle [ 611.245035] binder: 31647:31648 transaction failed 29201/-22, size 0-0 line 2855 15:08:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 611.291845] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 611.312175] binder_alloc: binder_alloc_mmap_handler: 31647 20001000-20004000 already mapped failed -16 [ 611.316442] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f0000000500)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/7, 0x7}], 0x1, &(0x7f0000000600)=""/71, 0x47, 0x7ff}, 0x2021) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000006c0)={r1, @rand_addr=0x3ff, @remote}, 0xc) [ 611.357987] binder: BINDER_SET_CONTEXT_MGR already set [ 611.372223] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 611.376491] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 611.376491] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 611.376491] [ 611.408982] binder: 31647:31648 ioctl 40046207 0 returned -16 [ 611.418516] binder_alloc: 31647: binder_alloc_buf, no vma [ 611.479990] binder: 31647:31655 got transaction to invalid handle [ 611.483197] EXT4-fs (sda1): re-mounted. Opts: noacl,,errors=continue 15:08:03 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000080)=0xe8) quotactl(0xe0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)="c89090a671a084f21a7d883b1136aecbccf15c5ff8ab16ca1c5427f17727adeb1afc9db1b6a60d7586bb3d63f15091197c0196580aea95") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400080, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8000000008912, &(0x7f0000000140)="0a5cc80700315f85715070") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x81}}, 0xffffffffffff0001, 0xdb58, 0x7, 0x100}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={r3, 0xffffffff8ccad460}, &(0x7f00000003c0)=0x8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x28, 0x2, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 15:08:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0xfdef}, 0x18) 15:08:03 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 611.533549] binder: release 31647:31648 transaction 857 out, still active [ 611.552467] binder: undelivered TRANSACTION_ERROR: 29189 [ 611.601659] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 611.605751] binder: release 31647:31648 transaction 857 in, still active [ 611.613677] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 611.617006] binder: send failed reply for transaction 857, target dead 15:08:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x100) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x10200, 0x0, &(0x7f0000fff000/0x1000)=nil}) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x910, 0x70bd29, 0x2, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 15:08:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 611.666645] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:04 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfffffffffffffdef}}, 0x18) 15:08:04 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 611.764341] binder: 31686:31687 got transaction to invalid handle [ 611.785066] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:04 executing program 5: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xce, 0x101100) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x9, 0x101, 0x9, 0x9}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sched_setscheduler(r0, 0x5, &(0x7f0000000140)) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000002580)='./file0\x00', 0x0, 0x0) 15:08:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfffffdef}}, 0x18) [ 611.825936] binder_alloc: binder_alloc_mmap_handler: 31686 20001000-20004000 already mapped failed -16 [ 611.837099] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 611.884297] binder: BINDER_SET_CONTEXT_MGR already set [ 611.896607] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000400)={0x0, 0x0}) futimesat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{r3, r4/1000+10000}}) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 611.934320] binder: 31686:31687 ioctl 40046207 0 returned -16 [ 611.961936] binder_alloc: 31686: binder_alloc_buf, no vma [ 611.981881] binder: 31686:31698 got transaction to invalid handle 15:08:04 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 612.012405] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 612.023567] binder: release 31686:31687 transaction 862 out, still active [ 612.034335] binder: undelivered TRANSACTION_ERROR: 29189 [ 612.053919] binder: release 31686:31687 transaction 862 in, still active [ 612.060976] binder: send failed reply for transaction 862, target dead 15:08:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 612.159213] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 612.199817] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 612.222480] binder: 31729:31730 got new transaction with bad transaction stack, transaction 867 has target 31729:31730 [ 612.240349] binder_alloc: binder_alloc_mmap_handler: 31729 20001000-20004000 already mapped failed -16 [ 612.250175] binder: BINDER_SET_CONTEXT_MGR already set [ 612.263976] binder: 31729:31730 ioctl 40046207 0 returned -16 [ 612.279514] binder_alloc: 31729: binder_alloc_buf, no vma [ 612.292219] binder: release 31729:31730 transaction 867 out, still active [ 612.321393] binder: release 31729:31730 transaction 867 in, still active [ 612.328447] binder: send failed reply for transaction 867, target dead 15:08:04 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000280), 0x15e) 15:08:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x60000, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 15:08:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:04 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff00000000}}, 0x18) 15:08:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x4) accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @dev={[], 0x13}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 15:08:04 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\v\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff00000000}}, 0x18) 15:08:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 612.466719] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 612.474853] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 612.493786] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:04 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x910}, 0xc, &(0x7f0000000040)={&(0x7f0000004240)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 15:08:04 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:04 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = semget$private(0x0, 0x2, 0x5) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000000)=[{0x3, 0x5, 0x800}, {0x5, 0x18000, 0x800}, {0x1, 0x800, 0x1000}, {0x0, 0x7, 0x1800}, {0x6, 0x6}, {0x7, 0x6, 0x1000}, {0x3, 0x5, 0x1800}, {0x0, 0x3f, 0x1800}, {0x1, 0x200, 0x1800}, {0x3, 0x401, 0x9e8605bee20f9b0e}], 0xa, &(0x7f0000000140)={r3, r4+30000000}) close(r0) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) gettid() fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) fcntl$getownex(r5, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000340)='net/anycast6\x00') sendfile(r5, r7, &(0x7f0000000180)=0xf010b, 0x100000001) [ 612.513514] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 612.528210] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 612.542360] binder_alloc: binder_alloc_mmap_handler: 31747 20001000-20004000 already mapped failed -16 15:08:04 executing program 2: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x2000008, 0x1000001}) [ 612.591019] binder: BINDER_SET_CONTEXT_MGR already set [ 612.598358] binder_alloc: 31747: binder_alloc_buf, no vma [ 612.623121] binder: 31747:31752 ioctl 40046207 0 returned -16 15:08:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 612.648266] binder: release 31747:31752 transaction 871 out, still active [ 612.656939] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 612.668023] binder: undelivered TRANSACTION_ERROR: 29189 15:08:05 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e21, @multicast2}}) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000000c0)) [ 612.698006] binder: release 31747:31752 transaction 871 in, still active [ 612.705035] binder: send failed reply for transaction 871, target dead [ 612.732686] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffdffff}}, 0x18) [ 612.759340] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7fff, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @remote, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0x4, 0xffff, 0x30, 0x3, 0x5, r2}) r3 = socket$inet(0x10, 0x201000003, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000002c00075e1dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:08:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffdffff}}, 0x18) 15:08:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000e0c00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff00000000}}, 0x18) [ 612.963591] binder_alloc: binder_alloc_mmap_handler: 31796 20001000-20004000 already mapped failed -16 [ 613.002595] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="afbd001b79", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7ffff000}], 0x1, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 613.005789] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.025661] binder: BINDER_SET_CONTEXT_MGR already set [ 613.045599] binder_alloc: 31796: binder_alloc_buf, no vma [ 613.054632] binder: send failed reply for transaction 876, target dead [ 613.055271] binder: 31796:31797 ioctl 40046207 0 returned -16 [ 613.062570] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") alarm(0xffffffffffffdf6f) r1 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x5, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) r5 = gettid() r6 = geteuid() r7 = getgid() r8 = getpid() fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000a40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xee00]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a80)=0x0) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() sendmsg$netlink(r1, &(0x7f0000000c40)={&(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x900440}, 0xc, &(0x7f0000000780)=[{&(0x7f00000005c0)={0x164, 0x41, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@generic="7f53235fa34760b755f34d7fae4d069677914050647e593b91de58453219ff35dcd81301f5c4857f703a5afcd617187414c665f5558c84e2d2d45950077d81aa46cdbb69ad4c531c93f601db5e2307fc52782d6539f5d811bab705e01603a80a63e76819d32bbd42ea6e2763dbc13b3411225233f9d0035185de8aafec2480cef379b0d2e50c0aecb530a4dfe604e6bd34235075dcfb492a", @typed={0x4, 0xe}, @generic="a561b1da30be41102f69b55f9301c7be576a58205bbbd71c7e85adb7be1cdfa9307855553b52fa27d6514300d334df2c12ef773caae59a9bbac78b468145eb3590496c877eed26ba59e1044baa7b4d44441b880298cae00401b9b5d14c36b2c8af4af5e7fed4b6112e8dc8d1cc4ef2a98d1a92062bfa460fd1f72d70ea74814d1bd096878f4715150275b8c92a642a859c078886e02838d9e6c2f28cad51e20a864b8e66c925da69449887b118b2d690ac82dc8509beccd0"]}, 0x164}, {&(0x7f0000000740)={0x34, 0x23, 0x100, 0x70bd25, 0x25dfdbff, "", [@generic="235fed7053fcda2fe3628ffc23402f0d665b9fb223f8a589a574896ab032d553989f"]}, 0x34}], 0x2, &(0x7f0000000b80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xa0, 0x10}, 0x1) 15:08:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfdef}}, 0x18) 15:08:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff}}, 0x18) 15:08:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.289026] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.301263] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.317908] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000001c0)={0x1, "ab"}, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f07f466b9150101c066b80100000066ba000000000f3066b8010000000f23d00f21f866352000000f0f23f866b8020000000f23c00f21f86635010002000f23f80f01df670f01d166b9750a000066b80090000066ba000000000f30260fc72b260f32", 0x63}], 0x1, 0x0, &(0x7f00000001c0), 0x0) read(r2, &(0x7f0000000200)=""/75, 0x4b) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0xffffffffffffffff}]}) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 613.330355] binder_alloc: binder_alloc_mmap_handler: 31843 20001000-20004000 already mapped failed -16 15:08:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 613.375941] binder: BINDER_SET_CONTEXT_MGR already set [ 613.391653] binder: 31843:31844 ioctl 40046207 0 returned -16 [ 613.423804] binder_alloc: 31843: binder_alloc_buf, no vma [ 613.460248] binder: send failed reply for transaction 880 to 31843:31844 15:08:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = getpgid(0xffffffffffffffff) prctl$setptracer(0x59616d61, r1) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000eb6bff718126601e6a4e09245985398b6cec1d622b1da878b0e3d04227562a3760e33943f0fc98bbb2aebb4619407f7462c00fbd6d6c59b1693576cbb30e99208a319bed813f81ae4ade5d38b1f8ebfb4118ea357b82a525af02a917fecac6"], 0x8) [ 613.474598] binder: undelivered TRANSACTION_ERROR: 29189 [ 613.498687] binder: undelivered TRANSACTION_ERROR: 29189 [ 613.515496] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\r\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 613.526837] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.551373] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffd}}, 0x18) [ 613.677849] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.714336] binder_alloc: binder_alloc_mmap_handler: 31877 20001000-20004000 already mapped failed -16 [ 613.759769] binder: BINDER_SET_CONTEXT_MGR already set [ 613.766483] binder_alloc: 31877: binder_alloc_buf, no vma [ 613.768388] binder: 31877:31879 ioctl 40046207 0 returned -16 [ 613.792903] binder: send failed reply for transaction 885, target dead 15:08:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfdef}}, 0x18) 15:08:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff00000000}}, 0x18) 15:08:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 613.883906] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.896859] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 613.917517] binder: BINDER_SET_CONTEXT_MGR already set [ 613.925684] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 613.933648] binder: send failed reply for transaction 889, target dead [ 613.944545] binder: 31893:31897 ioctl 40046207 0 returned -16 [ 613.956354] binder: undelivered TRANSACTION_ERROR: 29189 15:08:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfffffffffffffdef}}, 0x18) 15:08:06 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x80000000) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000004, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bcsh0\x00', 0x0}) getegid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x101, 0x121440) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="6d0000003e1e9cc78e534462cd523196d99f94c19ff0775b22ab04628123b3512af479223485f11e83721ade5984af3e1016fd9e917dcfa7fdac4b03d6544958e4bc47a402f1ef9e77bf8d8f9559be6d0ef05d30c5c9d28fecd01c203c09d72571217101d8ae98c957431bb8cfe3c8"], &(0x7f0000000280)=0x75) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x8, 0x8c, 0x3}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="28e78607ce9f001321050000", @ANYRES32=r2, @ANYBLOB="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"], 0x28}}, 0x0) [ 614.070709] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.092627] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.130067] binder_transaction: 8 callbacks suppressed [ 614.130076] binder: 31915:31916 got transaction to invalid handle [ 614.141965] binder_transaction: 20 callbacks suppressed [ 614.141988] binder: 31915:31916 transaction failed 29201/-22, size 0-0 line 2855 [ 614.148819] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfffffdef}}, 0x18) 15:08:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000007fffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 614.214812] binder_alloc_mmap_handler: 1 callbacks suppressed [ 614.214833] binder_alloc: binder_alloc_mmap_handler: 31915 20001000-20004000 already mapped failed -16 [ 614.260939] binder: BINDER_SET_CONTEXT_MGR already set [ 614.276139] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.311008] binder: 31915:31916 ioctl 40046207 0 returned -16 [ 614.326349] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 614.326407] binder_alloc: 31915: binder_alloc_buf, no vma [ 614.338234] binder: 31915:31923 transaction failed 29189/-3, size 0-0 line 2970 [ 614.343039] binder: 31915:31938 got transaction to invalid handle [ 614.352082] binder: 31915:31938 transaction failed 29201/-22, size 0-0 line 2855 [ 614.357251] binder: send failed reply for transaction 894, target dead [ 614.374197] binder: undelivered TRANSACTION_ERROR: 29189 15:08:06 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)={0x0, 0x0}) sched_rr_get_interval(r4, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x7, 0x7, 0x7}, &(0x7f0000000400)=0x10) r6 = socket$l2tp(0x18, 0x1, 0x1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r5, 0x5}, 0x8) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xfffffffffffffed9) sendmmsg(r6, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000008}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) accept$unix(r0, &(0x7f0000000100), &(0x7f0000000040)=0x6e) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x8040, 0x0) 15:08:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000064790300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e20, @multicast1}}}, 0x88) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x1000000000000110) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1, &(0x7f00000003c0)=[{0x10, 0x0, 0x2}], 0x10, 0x804}, 0x0) [ 614.487666] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.488233] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.523525] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff00000000}}, 0x18) 15:08:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffdffffffffffff}}, 0x18) 15:08:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:07 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 15:08:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:07 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xffffffe0}}, 0x18) [ 614.809608] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.824144] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.836153] binder: 31961:31962 got transaction to invalid handle [ 614.842504] binder: 31961:31962 transaction failed 29201/-22, size 0-0 line 2855 15:08:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x303000, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x101, 0xfffffffffffffbbb, 0x2, 0x7}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r3, r4) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$TIOCCONS(r1, 0x541d) unshare(0x40000000) keyctl$get_keyring_id(0x0, r4, 0x101) [ 614.869857] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 614.894229] binder_alloc: binder_alloc_mmap_handler: 31961 20001000-20004000 already mapped failed -16 15:08:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 614.920051] binder: BINDER_SET_CONTEXT_MGR already set [ 614.935589] binder: 31961:31962 ioctl 40046207 0 returned -16 [ 614.953875] binder_alloc: 31961: binder_alloc_buf, no vma [ 614.959564] binder: 31961:31980 transaction failed 29189/-3, size 0-0 line 2970 [ 614.999547] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.008495] binder: 31961:31990 got transaction to invalid handle [ 615.014878] binder: 31961:31990 transaction failed 29201/-22, size 0-0 line 2855 [ 615.035095] binder: send failed reply for transaction 899, target dead [ 615.050081] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.053874] IPVS: ftp: loaded support on port[0] = 21 [ 615.056438] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000ffffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:07 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffdffffffffffff}}, 0x18) 15:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e20, @multicast1}}}, 0x88) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x1000000000000110) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1, &(0x7f00000003c0)=[{0x10, 0x0, 0x2}], 0x10, 0x804}, 0x0) [ 615.118586] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffdffff00000000}}, 0x18) 15:08:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 615.241909] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.258550] binder: 31999:32000 got new transaction with bad transaction stack, transaction 904 has target 31999:32000 [ 615.269662] binder: 31999:32000 transaction failed 29201/-71, size 0-0 line 2882 [ 615.311045] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.335591] binder_alloc: binder_alloc_mmap_handler: 31999 20001000-20004000 already mapped failed -16 [ 615.358689] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.371602] binder_alloc: 31999: binder_alloc_buf, no vma [ 615.377390] binder: 31999:32013 transaction failed 29189/-3, size 0-0 line 2970 [ 615.392377] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.398270] IPVS: ftp: loaded support on port[0] = 21 [ 615.417649] binder: BINDER_SET_CONTEXT_MGR already set [ 615.435517] binder_alloc: 31999: binder_alloc_buf, no vma [ 615.441269] binder: 31999:32022 transaction failed 29189/-3, size 0-0 line 2970 [ 615.458053] binder: 31999:32000 ioctl 40046207 0 returned -16 [ 615.481951] binder_thread_release: 11 callbacks suppressed [ 615.481962] binder: release 31999:32000 transaction 904 out, still active [ 615.507756] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.523018] binder: release 31999:32000 transaction 904 in, still active [ 615.530121] binder: send failed reply for transaction 904, target dead 15:08:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="bc90279dfebc14af83e29225f9f8ce3e50d90a6f2d39be6ee1e9d3deceb9bf1ac1e198f1c7bbaea986c1e8da0c9c82d8830309fb56f1a233a6ac10939cf8bc77c85326adceac", 0x46, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="68f49d34bf781cbb63ed74f538ec2391bf695a4a3b559b34cdaa65f2cd65981ae3f8c4a04adb573bdca7b349971236d471a5f3713fcb114aebbffe732a8ef423537bc44e5c50c40afa7e0cfedb110bb8a5de81862aacb96ceebd7f78a72b34252176fa50bae8dfaa791aa3284e811deaf8377080cd3bd5e7ef7285ba72a8fe60bf05dad1faba4b97e454ff0cc542ce0cab364050eb1d8c21ee45f51d13677200be1f6c244feba9d5344ea2829512e477b4298c0468093f77b457de5a1628bba7ed27ef53415fddc64f90af782ddeaa9febe376f3bb4906a240320a47707400faa56d5a37b1b29f1ba8b485", 0xeb, 0x0) r3 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="3efa420251d1afc32ac8c55569951af6d94f9d465825b6e6a8a97820c40b27b48652976968ce4f4434768267c8fd30901e101757a995083b367952fb2ddbdb0ff1bfcb8b281e75d019a306efa694eb966863806d1329b74fa79f39d050d3ae0ce3709474ad42", 0x66, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000480)={r1, r2, r3}, &(0x7f00000004c0)=""/59, 0x3b, &(0x7f00000005c0)={&(0x7f0000000500)={'ghash-clmulni\x00'}, &(0x7f0000000540)="d6a2825a659c88c4bba78917956b39eaea7632afab0271b5f561708296265aea447642953939a5bc1e8d1913bbef8c7086e04646f06ba656a493f1666415d5979768f55d536da15bd9e34d4d93bbb487e5cc55a8af7808ba08d4a0945499bc20cc7d575c1bb30cc57fd000d0e812de0a7dca88eaa9bfc4d9969d", 0x7a}) rmdir(&(0x7f0000000600)='./file0\x00') 15:08:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffdffff00000000}}, 0x18) 15:08:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xe0ffffff}}, 0x18) 15:08:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x40000000000001}, 0x1c8) [ 615.713837] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.754071] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.767827] binder: 32030:32035 got transaction to invalid handle [ 615.774237] binder: 32030:32035 transaction failed 29201/-22, size 0-0 line 2855 [ 615.809370] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 615.820994] binder_alloc: binder_alloc_mmap_handler: 32030 20001000-20004000 already mapped failed -16 [ 615.838565] binder: BINDER_SET_CONTEXT_MGR already set [ 615.882455] binder: 32030:32035 ioctl 40046207 0 returned -16 [ 615.907318] binder_alloc: 32030: binder_alloc_buf, no vma [ 615.932651] binder: 32030:32053 got transaction to invalid handle [ 615.944913] binder: release 32030:32035 transaction 909 out, still active [ 615.953563] binder: undelivered TRANSACTION_ERROR: 29189 [ 615.964716] binder: release 32030:32035 transaction 909 in, still active 15:08:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x315) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400000) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000110000002cbd70576b950c3a30f6c1417fc0c7976400ffdbdf251e0000001c002b000200"], 0x1}, 0x1, 0x0, 0x0, 0x8015}, 0x4000) r2 = socket$inet6(0xa, 0x40000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) fchown(r2, 0x0, r3) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000580)=0x9, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x9, 0xffffffffffffffe1, 0x100000001, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r4, 0x4}, &(0x7f0000000540)=0x8) listen(r2, 0x18) r5 = socket$inet6(0xa, 0x5, 0x0) accept4$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000005c0)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x100000001}, @in={0x2, 0x4e21, @rand_addr=0x1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x75e, @dev={0xfe, 0x80, [], 0xf}, 0x19}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @rand_addr=0xc8}, @in={0x2, 0x4e23, @multicast1}], 0x88) 15:08:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:09 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x120) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x1, 0x0, [0x2, 0x2, 0x8, 0x100, 0x92de, 0x80000000, 0x4b8, 0x6]}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x8000000, 0x800004}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) setitimer(0x3, &(0x7f00000000c0)={{0x0, 0x2710}}, 0x0) 15:08:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xffffffe0}}, 0x18) 15:08:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xeffd}}, 0x18) 15:08:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="060000000000000000000000000000000000cfe05b55e5341c2c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018044d9dfe83f10000"]) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)="fd70b319349f0eb55988b6488a130cbfeea3f6fbbe349c023425bee2366f5dd42a2655a1326afc7de4d8e45fb547fc23749574a8cda5292ad7cd5dab20f60b7f48e3e3ff9277d9f2ebc6816fc8cebece5f274e556910b8da09707bfce950da799a7dd6dc3cb05b1e6939475f44fedef80f07997f7749bdd0633e8e7ef80a73576a54a253b9aebbe0361842bb5f38decd0e516f47", &(0x7f0000000180), 0x94}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 617.644096] binder: 32061:32064 got transaction to invalid handle [ 617.655297] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 617.668570] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 617.684527] binder_alloc: binder_alloc_mmap_handler: 32061 20001000-20004000 already mapped failed -16 [ 617.696598] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 617.707497] binder: BINDER_SET_CONTEXT_MGR already set [ 617.719688] binder: 32061:32064 ioctl 40046207 0 returned -16 [ 617.726076] binder_alloc: 32061: binder_alloc_buf, no vma [ 617.734155] binder: release 32061:32064 transaction 914 out, still active 15:08:10 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000380100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:10 executing program 2: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) timer_getoverrun(r0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x4, @thr={&(0x7f0000000400)="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", &(0x7f0000000000)="70a84a9520902c53f4d5ee3a52caa8c47ad75242b17f62c3c7f8bb7620d7645a57b47e6e0838a2f8b8ef8fa08c47e6111cb101eff6402827ee2b19eee23c854189ac94cc018281f56daff499a25ffe8960a713c76da9e87dedd2f236cc02b280443c9861a265a3c89548caa39b18004cdfd6b6b68d7a76506fd8db0ac43f9b2d1f08ec9ae612ec7118950178cb5b951f0f907cef3ac5371d624c8fdf81af078d23cdcce23338500a78"}}, &(0x7f0000000100)) [ 617.744818] binder: release 32061:32064 transaction 914 in, still active [ 617.751808] binder_send_failed_reply: 1 callbacks suppressed [ 617.751816] binder: send failed reply for transaction 914, target dead 15:08:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 617.914882] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 617.949032] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 617.978889] binder: 32096:32098 got transaction to invalid handle [ 618.005093] binder_alloc: binder_alloc_mmap_handler: 32096 20001000-20004000 already mapped failed -16 15:08:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfffffffffffffdef}}, 0x18) 15:08:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\f\r\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffffffffffff}}, 0x18) [ 618.026430] binder: BINDER_SET_CONTEXT_MGR already set [ 618.032868] binder: 32096:32098 ioctl 40046207 0 returned -16 [ 618.041293] binder_alloc: 32096: binder_alloc_buf, no vma [ 618.048059] binder: release 32096:32098 transaction 918 out, still active [ 618.056316] binder: release 32096:32098 transaction 918 in, still active [ 618.063313] binder: send failed reply for transaction 918, target dead [ 618.071226] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x4001) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x1, 0x20, 0x3}}, 0x30) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f00000001c0)={0x180, 0x0, 0x7, [{0x5, 0x80000001, 0x92, 0xffffffffffffffc0, '/dev/input/mice\x00'}, {0x3, 0xffffffffffff8000, 0x0, 0x7}, {0x8, 0x1ab2, 0x10, 0xfffffffffffffffd, '/dev/input/mice\x00'}, {0x0, 0x8, 0x12, 0x7, '/dev/snd/pcmC#D#p\x00'}, {0x0, 0x6, 0x12, 0x0, '/dev/snd/pcmC#D#p\x00'}, {0x0, 0x100, 0x6, 0x3, 'wlan0%'}, {0x1, 0xbc38, 0x10, 0xffffffffffffffff, '/dev/input/mice\x00'}, {0x3, 0xfffffffffffeffff, 0x14, 0x1, 'wlan1$--cgroupem0GPL'}, {0x3, 0x8, 0x0, 0x476a}, {0x4, 0x6, 0x0, 0xa}]}, 0x180) fstat(r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f0000000000), 0x4) [ 618.117602] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) vmsplice(r0, &(0x7f0000000280), 0x10000177, 0x401000000000000) 15:08:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x7fe}, @in6={0xa, 0x4e23, 0x5, @loopback, 0x3b0}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0xfffffffffffffffe, @ipv4={[], [], @local}}], 0x58) r1 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000007c0), 0xffffffffffffffba) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x7}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x44, 0x4) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@hci, &(0x7f0000000580)=0x10d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[]}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x7, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000700)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000800)={0x0, 0x10000, 0x1f, 'queue0\x00'}) ftruncate(0xffffffffffffffff, 0x0) openat(r1, &(0x7f00000001c0)='./bus\x00', 0x200840, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x54, 0x87ff7) 15:08:10 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xe0ffffff00000000}}, 0x18) 15:08:10 executing program 0: r0 = memfd_create(&(0x7f0000000000)="26bc2d00", 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x84004, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}]}}) pwritev(r0, &(0x7f0000001180)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="7a6f6e43d47aa22d5763dc10bca208dfc2d2", 0x12}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000001200)={0x19, "97751e5a5083342bc13a0f98fce9fc8cdca87f2ec094bfcba2"}) r3 = request_key(&(0x7f0000001300)='user\x00', &(0x7f0000001340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001380)='eth1(\x00', 0xfffffffffffffffb) r4 = request_key(&(0x7f0000001240)='user\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000012c0)='nodevsystem\x00', r3) pwrite64(r2, &(0x7f00000013c0)="b6aefbb4e37f045df94e29efa1b6", 0xe, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000001400)={0x18, 0xfffffffffffffffe, 0x3, {0x7}}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001440)={0x0, 0x0, 0x3, 0x0, [], [{0x5, 0x80000000, 0x3d66, 0x10000, 0x8, 0x7}, {0x7, 0x6, 0x8, 0xfdb, 0x745}], [[], [], []]}) setsockopt$inet6_dccp_int(r0, 0x21, 0x1b, &(0x7f00000015c0)=0x349, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x1000, 0x7, 0x2, 0x0, 0x1, 0x1f, 0x7f, 0x0, 0x522, 0xfffffffffffff731, 0x100000000, 0x0, 0x7, 0x80000000, 0x2]}, &(0x7f0000001700)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001740)={r5, @in={{0x2, 0x4e22, @multicast2}}, 0x100000000000000, 0x5, 0x4, 0x67f2, 0x20}, &(0x7f0000001800)=0x98) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001840)=""/83) arch_prctl(0x1001, &(0x7f00000018c0)="df25b674fce53850a940d04d0515b2ba0a5eaeb6202a2e455d1c791b992a65dc") syz_extract_tcp_res(&(0x7f0000001900), 0xe960, 0x1000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001940)=0x1) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001980), 0x4) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001a00)={r6, 0x1, 0x10000}, 0x8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001a40), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) request_key(&(0x7f0000001a80)='id_resolver\x00', &(0x7f0000001ac0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001b00)='eth1em0/.trustedmd5sum\x00', r4) accept4$unix(r7, &(0x7f0000001b40), &(0x7f0000001bc0)=0x6e, 0x80000) symlinkat(&(0x7f0000001c00)='./file0\x00', r7, &(0x7f0000001c40)='./file0\x00') personality(0x4000e) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000001c80)) syz_open_dev$midi(&(0x7f0000001cc0)='/dev/midi#\x00', 0xffffffffffffffff, 0x200000) 15:08:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffff}}, 0x18) [ 618.560683] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 618.575968] binder: 32128:32130 got transaction to invalid handle [ 618.578957] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000003aab000", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 618.602378] binder_alloc: binder_alloc_mmap_handler: 32128 20001000-20004000 already mapped failed -16 [ 618.623301] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 618.633974] binder: BINDER_SET_CONTEXT_MGR already set [ 618.647434] binder: 32128:32130 ioctl 40046207 0 returned -16 [ 618.655076] binder_alloc: 32128: binder_alloc_buf, no vma 15:08:11 executing program 0: r0 = memfd_create(&(0x7f0000000140)="693f0000a46e1ff3fe0ba14e4914a27a1c4c7a68c9c171c697111e1b8177381c8a853d687ed9cd154bfecdf7f038ff75eeb4f37bf7b82ca4b5e8e651f52d98894af5e99eabe8df9a671343b1eb9558d5390339b2d1838c65b5b5afed0514d9112d19440b391ecdf7c30a8a92e44cbe43e36b21b69ebf45d4166cbbe2c4ed9db3c6fbfdac027fd7f0a604a94026e55fbdcf3c20e432542b038385a6afd0b79d0d1cfa0c68a73b5dc1ba564f65706283774ff4a299865d19ad0b28026e65bb41e29ca2f347c76711182eb6d059fe0bff69781d9466fbb98e9df4cceb18fe1e2e9c20a8a5f205f05b6951fcc5128c2ba3f485583c65aba2de283563", 0x3) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x30, 0xe7a, 0x3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0x28, "973b45f5ac5519a2e40e7e8aa1f3d00c8b3055de50e47f4e77ae0069e683e43989db386149c69e4f"}, &(0x7f0000000100)=0x30) setrlimit(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x1ff) 15:08:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 618.695768] binder: 32128:32149 got transaction to invalid handle [ 618.722987] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 618.734034] binder: release 32128:32130 transaction 922 in, still active [ 618.741034] binder: send failed reply for transaction 922 to 32128:32130 [ 618.766501] binder: undelivered TRANSACTION_ERROR: 29189 [ 618.778412] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 618.799124] binder: undelivered TRANSACTION_ERROR: 29189 15:08:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:11 executing program 0: r0 = socket$inet(0x2, 0x4, 0x35) bind(r0, &(0x7f0000000080)=@sco={0x1f, {0x3, 0x29, 0xaf, 0x100000001, 0x0, 0x10001}}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) 15:08:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 618.825119] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfdef}}, 0x18) 15:08:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffff}}, 0x18) [ 618.947594] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 618.975718] binder: 32166:32167 got new transaction with bad transaction stack, transaction 927 has target 32166:32167 [ 619.034840] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.055303] binder_alloc: binder_alloc_mmap_handler: 32166 20001000-20004000 already mapped failed -16 [ 619.061275] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.082095] binder: BINDER_SET_CONTEXT_MGR already set [ 619.088286] binder_alloc: 32166: binder_alloc_buf, no vma [ 619.109858] binder_alloc: 32166: binder_alloc_buf, no vma [ 619.112887] binder: 32166:32167 ioctl 40046207 0 returned -16 [ 619.137797] binder: release 32166:32167 transaction 927 out, still active [ 619.146693] binder: undelivered TRANSACTION_ERROR: 29189 [ 619.170820] binder: send failed reply for transaction 927, target dead 15:08:11 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @rand_addr=0x8}, {0x2, 0x4e21, @rand_addr=0x7}, {0x2, 0x4e23, @remote}, 0x0, 0x1ff, 0x7fff, 0x3f, 0x5, &(0x7f0000000180)='bpq0\x00', 0x1ff, 0x4eb, 0x6}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000290007031dfffd946fa2830020200a0009000000060aed990440aa0b7600007e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f1503", 0x4c}], 0x1}, 0x0) close(r2) 15:08:11 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae78, &(0x7f0000000140)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x62801) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) 15:08:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000064790300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffd}}, 0x18) 15:08:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfdef}}, 0x18) 15:08:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfdef}}, 0x18) [ 619.408596] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.409337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 619.432337] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.438261] binder: 32200:32201 got new transaction with bad transaction stack, transaction 932 has target 32200:32201 [ 619.451538] binder_transaction: 12 callbacks suppressed 15:08:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 619.451559] binder: 32200:32201 transaction failed 29201/-71, size 0-0 line 2882 [ 619.458052] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:11 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uhid\x00', 0x802, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/92) r2 = dup(r1) accept$nfc_llcp(r2, 0x0, &(0x7f0000000000)) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/172, 0xac, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x120) tee(r1, r1, 0x7, 0x8) [ 619.516100] binder_alloc: binder_alloc_mmap_handler: 32200 20001000-20004000 already mapped failed -16 15:08:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 619.559274] binder: BINDER_SET_CONTEXT_MGR already set [ 619.574914] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.585904] binder: 32200:32201 ioctl 40046207 0 returned -16 [ 619.592213] binder_alloc: 32200: binder_alloc_buf, no vma [ 619.597929] binder: 32200:32230 transaction failed 29189/-3, size 0-0 line 2970 [ 619.607315] binder_alloc: 32200: binder_alloc_buf, no vma [ 619.613167] binder: 32200:32221 transaction failed 29189/-3, size 0-0 line 2970 15:08:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x220c00) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1200000032000104000000000000aab500000000"], 0x14}}, 0x0) 15:08:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 619.655980] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.665351] binder: send failed reply for transaction 932, target dead [ 619.677891] binder: undelivered TRANSACTION_ERROR: 29189 15:08:12 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40000, 0x0) connect$bt_sco(r0, &(0x7f0000000300)={0x1f, {0x8, 0x3418, 0x1effd651, 0xffff, 0x1000, 0xfff}}, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="f030a4007301fdd5b451345c0c401ae0a6ad060042027ee7fe01a3d39a433915759fd0a1c631421036366c17f42b4a88ee99f08c5745a234a357e91a0bc534a4e2c934f53ddb89ec07807910", @ANYRES16=r1, @ANYBLOB="000b2dbd7000fbdbdf250c000000640001000c0006006e6f6e650000000014000300ac1414aa00000000000000000000000008000b007369700008000500000000000800090066000000080005000300000008000b00736970000800020062000000080005000300000008000900210000002c000100080001000a000000080004004e220000080005000300000008000600666f000008000900640000000c000300080007004e2200004000010008000b007369700008000b007369700008000b00736970000800020033000000080005000200000014000300e0000001000000000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe06ffde0000000700ff3f07000000450001070000001419001a00040002000700fed16765c12e921ba0697a838d796b", 0x39}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000100)={{0xa, 0x5, 0x4, 0x8, '\x00', 0x4d9b}, 0x5, 0xb, 0xe7ab, r4, 0x1, 0x9, 'syz1\x00', &(0x7f0000000080)=['#\x00'], 0x2, [], [0x8f11, 0x7fff, 0x2, 0x6]}) 15:08:12 executing program 2: mkdir(&(0x7f0000002a80)='./file0\x00', 0x29) socketpair(0x11, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_AIE_OFF(r1, 0x7002) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x7fffffff, 0x0, 0xfffffffffffffe01, 0x3, 0x0, 0xfffe00000000000, 0x2, 0x1, 0x9, 0x9, 0x1, 0x7, 0x2, 0x0, 0x3, 0x4, 0xff, 0x2, 0x4, 0x0, 0x5, 0xffffffffffffffe0, 0x3, 0xfffffffffffeffff, 0x80, 0x3, 0x81, 0x1, 0x7, 0x3, 0x9, 0x4, 0x7, 0x4, 0xfa6c, 0x8, 0x0, 0x400, 0x4, @perf_config_ext={0x4d4}, 0x7000, 0x0, 0x7fff, 0x0, 0xdc3a, 0x7, 0x1}, r2, 0x9, r0, 0x0) mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 15:08:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 619.716776] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfffffffffffffdef}}, 0x18) 15:08:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfffffdef}}, 0x18) [ 619.842241] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:12 executing program 0: syz_emit_ethernet(0x21e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) r0 = memfd_create(&(0x7f0000000280)="776c616e30be2d5e00", 0x1) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000002c0)={0x2, 0x4, 0x9}) 15:08:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000ffffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:12 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x8882) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000180)={0x1, 0x0, {0x53, 0xf0, 0x10000, {0xff4, 0x7}, {0x874, 0x800}, @cond=[{0xd4, 0x6, 0x5, 0x8, 0x80, 0x7}, {0x2, 0x0, 0x7, 0x5, 0x200, 0xfffffffffffffffa}]}, {0x56, 0xfffffffffffffff8, 0x400, {0xff, 0x40}, {0xb483, 0x8}, @rumble={0x83, 0x5}}}) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x800) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x200, 0xded9, 0x6, 0x3ff, 0xb6a}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0x7fff, 0x90, "62528d244f8632b15d15332c361af3248ace7f9232da7ddfbc00852ce4254e529b5e74eb20e49cfdb636756cf1e25b852580281b1b6b52eb9f26f323a8ad0606a4fe4afbc099814ae3dcc246a435e61847f06118207c3ea7af196054d78339ecb09ecc156a4e56c261f7d145996adc55e37297236c6f8cfea444e09387aa85282b3549e3df02bd2727d77ad557698e6c"}, 0x98) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000340)) sched_setscheduler(r4, 0x5, &(0x7f0000000040)) ioctl$UI_BEGIN_FF_ERASE(r3, 0x4004556b, &(0x7f0000000000)) [ 619.893955] rpcbind: RPC call returned error 13 [ 619.912976] rpcbind: RPC call returned error 13 [ 619.918814] binder: 32253:32254 got transaction to invalid handle [ 619.925237] binder: 32253:32254 transaction failed 29201/-22, size 0-0 line 2855 15:08:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:12 executing program 5: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r0) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x3, 0x4, 0x6, 0xffffffffffffff7f, r4}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x4058534c, &(0x7f0000044000)) 15:08:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1f, 0x8000) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/53, &(0x7f0000000140)=0x35) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000cc0000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000000000000000000000cc378c33cb2eda936530c9facf929ed50000000000000000082a6babbd23ab1c00"], 0x70) [ 619.989360] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 619.996277] binder_alloc: binder_alloc_mmap_handler: 32253 20001000-20004000 already mapped failed -16 [ 620.039215] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.040070] binder: BINDER_SET_CONTEXT_MGR already set [ 620.062638] binder: 32253:32254 ioctl 40046207 0 returned -16 [ 620.071500] binder_alloc: 32253: binder_alloc_buf, no vma [ 620.077309] binder: 32253:32280 transaction failed 29189/-3, size 0-0 line 2970 15:08:12 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2500, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000840)=ANY=[@ANYBLOB="06997046860fa8261e74d9f362458a10f02cc0c70f99f759a4c3f65185267338e16bc1d4ee3489857db8c461089e72c37bc596e997f20342e2a295f5e0a7823861507ce68c736c38362b9437923f3b0651e01bacb0920000dcbbf8581f20857cc23c60c80c3c49a6709e9c215180d04d47338523ea6242df6608d14d74ae471bd4d5cf27589e58a44cc36fdf3f0074a0d90c973e4cdc6a0f61e9ff0e654497b2d69673258f9a1f26756f"], 0x1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000}, 0x18) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r4, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r5, &(0x7f00000001c0)={0x2}, 0xffffffffffffff29) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) ioctl$TIOCSBRK(r1, 0x5427) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)="2e2f6367726f75702e6e65742f73797a31f6", 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x606000, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000240)=[0xfffffffffffffffc, 0x9]) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a45323, &(0x7f0000000480)={{0x80000000000003, 0x9}, 'port1\x00', 0x20, 0x100000, 0x1, 0x5, 0x1c1, 0x0, 0x0, 0x0, 0x3, 0x6}) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000680)=0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000700)=r10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x3}}, 0x20) 15:08:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 620.086456] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.104229] binder: 32253:32271 got transaction to invalid handle [ 620.110601] binder: 32253:32271 transaction failed 29201/-22, size 0-0 line 2855 15:08:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xfffffdef}}, 0x18) [ 620.145365] binder: send failed reply for transaction 937, target dead [ 620.156017] binder: undelivered TRANSACTION_ERROR: 29189 15:08:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x169) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="580cc60000fb18e9"], 0x8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getroute={0x44, 0x1a, 0x28, 0x9, 0x25dfdbfd, {0xa, 0x0, 0x14, 0x7, 0xfc, 0x3, 0x0, 0x9, 0x1c00}, [@RTA_UID={0x8, 0x19, r2}, @RTA_OIF={0x8, 0x4, r3}, @RTA_PREF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0xae}, @RTA_UID={0x8, 0x19, r4}]}, 0x44}}, 0x80) 15:08:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\r\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 620.197362] sg_write: data in/out 262108/1 bytes for SCSI command 0x0-- guessing data in; [ 620.197362] program syz-executor2 not setting count and/or reply_len properly 15:08:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xffffffe0}}, 0x18) [ 620.269106] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.296351] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.344324] sg_write: data in/out 262108/70 bytes for SCSI command 0x0-- guessing data in; [ 620.344324] program syz-executor2 not setting count and/or reply_len properly [ 620.367609] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:12 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/16, 0x10}], 0x2, &(0x7f0000000ac0)=""/44, 0x2c}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000002c0)) r2 = signalfd(r0, &(0x7f0000000000)={0x100000080000001}, 0xffffffed) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)=0xfffffffffffffffd, 0xc4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) prlimit64(r3, 0xc, &(0x7f0000000280)={0xfffffffffffffffa, 0x2}, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)=""/53, &(0x7f00000000c0)=0x35) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000100)={0x1}) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000300)={0x5, 0x1, 0x83, &(0x7f0000000380)="99ba8384821e87892fa4421ad8a5790918d24a3744f53a0544033598b127aa63dc2c4f819c1c70162eec3bb5907bcbccbf2936ee776c534fffc9ee1b8132ca7ceca87a4d3a632ea33bf35bd89bea7c58fafe3437bd5019c235536e8630a1904bdf3b6f9b607c67e4a8d3b4734ba73db10ccf928d7853c0cebb17e87200fd47edf4ed79"}) write$cgroup_int(r4, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0xb4fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x65, &(0x7f0000000080), &(0x7f0000000180)=""/101}, 0x28) 15:08:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f83cb11e4be44d428590e204aee33ae54bd62a57ab775cae8a9938a29c5533c96210a1bee50f64f993e644bd1d0c5ae32109880edf2a5be7245d8c6b9fa714e6629e7b3162302c1f0b5fddcd75c488b79d0a23d47470f940c6f1b696b9231e9aa2087f0a876ff5885e7193ce7d7385b67fc73ef4f59044dd3cd94503e0c75a47fa624476663b949760c1f2b922daf4989ece8fc0c5cad6d6d0cdfadf22d0e70bc114727a98ddc76e9cce2a96a7b2930d422b6f18fc92a13b930d0d71576a75331c480308d7dbba", @ANYRES32=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRESOCT, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYPTR64], @ANYRESHEX=0x0], 0xd7}}, 0x8044) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000fcffffffffffffff0000004a6beca0517b5c6b1a02612ef0abfacf5e0eb6427476cb1ff8c18b9625e115d4e22d96fb388cbac8ec045ab48ffca5d77a9a81a3cc8bc7ee0cfd6aa4aa417a2afc921945cf220b5135cfdd088cc9451f9e16c228f365ac99b614a7d5b490cc9e5286984c35"], 0x10}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x5, 0x4) getpeername$unix(r2, &(0x7f00000002c0)=@abs, &(0x7f0000000140)=0x6e) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000380)=0x20, 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000000c0)={0xfffffffffffffffe, 0x1e3, {0x53, 0x9, 0x80, {0x0, 0xffffffff7fffffff}, {0x5, 0x7}, @cond=[{0x3, 0x9, 0x3, 0x8f, 0x0, 0x81}, {0x2, 0x2, 0x6db8, 0x7, 0x7fff, 0x8000}]}, {0x52, 0x9, 0x8c, {0x4, 0x110000}, {0x1, 0xf181}, @ramp={0x4, 0x10000, {0x4830, 0x9b1, 0x5, 0xa6c}}}}) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 15:08:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 620.391130] binder: 32308:32313 got transaction to invalid handle [ 620.397697] binder: 32308:32313 transaction failed 29201/-22, size 0-0 line 2855 [ 620.429570] binder_alloc: binder_alloc_mmap_handler: 32308 20001000-20004000 already mapped failed -16 15:08:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:12 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x13}, 0xff}}}, 0x118) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257209bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000000000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0e64d082778c3938", &(0x7f0000000380)=""/85, 0x700}, 0x28) [ 620.458684] binder: BINDER_SET_CONTEXT_MGR already set [ 620.478699] binder: 32308:32313 ioctl 40046207 0 returned -16 [ 620.499088] binder_alloc: 32308: binder_alloc_buf, no vma [ 620.504806] binder: 32308:32317 transaction failed 29189/-3, size 0-0 line 2970 [ 620.552275] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.556525] binder: 32308:32334 got transaction to invalid handle [ 620.566814] binder: 32308:32334 transaction failed 29201/-22, size 0-0 line 2855 [ 620.578808] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xe0ffffff00000000}}, 0x18) 15:08:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x74, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80}, &(0x7f00000000c0)=0xbe) 15:08:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 620.615082] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.653973] binder_thread_release: 5 callbacks suppressed 15:08:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000100, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2000000088) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) r2 = semget(0x1, 0x4, 0x89) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0xff, 0x2, 0x4b0, 0x336, 0xedd, 0x7fff]) [ 620.653984] binder: release 32308:32313 transaction 942 out, still active [ 620.701977] binder: undelivered TRANSACTION_ERROR: 29189 15:08:13 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffffffffffff}}, 0x18) [ 620.745803] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.748830] binder: release 32308:32313 transaction 942 in, still active [ 620.761066] binder: send failed reply for transaction 942, target dead 15:08:13 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='/\x00', 0xffffffffffffff9c}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r1, 0xb00, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c080}, 0x804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x2000400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc", 0x20}, 0x60) listen(r3, 0x0) 15:08:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 620.863134] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.906299] binder: 32360:32361 got new transaction with bad transaction stack, transaction 947 has target 32360:32361 [ 620.918637] binder: 32360:32361 transaction failed 29201/-71, size 0-0 line 2882 [ 620.948715] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 620.979817] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 621.002299] binder_alloc: binder_alloc_mmap_handler: 32360 20001000-20004000 already mapped failed -16 15:08:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_gettime(0x0, &(0x7f0000000040)) 15:08:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 621.043077] binder: BINDER_SET_CONTEXT_MGR already set 15:08:13 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xffffffe0}}, 0x18) [ 621.084326] binder: 32360:32361 ioctl 40046207 0 returned -16 [ 621.117587] binder_alloc: 32360: binder_alloc_buf, no vma [ 621.144242] binder_alloc: 32360: binder_alloc_buf, no vma [ 621.161276] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 621.165589] binder: release 32360:32361 transaction 947 out, still active [ 621.194937] binder: undelivered TRANSACTION_ERROR: 29189 [ 621.221305] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 621.234926] binder: release 32360:32361 transaction 947 in, still active [ 621.242188] binder: send failed reply for transaction 947, target dead 15:08:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:13 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000080), 0x4) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$FS_IOC_SETVERSION(r0, 0x80284504, &(0x7f0000000040)) [ 621.279979] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 621.375577] binder: 32397:32398 got new transaction with bad transaction stack, transaction 952 has target 32397:32398 [ 621.447359] binder_alloc: binder_alloc_mmap_handler: 32397 20001000-20004000 already mapped failed -16 [ 621.485361] binder: BINDER_SET_CONTEXT_MGR already set [ 621.501898] binder: 32397:32398 ioctl 40046207 0 returned -16 [ 621.517908] binder_alloc: 32397: binder_alloc_buf, no vma 15:08:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000a}, {}, 0xffffffffffffffff}) 15:08:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffff00000000}}, 0x18) 15:08:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:13 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 621.550487] binder_alloc: 32397: binder_alloc_buf, no vma [ 621.597117] binder: release 32397:32398 transaction 952 in, still active [ 621.604113] binder: send failed reply for transaction 952 to 32397:32398 [ 621.622150] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 621.632105] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 621.642105] binder: undelivered TRANSACTION_ERROR: 29189 [ 621.660455] binder: undelivered TRANSACTION_ERROR: 29189 [ 621.669853] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x2, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000000100)="05504c00", 0x0, 0x0, 0x0, 0x0, 0x1, [0x1bd5c7]}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x3d, &(0x7f00000001c0)="3c6f35550ec6f63b04d2668e5880", &(0x7f0000000200)=""/61}, 0x28) 15:08:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x100, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) 15:08:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffff00000000}}, 0x18) 15:08:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket(0x15, 0x0, 0x1) sendto(r1, &(0x7f0000000000)="120000001200e7ef00790000f4afd7030a7cdd41b57669a11f4b37eadc3e4b8d656514d4134775666c473b3dd136e9aa616d8b8aebd9d4c2e26da0fe547cda1e95330163d960cc3f30899f71d77578003b57b593f402ff7cedb39d9f9679fe0a80b5721c7bf03149330039071fca4b129c8c69e5064d3a66b258", 0x12, 0x800, 0x0, 0x1f4) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 15:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xe0ffffff}}, 0x18) [ 622.778490] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 622.804253] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 622.807342] binder: 32435:32436 got new transaction with bad transaction stack, transaction 957 has target 32435:32436 15:08:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000b0aa0300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:15 executing program 5: remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(r2, &(0x7f00000001c0)="e3b3e9579b588a99938809c4867ee8d564071a60a5c683ce6308896b72ee0cf2df1e5e2d660c3939a7155466ea8a9c9ba05ac3ba27e1a3583e1fd9f66531fea3229e0b0a7d1ee4aba21c3cd9b2f9758bfa6e3e56adb90523fcc1621700c6c5506ee35d76cb21959dd341cfae357c07c855b99272f8688293c052f38471b44a62cc7cb9c7100a60ff1155b122b2f6a81016fa608ddf435021aa62758212b2418068921af81db404918c3e6f90", 0xac) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r4, 0x2, 0x80000000, 0x100, 0x2d, 0x2}, &(0x7f0000000180)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x35c8}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) r6 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400000006a3, 0x280) ioctl$NBD_DISCONNECT(r6, 0xab08) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 622.830211] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:15 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) ioctl$FICLONE(r0, 0x40049409, r0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffff000, 0x200000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="10000000f0ffbfffff00000000855da0", 0x10}]) [ 622.877876] binder_alloc: binder_alloc_mmap_handler: 32435 20001000-20004000 already mapped failed -16 15:08:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac01000017000f000000000000000000e00000010000000000000000000000000000000000ac1414007f000001000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ff010000000000000000000000000001000000003c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000"], 0x1ac}}, 0x0) dup2(r0, r0) 15:08:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 622.921819] binder: BINDER_SET_CONTEXT_MGR already set [ 622.947431] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 622.948415] binder_alloc: 32435: binder_alloc_buf, no vma [ 622.969577] binder: release 32435:32436 transaction 957 out, still active [ 622.976858] binder: 32435:32436 ioctl 40046207 0 returned -16 [ 622.984428] binder: release 32435:32436 transaction 957 in, still active [ 622.991484] binder: send failed reply for transaction 957, target dead 15:08:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 623.039012] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.099486] *** Guest State *** [ 623.102883] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 623.111803] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 623.120720] CR3 = 0x0000000000000000 [ 623.124539] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 623.130607] RFLAGS=0x0020c102 DR7 = 0x0000000000000400 [ 623.136714] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 623.143487] CS: sel=0x0010, attr=0x0009b, limit=0x000fffff, base=0x0000000000000000 [ 623.151640] DS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.159715] SS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.167792] ES: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.175880] FS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.183939] GS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.192170] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 623.200223] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 623.208293] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 623.216338] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 623.224389] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 623.230879] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 623.238432] Interruptibility = 00000000 ActivityState = 00000000 [ 623.244759] *** Host State *** 15:08:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:15 executing program 0: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x4000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x10001, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x238, [0x0, 0x20000100, 0x20000130, 0x20000268], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x3f00, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xd8, 0xd8, 0x108, [@m802_3={'802_3\x00', 0x8}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x0, 0x0, "766c616e30860701ace235008a00", "6c6f0000008f791a4000", 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2b0) 15:08:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xe0ffffff}}, 0x18) 15:08:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffdffff00000000}}, 0x18) 15:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x0, 0xeffd}}, 0x18) [ 623.248048] RIP = 0xffffffff8120b2a4 RSP = 0xffff880185abf350 [ 623.254100] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 623.260602] FSBase=00007f94b063c700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 623.262022] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.268508] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 623.268532] CR0=0000000080050033 CR3=00000001ba802000 CR4=00000000001426e0 [ 623.268560] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86e01380 [ 623.296429] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 623.302560] *** Control State *** [ 623.306072] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 623.312828] EntryControls=0000d1ff ExitControls=0023efff [ 623.318348] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 623.321374] binder: 32483:32486 got new transaction with bad transaction stack, transaction 961 has target 32483:32486 [ 623.325356] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 623.325367] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 15:08:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 623.325376] reason=80000021 qualification=0000000000000000 [ 623.325385] IDTVectoring: info=00000000 errcode=00000000 [ 623.325405] TSC Offset = 0xfffffeb02f59af3c [ 623.325421] EPT pointer = 0x00000001b3c0701e [ 623.374974] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 15:08:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000380100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:15 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8aa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)}], 0x1, 0x0) flock(r0, 0x7) close(r1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={0x3, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @local}, 0x4, 0x2, 0x1, 0x4, 0x4, &(0x7f00000007c0)='ip6gretap0\x00', 0x4, 0x3f, 0xfffffffffffffffa}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x5, &(0x7f0000000200)=0x0) r4 = dup3(r1, r2, 0x80000) r5 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x5, 0x200080) r6 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x5ae, 0x0) r7 = memfd_create(&(0x7f0000000680)='\x00', 0x1) io_submit(r3, 0x5, &(0x7f0000000780)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x401, r2, &(0x7f0000000240)="82645739521d53046dd31698e07b88cc76f0ed1d71875b5375ffeae90672a3aad9a678aef1fb8d8b81b78d3280560ee5e5c552c7a6cee3ebb8f309a3f0d2904144e90af47799d1e26d39489cc67bef02f32262e1aa9e84961683d94b5812fa3dc1e81ff518bb53054125d97dc2d821a0fde3473fcb0eb7e99b0278c9b64f015cb4436c3d3185ac511ceafe27188a458369c5fe1ea5e89cb15e670ae12fb66b776542f2a842b5c37bf42d28ac0117118bfa9bf8458cfb932c230717a682e0df331f901cef8a0ed041c7a1f49f2e3b38ab6bc0df4a7df3d4aca69f063554a8e6d86e1a11570a096cb2a0aa97e7dda4337a9e15271466c046", 0xf7, 0x2, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xe01, r2, &(0x7f0000000380)="19979269b9771e715219cac7f186f8f930616506237de2737261505e0144363f6e546342d7eed3d68a7fc6eff3e363096c7429c29a3cf6e2e7f072ae748afd1d8a2cff5991fc617fc3c3481581a959195499e25c15512ebb03b3a0ff181a3de32ca3e963f47d6ae179b739adb5f1358b0c378ee1d297e4c328637da4fc2d9b719417e994019f838748e3ab8451f35f6827467b6313287ac004c35c", 0x9b, 0x2, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000004c0)="9a57504c7d0e5fdcfcdb94500911f160ff724acac564dc170b06382b3ae94fd4fab58d4d7972620bea21733747eb432d43a6edb68773340bd1f69049cabdb149b529fcc1244a95919e822a9617c588e4730180461df5b36ee97d0b66f35f968e2045e0bca5aaffca2b2d68b58062b8b710ee60ac576cab26f17548ff3bf4e082", 0x80, 0x5, 0x0, 0x2, r6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xb, 0x80, r0, &(0x7f00000005c0)="a2f1a0bf94255e9d78d3cbdd8c5b5df945eadd44c962ec8319dcb664812d26cc7ac2072b3fb87b22843c4b321d927b57c99d53aa6b2fba68b9e232d85f596f3a5519c5d37e2fc16e360563d70141009ec86a78ee9535edba1fdfd76df3", 0x5d, 0xe8, 0x0, 0x0, r7}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000700)="56eca0376e2dad92f328d9ab", 0xc, 0x7}]) socketpair(0x8000000028, 0x0, 0x28, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000100)=0x5) ioctl$UI_BEGIN_FF_ERASE(r8, 0xc00c55ca, &(0x7f0000000000)={0x40000000000a, 0x31e2, 0x7fb}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) [ 623.426050] binder_alloc: binder_alloc_mmap_handler: 32483 20001000-20004000 already mapped failed -16 [ 623.444332] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.459224] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.467668] binder: BINDER_SET_CONTEXT_MGR already set 15:08:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 623.473433] binder_alloc: 32483: binder_alloc_buf, no vma [ 623.486407] binder: 32483:32486 ioctl 40046207 0 returned -16 [ 623.521055] binder: release 32483:32486 transaction 961 in, still active [ 623.528049] binder: send failed reply for transaction 961 to 32483:32486 [ 623.539259] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 623.574317] binder: undelivered TRANSACTION_ERROR: 29189 [ 623.582275] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.609612] *** Guest State *** [ 623.613606] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 623.622552] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 623.631458] CR3 = 0x0000000000000000 [ 623.635243] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 623.638451] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.641265] RFLAGS=0x0020c102 DR7 = 0x0000000000000400 [ 623.641286] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 623.641302] CS: sel=0x0010, attr=0x0009b, limit=0x000fffff, base=0x0000000000000000 [ 623.641329] DS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.641365] SS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.688025] ES: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.696240] FS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.704347] GS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 623.712432] GDTR: limit=0x000007ff, base=0x0000000000001000 15:08:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000feffff0700", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 623.720758] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 623.728806] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 623.736876] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 623.744927] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 623.751419] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 623.758932] Interruptibility = 00000000 ActivityState = 00000000 [ 623.765216] binder: 32516:32517 got new transaction with bad transaction stack, transaction 965 has target 32516:32517 [ 623.765369] *** Host State *** [ 623.779555] RIP = 0xffffffff8120b2a4 RSP = 0xffff880185abf350 [ 623.785767] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 623.792455] FSBase=00007f94b063c700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 623.800342] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 623.806322] CR0=0000000080050033 CR3=00000001ba802000 CR4=00000000001426e0 [ 623.813441] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86e01380 [ 623.820196] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 623.826317] *** Control State *** [ 623.829870] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 623.836747] EntryControls=0000d1ff ExitControls=0023efff [ 623.842299] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 623.849286] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 623.856232] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 623.862873] reason=80000021 qualification=0000000000000000 [ 623.869304] IDTVectoring: info=00000000 errcode=00000000 [ 623.874816] TSC Offset = 0xfffffeafe7b5ab1e [ 623.879223] EPT pointer = 0x00000001b565a01e [ 623.882207] binder_alloc: binder_alloc_mmap_handler: 32516 20001000-20004000 already mapped failed -16 [ 623.890677] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 623.927002] binder: BINDER_SET_CONTEXT_MGR already set [ 623.933228] binder: 32516:32517 ioctl 40046207 0 returned -16 15:08:16 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, &(0x7f0000000140), 0x0) 15:08:16 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0xac) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffff19f, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000200)={@multicast1, @loopback, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001900000f2bbd7000fbdbdf251c141405ff07c8090002000008001a000900000008000400", @ANYRES32=r2, @ANYBLOB="6f9287835aca7b458dabe1b7a56c51b8f06866e19d7e60ab00", @ANYRES32=r3, @ANYBLOB="0c0001000000000000000000"], 0x40}}, 0x24008080) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4000000043) r4 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r4, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80800) accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) 15:08:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x20000218) 15:08:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x20000218) 15:08:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x2, &(0x7f0000001780)=0x0) io_destroy(r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x11b, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4000, 0x0) vmsplice(r0, &(0x7f0000001700)=[{&(0x7f0000000200)="a2964705b412a931cf50587e162c590976e23e83f44a8105229c2d94bd703df4f9d946a401b39050e80968d661fcfa7b4ae44bdeaa5de70d73196912a85e11683cbc3e5d6d3f65d0673f0250c736d214986f5b7230a4c5e93ff8b23f6090b12615067c91b5f32b693df998f4bbbb8a42d06e53a82760a3c8cb764ed9a1", 0x7d}, {&(0x7f00000003c0)="a5c19e34e83e9fb4df7b232774d55dcc2839e5a97b4859815c6c145b4deb6d08b476da5deb6500b2927620922e54e62fe9048ec38f2573b3c7753c8c1f98e0c64a9319b15f16ed0e56312ea7feb42d1bee4a229dc95299f88c99377b709590b49f31629fe056897f4d7dd6c418524f2ba7e75bfc9edc0f3e60588935e539cc275c89a128d52e500b491933", 0x8b}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="62cd8e10d8a5bcf82a2825c42d1b9fbcae2b58e86d13e25c3f200829452a0480806f225e19b9e505065b6c2960dc6efebd907886d69b8d7ed1d49f7da6c452f9b9e47519768ae40a53a589f64e062448516ce07fecbc9a3a16ed9dfd9c2481236e0373fa245aec394c59c200166b72bb31f571faa80563aa0f35bc3fa2b5b9bbd910abdb7d9b8180721bf6a0f5a0c32febe19f388136d7002c6f329722177a6d3f00f19acda8c644f848b3c0e1c50d3cc4deb4dc44ecc04c4ddadfb70c3a64f97a41df9a3d249f5b01e52686c23d3f000d0cea738b4112058ce0b003ac2c8d4e5b09bc9bbc5559e17b481ca09e8e0388994885a3aa6675237b91f037", 0xfc}, {&(0x7f0000001580)="8b2ba0308634571601cc7b3257d0df4598299290647f48ad96c369ef6359447b5f17e9a195cd55a166ea3bf73b43ebfcf89c5c119bc28d5b9aac41d53993c991ab634b8953be45a039862e70827b025d197568230067c7000db83212b5aca743fabd721047816c3ee68cec6fba7501a0a5f1b7570efa236dd310b267a1cf5a2566813bd4e8352f789b079a80f706808094a183665c3dc4ed391f0eb6b91d45d1079ae683599d6cb91d63a5", 0xab}, {&(0x7f00000000c0)="bd18de6a615cd4540c4bde350aa54d19a3aa01b6eb8faa2c24aa202632fb1b49c52298e07ddeff56492b05f718a886f0fa48", 0x32}, {&(0x7f0000001640)="cf6090db117c5041272bbef535561fa17d62003f495c7635afd835ddb2a485fa5de8389cf0dcc99fda1009e40ea04e7f4437ac5ed845a83071e0aebc30c2032cd10caeff85573779d6e34fb65cfe5b2d5f8517acab6a0a9953c0508459667697d0fa465122272ef5fdd50c21c63ac6acf5ba7025e7be6d7e8fcedeaeffc0e60478fba624", 0x84}, {&(0x7f0000000280)="def63fd04b64f125165a7d5b64c87e079515b4e579822115131670c8e029742e7cdbc77e3e58e3f6f9c2aa84c3ae496fa61826bc587a", 0x36}], 0x8, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000140)={{0xfffffffffffffffb, 0x4}, {0x6a79, 0x8}, 0x80000001, 0x0, 0x5}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd83) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x101, 0x4) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xffffffffffffffa9, 0xfffffffffffffffe, 0x0, 0xffffffffffffff44) 15:08:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 623.996336] binder: release 32516:32517 transaction 965 out, still active [ 624.005916] binder: undelivered TRANSACTION_ERROR: 29189 [ 624.018007] binder: release 32516:32517 transaction 965 in, still active [ 624.025000] binder: send failed reply for transaction 965, target dead [ 624.088921] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 624.110203] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:16 executing program 5: r0 = socket$inet6(0xa, 0xa01, 0x4) shutdown(r0, 0x800003) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000001200)=0x10) getgid() r1 = syz_open_dev$sndpcmp(&(0x7f00000011c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x1000, 0xcc, &(0x7f00000000c0)="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", &(0x7f00000010c0)=""/204, 0x2}, 0x28) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x37, 0x1, 0x17, 0x4, 0x8, 0xb09, 0x2, 0xa6, 0x1}) 15:08:16 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x10000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="4319768239d6a1d4f9e93db7a856e74a6ddd88e12d19825b4cb9d92acfb7341eeebc3ecfeea05d4ec0051137e87c8210dd05b80818c81bdb708d26b2273af24e530cf3aefc3b7a60bb759db81e2c8906b8acf1dbf63329118726b33aa0d65fad234728527669f84353bb8393254150834cab7bdbc7ac28d3fccab2b9fed159a0e2721e7d26afd8fe237ad5b503b56f9110e9bc2e804d80f025fc3578e029", 0x9e) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400000) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000001340)='threaded\x00', 0xfffffd63) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) connect$can_bcm(r2, &(0x7f00000003c0)={0x1d, r4}, 0x10) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) close(r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 624.152077] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 624.166813] binder: 32546:32550 got new transaction with bad transaction stack, transaction 970 has target 32546:32550 [ 624.191713] binder_alloc: binder_alloc_mmap_handler: 32546 20001000-20004000 already mapped failed -16 15:08:16 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 624.267639] binder: BINDER_SET_CONTEXT_MGR already set 15:08:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x20000041}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x107, &(0x7f00000002c0), 0x1000000000000060, &(0x7f0000000580)=""/191, 0xbf}, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "8629e4a6c0f9"}, 0x80, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0xb, @dev={0xfe, 0x80, [0x96d4000000000000]}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 15:08:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"6c6f000000000400000000000000db5c", 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) [ 624.300807] binder: 32546:32550 ioctl 40046207 0 returned -16 [ 624.333928] binder: send failed reply for transaction 970, target dead [ 624.365753] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 624.368900] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000240)=""/142, &(0x7f0000000080)=0x8e) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r4 = shmget(0x2, 0x3000, 0xa0, &(0x7f00000be000/0x3000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x5d, &(0x7f0000000100)="79e313e31150f3ff3ed3be97d835", &(0x7f0000000140)=""/93, 0x1650}, 0x28) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:16 executing program 6: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) [ 624.410908] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 624.450154] team0: Device lo is loopback device. Loopback devices can't be added as a team port 15:08:16 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:16 executing program 5: epoll_create1(0x80000) futex(&(0x7f0000fdaffc), 0xb, 0x0, &(0x7f0000000000), &(0x7f0000fdaffc), 0x0) 15:08:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\r\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 624.511443] binder: 32583:32584 got new transaction with bad transaction stack, transaction 974 has target 32583:32584 [ 624.523167] binder_transaction: 14 callbacks suppressed [ 624.523186] binder: 32583:32584 transaction failed 29201/-71, size 0-0 line 2882 [ 624.530068] team0: Device lo is loopback device. Loopback devices can't be added as a team port 15:08:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x9, 0x40800) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x10001, 0x0, &(0x7f0000ffc000/0x4000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="564a9f99da16def1df18cb101a67272c6dd754d6d9781f5196227f0ee8961f891206acd7a7d6e4f7bbc41aded35abe51863fe3bab40b065a17cdd6b4e5905755a5b94c49770e344845cf6111e302"], &(0x7f0000000280)='./file1\x00', &(0x7f0000000180)='mslos\x00', 0x0, &(0x7f0000000380)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x40c) write$binfmt_elf64(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0xbf5) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'lo\x00', 0x100}) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, "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", 0x1000}, 0x1006) [ 624.592667] binder_alloc: binder_alloc_mmap_handler: 32583 20001000-20004000 already mapped failed -16 15:08:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x10000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000240)=""/250) [ 624.641778] binder: BINDER_SET_CONTEXT_MGR already set [ 624.672901] binder: 32583:32584 ioctl 40046207 0 returned -16 [ 624.679472] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 624.690120] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 624.704843] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 624.704853] binder_alloc: 32583: binder_alloc_buf, no vma 15:08:17 executing program 0: socket(0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003db000/0x4000)=nil, 0x4000, &(0x7f00000001c0)=""/144) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 15:08:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xb, 0xf}]}}}]}, 0x3c}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/l2cap\x00') setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100800, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x5210, 0x8001, 0x7, 0xa946, 0x5, 0x5, 0x800, 0x3, 0xde, 0x4, 0xffff, 0x6}) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7ff, 0x188, 0x1, 0x3, 0xffffffff, 0xdf, 0x24000000000, 0x7, 0x9, 0xa667, 0x5d, 0x2}) [ 624.716780] binder: 32583:32605 transaction failed 29189/-3, size 0-0 line 2970 [ 624.722308] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 624.769916] binder_alloc: 32583: binder_alloc_buf, no vma [ 624.775696] binder: 32583:32615 transaction failed 29189/-3, size 0-0 line 2970 [ 624.819993] binder: send failed reply for transaction 974 to 32583:32584 [ 624.845014] binder: undelivered TRANSACTION_ERROR: 29189 15:08:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) socketpair(0x9, 0x800, 0x3, &(0x7f00000002c0)={0xffffffffffffffff}) futimesat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {0x77359400}}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000280)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="69252956eb9298f9e46f4ce6f7768139ebb6f0589843d1a07a778bf26a5d38e193c26aa0", 0x24, 0x800, &(0x7f00000001c0)={0xa, 0x4e21, 0x87a0, @empty, 0x4eeb}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000080)) [ 624.875102] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:17 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080600070000000000000084907800000000e00000018800907800000000"], &(0x7f0000000040)) 15:08:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 624.976348] binder: undelivered TRANSACTION_ERROR: 29189 [ 624.982338] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.039157] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = memfd_create(&(0x7f0000000040)='tls\x00', 0x3) write$9p(r1, &(0x7f0000000180)="82906eccd375156ad8d65e6182aad2017e2436c8798b2c4a3c1fa19662582241db7a6571e99808c1f176adb85bcf60c010cc0c43e0e19b4bebb0485f67a12c502a90e3c7ed7b9b2315ccd8a03a4b927d034150b19e133b9901c8adacace87d3ff082c65b3efa929b4dd94893c977c2036025782e7610d68c", 0x78) 15:08:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x80045301, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = getpgrp(0x0) rt_sigqueueinfo(r1, 0x11, &(0x7f0000000340)={0x1c, 0x6, 0x6, 0xeee}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = mq_open(&(0x7f0000000000)='^posix_acl_access[wlan0\x00', 0xaf603e05a498cd92, 0x20, &(0x7f00000001c0)={0x10000, 0x0, 0x80, 0x1, 0x6, 0x2, 0x7f, 0xfffffffffffffffb}) mq_timedreceive(r3, &(0x7f00000002c0)=""/51, 0x33, 0x0, &(0x7f0000000300)={0x0, 0x989680}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) [ 625.081655] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 625.208178] binder: 32651:32652 got new transaction with bad transaction stack, transaction 979 has target 32651:32652 [ 625.219235] binder: 32651:32652 transaction failed 29201/-71, size 0-0 line 2882 [ 625.283136] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.295723] binder_alloc: binder_alloc_mmap_handler: 32651 20001000-20004000 already mapped failed -16 [ 625.329645] binder: BINDER_SET_CONTEXT_MGR already set [ 625.340555] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.347118] binder: 32651:32652 ioctl 40046207 0 returned -16 [ 625.361669] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.373163] binder_alloc: 32651: binder_alloc_buf, no vma 15:08:17 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) clone(0x804000, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) fcntl$setpipe(r0, 0x407, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x402) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x2, 0x7fffffff, 0x215, 0x0, 0x10000, 0x0, 0x7cde, 0x1, 0xae, 0x15c14fbd, 0xfff, 0x2ef}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x28000111}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xc0, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) 15:08:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000003796400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 625.378869] binder: 32651:32662 transaction failed 29189/-3, size 0-0 line 2970 [ 625.382562] binder_alloc: 32651: binder_alloc_buf, no vma [ 625.392058] binder: 32651:32670 transaction failed 29189/-3, size 0-0 line 2970 15:08:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) mknod(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xfffffffffffffff8, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000240)=0x34, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x8, 0x2, 0x10001}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) creat(&(0x7f0000000280)='./file0\x00', 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 625.529380] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.564375] binder: send failed reply for transaction 979, target dead 15:08:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) 15:08:17 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x9db, 0x3, 0x4, 0x5, 0x1, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0x3ff}}, 0x10001, 0x7ff, 0x8, 0xffffffffffffffe1, 0x347}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0x2, 0x3ff, 0x3ff, 0x7, 0x1000, 0x0, 0x6ca2, {r3, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x2}}, 0x6, 0x9, 0x9, 0x1, 0x1}}, &(0x7f00000002c0)=0xb0) getdents64(r1, &(0x7f00000000c0)=""/11, 0x18) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000340)=0x6, 0x228) 15:08:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 625.586295] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.607841] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.620375] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000007fffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 625.723207] binder: 32698:32700 got new transaction with bad transaction stack, transaction 984 has target 32698:32700 [ 625.734313] binder: 32698:32700 transaction failed 29201/-71, size 0-0 line 2882 [ 625.772423] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.781034] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.793080] binder_alloc: binder_alloc_mmap_handler: 32698 20001000-20004000 already mapped failed -16 [ 625.805652] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.806575] binder_alloc: 32698: binder_alloc_buf, no vma [ 625.819478] binder: 32698:32710 transaction failed 29189/-3, size 0-0 line 2970 [ 625.828397] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 625.837367] binder: BINDER_SET_CONTEXT_MGR already set [ 625.855830] binder: 32698:32700 ioctl 40046207 0 returned -16 15:08:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 625.868420] binder_alloc: 32698: binder_alloc_buf, no vma [ 625.874129] binder: 32698:32714 transaction failed 29189/-3, size 0-0 line 2970 [ 625.894989] binder_thread_release: 5 callbacks suppressed [ 625.895001] binder: release 32698:32700 transaction 984 out, still active 15:08:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 625.923122] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.945649] binder: release 32698:32700 transaction 984 in, still active [ 625.952638] binder: send failed reply for transaction 984, target dead 15:08:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001340)={0x0, 0x8000, 0x0, 0x80000001}, &(0x7f0000001380)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x80002000}, &(0x7f00000013c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000012c0)={r3, 0x400}, &(0x7f0000001300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x1000, "98f7293d06545e64b75600fede752e036f0f1aedc1bf1ebb6be1e305a1041721bee9bd5d37fd099dbfa955e5a8772c06d92c0474555684f9e4feab207fab32c70e4bb1dd81d31ab0854494f40c33eacc9f28828356a1bd0552fe750e6b051e60909bda589de3f139d57f53f20104565d5f0be5b9b8e2c039facdf76fdfbca42a9e8e955b7906c4022ee3af20e671752a9216aecea2754354da09e9ea087ed1af669a9e976b8dcce01e674ae4cca4995019c83486f5b82815884a4f4ee7edd3bb0d5417136c33303590d4e2743e028dfd287e56bf2751c84edb999783076ca5f951203d27f565c455c6481d89967a970fe7fd80734698603454e681d983cfa59b2a8ca0e2500a00d118e038de0b16a7de75869a8d4a4a283d7ed71fe7ad973426ec77368179f81d9176c373a68a8dc2096508c3aab2716c922fc2f311d2a17dfc3e54e02756c2be2b0ae7306b611d95a00b5767333fe3f4436d2f24a2aa75874de4f470178048e9ff785feff7112fd08af23c96ece9c708f054fcdb27d7f7bb75f5fd3a74e1c4a9b9637e4aebde55816a94054f34f8cf7a68c17bd0a9cb0582fa94c6df36181a8b196c6ce5f4397ac8284ae736d8b2a55547168534382e0e6ae9798be88e32c242c326a79e5dd9c14ee00c125cb52d51c11cc182997b0644651d1d42545c7b30acf75ac2877c59ef07ced67fff53cdd7a1e72597f92b9ed6f82a311a6f0e6476db0f1ba83deb1811517c87b395c7e2da23de1ba4b05015c2eec3a03e585c5448980512129322aa03a811206f169df3b93513ee51320531e9855c47496169de77c7951769b5c5f4ee3aec5f6651a361c77f4c797c6e94e5e34e2d9734946e879d48ac9a6d2e0217d978f75dfee232d69e0354e05c6490fb29508e73b09acde9f264c899aae1839f03fd95a1f9728fca66be8db80e9fc997111c90b646e2d008137f00ad556fddddb5d12122174a35d8d61fde18e17b51f957da58c3253fd3bca3df2ac66977363c846bcaf45e44a171f2fc3d911d177d1a7eebed6fa16ed6bbf253f0ff70a37fec7c6ef733cb11f7d2bf84870144ad90fb2a9e6e6975166ae19ab8c04f707cc6cf382711f365a064c78d8b645a6af624d9ebcc5ed09ec602fa1310b4b2fe19ee52a2bf1741f7fd80ae1c96739ea9969b8f4ffcfa325e960b03b80efb5c0cdac880c9f96c5ac8bca8023fac1b7b99423894998a6478ff49a2ad6298972db25b79ab8cc1c4b432c2deb8b0dbc683ba55db9a4cff646e93805c2bf32f7a185402ef1dbe32b697365a4c3f5685938a8dbcb4251dff3ce98220c8528991c875e97a00e72cb128e71e7a22b3fc57ed30d1f81a526503b616932eca7dc1d5983d07d88c80c9e2cc955912299ac4933427a2914e2df8f961c72fd326651aac5fbbdb08f5d39ce980f2bed666a5355a156bcf1a6e856e7602be130129115dd9f0f4e738e60ac353e9559f4dc80f36e2cf4583a9abd43a22a09ddbf4d3270951b10bf8c8cfe627ccd9702c53f453bb2fd2374c791f33b7c0dc59955379b05a14f1352625ef8a971ed37931b164e3a4a034935637799f78f32a86c9d6211edd4fc7c4b8845b49e51511170dc62b7cd040b43cde03703c994f62020c8e162750b5edd817ddffdf435e20d48531741560071ecb4a5933d8a21a7afff89f39c406eb9cfd3f52b0a25f095fa33b25828fd1d60b45e37e5fe43659495d7b8c02c0fba8f15b5ed40ff3cb5d60b5f9c604698116b5f4a297d4b6d158557c2f27fc1cff8c2cdf092531512b8d9b5a39bf9d8d24a8656e5aa5a006ef2c9fc7d58fde792536076bdaadf723579099190848d9ff313cf1d26f38313ee51c160f9573096bee61a838bcb9e52f400417ffe17c66c52446e2ce2276e24ed2153b7bdf030fe6a7ac2f43dacc669ca1aff3a86b8d253835e11535e2b6201a28058748909b93ff9b65efa5101c07b1c78ae690262e9eaea941a932badc5d471643e6afde0fc13e8d85f3b356cd5512fbb19059008d3c33bec354966fb26c4fdc3d907e6a91342c245b642aa613d9fcd20e7542bca0a178702266364078e64a2cc4825fecddd3e4286904bea05d29eca6fa0d7c1f5a44b39bc22cacb0396f5cf330cbf43555f1f898fb2e0af691b492e888ef8bd67c6652a19317b99bbd4b4e5167771e7b0111271eed1e4fe85b8dccb81813bd42f742dbd01266d963f4ff5d260da72c47d2c69bd5c979f8abfcb9fb20b1b17021bf0dceff23894aca0be7de29a1cb46d208e280728302bed717497e375207fa5245a84540bd17fe5d4851d412a36d07a9949e831126d5fc6dc9c1e46e115b279558abc9e16aaa734ebbf141d36827c285fa56a7ff5b4ca1fa8ac38513f0b31302d2637d6e5fbc3f2c76000dd2d80b26ac7a3e9748aff97abc5f3c036dafb7c230cf74d9cc59efba621fb351f0fd943e19ddbe7fc738e61ebb9bc2cb5f3ddb8f25185aa425dda6e2c11099c23c08fd1a0a36819469899b448aaf19b2ba13045125a96b5100b7c778632a6a57ad6387e72b10406c3d3e90560c4c60aa58b10bb244fe91e3fd2a3302cd483fc32602758f4944b73e84c26ec4ad73e8caba87c3a0f24c3b48b28bbd1c907fb28a53752ee0971ddb0d5b2c029270fc5d136cc5fb050570950729d7f25d64771e39aad61add8931bfce7b4828f1ac556ca965abbd754f8394d0bf02f844359f07a6008420f09a9ec49a2b89a3672c34eb3146ea68093febbf7aede22a6f17ddd8959a4f6c931611b80a299da2960c9212a2bdc68076b3d2b273785de4dc31dd796509f5f8475ec3ce0f3ebcfeffd66ad17adcd78ebb6db78c68c0716aa0fb19e3d90e45edb99fe757e7291990fcb017239574cd62fda8476a4058bd1f0af6f6fff5f04b926fe25ad58fad64e26d8c3c273c6622a64488cd89b18fa374d0cff2978c6fda10f79017e2ba4c02e9d35ff634e6be337e95e98ef75300b06f1efe1dcfdbfb867bf8f5e345d443e095b4ad45129b124201055dfe707da072e69e50bb4bae7be3e377071798b4f54726dbb8f144d651be945cd4cc0d90e0e1218be6abb293b70dd80548161f6a9a39fba441ee9a2858b2f542afa86dc4bdb4d46d72141214d211313a11226c32fef0a00187615c0fe8a249bed8bf56f8c7409c00df5d6724462ace2a0b5256c49a4e5a52a5f2c1e877641c8da00a8daf79e92f4dbbc7aca4e3039a13b6c35f8bc40d12642abe9ef6c9c258ef8b0264c546e559bd72b125f66d7ff30e78e6dfb2ef5237dc6933fa6ca5a70dc23e5734a2e89c1e448d3f8e173afb61bf22464c51e976c2306c91bdf6ca4a6a350feabb0897f3e4abe4f9b971eebb4e89cc6b2360dc9cf4f9ce17cf8aefffd7a1a16135458b0a59f8de189cbffe9a292d159d6badbb30c9f2eab066a35f8695277599fa95df2849f323f8b56ad9c64ddea18c0a91534ea5cfffce766c1a7aadcb52845ed1f557558b24f379ed9d86928d608bb5c8f0bf47456ad0277ed9ce1736aba72a950af04d0579a59a06e6027fd2f0988dd241f03248554b07cdd003a01dad9f2315c792938ff2ad98c16d9855b72c65a4b8391d505c81a6f9f28e4b0cdafe753d4d6dee7c2a420353394635556f01440d8d62e97b65508453e2bdedf5a7e12b5a5810d42e68b9e39803619dee6c860d66735ee79cf5ae5eb96befc8b6ce77aeaf0dc25316bd494f6acc3cb7040a1c67d1e42228ef95c3088e2d3e50b9f6d037ab7c1efca6ebefcd0dc0d5816fbafc77f0e2a96d78e535055402e2a5dfb1fa9e4ffa51300198e4823dd57e6f7e253f58534797c8fba9ea58de739d575c366c99df0b42c26da4eccfaa71f29672a3af9758a2b18a0c03d0368f8b309f8cf08bd008553ad65d9701b57ea262bc451f4d435b1fdd31cb06f7bd7cebc57a5f549efd296eb3627b18f307dfbedaa909e834cd0abd4fc237d47d8cd5f07462da045f9929626d0e8bc37094bacb04c0851efc6aa83b3d0eef038b9e123bdc8ff42e2e583dd5ceffe95bc3b7a9990d8b1700fa37eff4a66a27d45b7acb0f677e2b8f7613bce05c8e3458bd5b029c6e89db6c92d63a731ad4b8417be746348f95a78f0c812c18ca7ce56246e8fefcac325f31ddb0e99bce56d8101eea3ab367e344ae11301ad97fc7b20524c41d8ffd436401f847f0387013606d2aa2780820e8a58e10fb60ea3a7c73e0a3a3c9cd2fece028a28ffabba737bb3bbbbc599970ca381404e4dce4ad0b83ea1b6cf58d2659cca18ef67dc48603c948476859de29f7e4bab848d93a472625efffac2755b2125900e0a98e7cbd59327be76a74fa3888755b6d939fff15a44e5bc8f67a737706ef3a9015621921b453f593981394991bf631c52700b22c8b1369a826a4f83e5c62e5c7bc2a7ec500473ea7ca857a9cada9c5a01d4db78739fa1982f33c38a7bc3658f41accf6fdadeab5feb64d91e87b64dae2cf23a86297fffa44cf218c6ae405a9d41a0f8f0245e135e799cbbceaa1da415c3708fa6ffdbe91f3b7ed9c515650cabb77a379c01cbc6163de2f0c57b411dbb0a855b28c87d0aabd956eb5c024f2c2f5e1e083132a1136e831d0081ee8e2b15f4d0b18b74e22ab09c97c2f1ae084348cf5c7855225f0b8ef706fd732060bc740ddf0cef4889cadcb853ed74ea71d24130b90710343d00f47de20c5ad0e48c69ac0b5d13e2afd1e4a91db6790ab2c24f2c635518a21a71e915782aa1203f77a0b986b9cf07f4b55aa123a7551df3a44742046dde3f7910a27251169739eb000e2f02adde141193b4686885f23a696dd93aadb9c7abe0e78a557e3b09b82c196f21d7c390488715b49b98151516d9960448b0b60b6519a8b98570bfd1c5e13330111efdd8eeba0a5ed9032d84801a2d5784c2cae6496d2190cbfc7551a7ce5c6de78580007f47479bc667b9e963221a3b2eb1c6f8744c94c9203c9fd4b67b4ff4421faaafff98d581fe72e7c3a7e1abf6149e9da6e905e4195437ce4135f8e9664a6ce464c052b157d0dff6d1b9708040f301561e155f5c650448d5ec0f4352e1f74f6caed762373b211ab4fb18d37eb55947b5c08fa66b9dba32a4c32c8bf3109ceaae35c0d0bc28b87e5a904dfa58571885cf2a0b9c893bd03f1646d369af28d4d5b8d0409e791b74e7ac47ccc9f91a9716ce73713bc00a5bb80c0e89901037132aaf041c819d66e20ca5ab78abd52ab54379eed587e05f35c4d1b6d489f5e87453d37ebc9bb43b13d504a5a7e44daf02c8fb5ded62a486f720bcf86f1c742f3c603b4e85fb0540d48f76f1250d5dae1aa6e56aef2aa73300af86319fa0c0473d5937e07863f0e1cb39033e25011881a53b0fcf0e12f74f1eba3181e15bf76f76a4358d82d2252f983dfce3a632a490e081f8f6309668ff4ad1956212c73b8ad64e3a2e9b2ffb35bbef94d83b3b72a10fff709f5ffad0ba5831ac938943f963861ac33ab2ba56f8257d3452cb6fd4b26d153fd084dc6fb32fb5e18af10a7e6626257517a3c679318fcdb400b8b5aadfe1dbf5ed0d4182f6fd81427d2c49239515f43ab12343206918122116c14bef3c9a6833412e8e6ab2df1cadd5dae05c8ea17f1281e38ad28172ed29ffba78c137fce22212f7dd4e269c3a7c3e80b7f27cb1a0a70f6f71170cef8d22e751dcf5aedce627d72f6d755abf0f992f1d4e6c8f75ee472de1f4ef42cb15b49d1b25b518f7f3649d0a211d76527b1ad92f684139909303fe890861c0424c4eb1ac1ea38c32418a8efaa472e11c0d8fa4a202a08c166092784d78323f56f4baf8843d0"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x80}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{0x0, 0x10001}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{0x0, 0x100000001}, {0x80}}) 15:08:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 625.980386] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.018527] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe85) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 626.065214] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.080466] binder: 32726:32727 got new transaction with bad transaction stack, transaction 989 has target 32726:32727 [ 626.091432] binder: 32726:32727 transaction failed 29201/-71, size 0-0 line 2882 [ 626.171907] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.190423] binder_alloc: binder_alloc_mmap_handler: 32726 20001000-20004000 already mapped failed -16 [ 626.224010] binder: BINDER_SET_CONTEXT_MGR already set [ 626.255384] binder: 32726:32727 ioctl 40046207 0 returned -16 [ 626.284493] binder_alloc: 32726: binder_alloc_buf, no vma [ 626.311432] binder_alloc: 32726: binder_alloc_buf, no vma [ 626.325316] binder: release 32726:32727 transaction 989 out, still active [ 626.346130] binder: undelivered TRANSACTION_ERROR: 29189 15:08:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x10) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000480)) clone(0x20020000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() r2 = dup(0xffffffffffffff9c) getsockname$netlink(r2, &(0x7f0000000440), &(0x7f00000004c0)=0xc) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) sched_setscheduler(r1, 0x0, &(0x7f0000000180)) waitid(0x200000000803, r1, &(0x7f0000000240), 0x6, &(0x7f0000000280)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x6, 0x100) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x6, 0x0, [{0xfbb, 0x0, 0x7fff}, {0xfff, 0x0, 0xfff}, {0x8bc, 0x0, 0xffffffffffffff01}, {0x879, 0x0, 0x80}, {0x34b}, {0x0, 0x0, 0x4}]}) r4 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x1, 0x101080) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r4, 0x1, 0x1, 0xd2bd, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x1b1) bpf$MAP_LOOKUP_ELEM(0x8, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/119}, 0x37) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000340)={0x100000000, 0xd4, 0xfffffffffffffffc, 0x80000000}) ptrace$pokeuser(0x6, r1, 0x1, 0x200) 15:08:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:18 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x40000, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(r0, 0x0, &(0x7f0000000a80)={{}, {r1, r2/1000+30000}}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) 15:08:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xfffffffffffffe1d) listen(r0, 0x400) socketpair(0x4, 0x0, 0x80000001, &(0x7f0000000040)={0xffffffffffffffff}) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x2, {0x1, 0x0, 0x3, 0x7fffffff}}, 0x20) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='tls\x00', &(0x7f0000000280)='posix_acl_access\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='\\vmnet1GPL^\x00', &(0x7f0000000340)='tls\x00', &(0x7f0000000380)='tls\x00', &(0x7f00000003c0)='tls\x00', &(0x7f0000000400)='wlan0^,\x00']) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 626.366403] binder: release 32726:32727 transaction 989 in, still active [ 626.373332] binder: send failed reply for transaction 989, target dead [ 626.437981] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.457352] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.487670] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "0d8de47106006c9cdc33eee93d4818424696cffe09c25ed1d5a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d100000000000001000"}, 0x65) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0xffffffffffffffee) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xfffffffffffffffc}, 0x18) 15:08:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c52c8db8c63cd210cd77496aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740", 0x0) r2 = memfd_create(&(0x7f0000000380)="6b657972696e676c6f00f9e33210d477f0fbca82bfc24b1c95aa5076be6e8bd7af0c6eddf0182722feff2b9a00cef0fb6984e56060deb090815d9ef9fbc9febcd2657d98065f630f14bce0d32e2c81a5bf34f60344d5d17455fd1b7f26602b74c3463c13bfbdc263e8e6c0e4fdb0b353d96e05f4afdaa5e9a2311e0b0437b3d7794fd33ecc811f6db806da54ef2b3ac66cdb41bdb6422d389ef53b016cb127cbae7c676758e1997524ea6f57fe8e3158a0b89339f54d6d86b3f1d5eb4e932e4a22b6da0d1d3eaff939d9312019fc9882c37b64cc3ff3e001281c7623c89116a7dd8aef6a2110b5c822717d7f9d03016128ea6e95a66f6bb417583bf0dd54d1cd015b30f296d8f6e5ee438b267cf4039a905f6a8309927696e6dcfba61b16107585a2a188ba10ea576bd699bc9078d3edeccfbdbfc55f43dd89399ed35844e77bf95ba79f17bb93bf85e16cf62a13b52c25c252b7e4514f011c9da6b2cb7f1908fe58ce657216b2a5190e0a727099ab0d83ccdddbaa6792f2bebf9a8b716b3dd88d1590c1d4fcc1e818dc823246d6d59e449fcff4970ff888ef63c1277d76c859f6eba08c013d2bba0d79187403bfe45d22a2b8dcb5ff679e748156c57b3265256f7397f6c18c9122db5bdfb67076ee1a04dccfd32699aad47199bde505", 0x0) write(r2, &(0x7f0000000300)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0x7ffffffffffffffe, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000280)={0x101, 0x1, {0xffffffffffffffff, 0x1, 0x9, 0x1, 0x6}}) sendfile(r1, r1, &(0x7f0000000000), 0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) 15:08:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4200) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) 15:08:18 executing program 0: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mprotect(&(0x7f00006e1000/0x2000)=nil, 0x2000, 0x4) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)="2be265f152235099a3742d057c61b1ff5ca2db35ef104144f62e81f374aa385bd4231d66452a58a1f67246e29a8fff3caec4bf93045a0d09362481523499ad4308e82fbfd8646b06f1b1f8a0393bec3b623ec6d2d942f19df57589f83e79c15a68969fb001ad6348c399c2b9143eaee951a83681529dd08d328af2fab1954e08963dcee6077a79758795a562919c24c80feae70065204de8f402881222041f383ac64f7af6852af62003d267445ee5905b45c205de824acd3292dff9e42551732928") ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x0, 0x0, 0x3}, {0x24f, 0x0, 0x1}, {0x1df, 0x0, 0x2b}]}) fstat(r2, &(0x7f0000000140)) 15:08:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000003aab000", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 626.591106] binder: 310:311 got new transaction with bad transaction stack, transaction 994 has target 310:311 15:08:19 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xe40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18}, 0x18) [ 626.654236] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.671636] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.682157] binder_alloc: binder_alloc_mmap_handler: 310 20001000-20004000 already mapped failed -16 [ 626.710471] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 626.727698] binder: BINDER_SET_CONTEXT_MGR already set [ 626.733995] binder_alloc: 310: binder_alloc_buf, no vma [ 626.750602] binder: release 310:311 transaction 994 out, still active 15:08:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000001e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x401}, 0x1c) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xffffffffffffffff, 0x400000) socket$l2tp(0x18, 0x1, 0x1) bind(r2, &(0x7f0000d01ff0)=ANY=[], 0x0) close(r2) flistxattr(r0, &(0x7f0000000000)=""/136, 0x88) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000140)={@loopback, @multicast1}, &(0x7f00000001c0)=0x8) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x7, 0x7f, 0x7, 0xfffffffffffffffc, 0x2, 0x101, 0x6, 0x5, 0xad8, 0x10001, 0xffffffffffffffff, 0x1, 0x1, 0x8, 0x232]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000340)={r4, 0x82, 0x1, 0x2, 0xfa9, 0x7}, &(0x7f0000000380)=0x14) 15:08:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000004000) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x100000000000001, 0x43, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba694214aefdec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000098add1375f51e135848fea98c6e3574511e0c61ff22ff61f0000000000", 0x2761, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33f) openat$cgroup_ro(r2, &(0x7f00000002c0)="637075616382742e75736167655f73797300564f2b1913679cfabc7112d19b94e7bde51d2559f5e7a110d690702a3fd6293129d5dccc7d1deaf1cdbf834342a60b951351575013aba1e6fb7c82521e9ad2238d8206ed35d69a7ff8a16381c72ed23295cbab23cb3ab9b400df5788428ce2df3f74a51b54bc254764747e31244ab11a78e9331c9a18ad6116f1d3ed5861fd4be88371f9e82fe04798908bb6ac5c7f12ada64018e346199da67ba6ddcdb06a423094623f048c7f26fa6125", 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/77) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet6_buf(r2, 0x29, 0xca, &(0x7f0000000380)="88f3d57a4918d074a235cb3bb20c2294a89b665d58daf25022ea69877ed11f3bc8ec6f29222741e23ca266a9e41896c33eba9775bb26b7b7ee6ffb7996afca2689fc171be08e7673c515f9992ae6444b6841a32f5b3cbb0e567b71227c558cb21f22310b36f6413811a8a119c24989a6fe1785609c926483da575af06475e0db9d8e55", 0x83) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001580)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x50000, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x20001, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="66b8002000000f23c00f21f8663501000a000f23f80f01df0fc7f40fc75c020f35d972030f015b0e0f01cf3ef40f01ca", 0x30}], 0x1, 0x10, &(0x7f0000000180), 0x0) [ 626.760355] binder: release 310:311 transaction 994 in, still active [ 626.763915] binder: 310:311 ioctl 40046207 0 returned -16 [ 626.767110] binder: send failed reply for transaction 994, target dead 15:08:19 executing program 2: sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000016c80)={&(0x7f0000000040)=ANY=[]}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x3, 0x400) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x6dd4}) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000040)="c37530f8c4c812490ac0d6faba0c35af20d5435a0a70f702e3543fd75452585602171f430335f190623b6f9f68a09d7e5e436fc1d0cd402c5aea45253f1a2f6587a91dca8fb37295516f9aa9b886e9499fb182d1", 0x54}, {&(0x7f0000000200)="c58f1072cff891106144e95da815fb0a3a0aab2b815c56c60e9dd3254e07819db359fcafa6cb2d1bcea6619d064ff79ce9299af234f6b6c4d2b3ac373cf787262365b9fdc663999a583060f12accc8bd4f885a88dacba3b66cdd5b211f30d56fda8360c99e072531e02db9893ecd269dfc00de0822368aac1d35a18827724b8a6f4ef3de8c4db5c0de7172e4571a1117d892f96b1171949ff6d9", 0x9a}, {&(0x7f0000000340)="96a1582e04e5af18ef853efa62a11a091dae39bb92a699970f51b1b9ed4c4fe1dfb8008f953cdbe5872c4a3db78285fe1977fd3fce3fc52611a43b168af652709d83073cd6e590e3b686563f6137f2a6e1244e24b99199f6b0e8ab7081add0f7ff27662d3bb19782a2715f75f96626ba59f2629d70c3375b7803340bb73f586d2606b1d42e4ebb315ccb351a97c48e56655aafdfa20c610e49fc1ff467e112ea07b6f719e61f6a00a27491c79c188c0b86d682bc1b9265f19b9b53e12c", 0xbd}, {&(0x7f00000000c0)="3d683888dc97dec2eca04b08bf5366c7db07b77e6fbb205f65b65a3c56ffa6ddc1bac937e0bfead1ef", 0x29}, {&(0x7f0000000400)="d3c0f9524aceb9058e99182f00ff49d382567222f65f100904423bbc9a0d13e73be7742787e47dff4326444978a6a5dfaf8557e91af414ebf530d817af97f226983b0df7a4087f5f74f88866b5fc7761bb54c24b2b7562f6832f6cd0975b2d42bf90a47d8ce9968a6384805871fde48d2f2da3060092ba552d51873189353c6fe6b1a595c0127171ed12ac518ed721", 0x8f}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="4b99407948e4db5f7c2e46762f18f27231d032af1caefd053c247d5e8f6b32cae7082846955c7338d545e571262307024a0e03908b38924c0651b1082f9e5ef09dab5c600a59370c0083f9355732f0abbdb9c52f2d55c390c01e77e79b", 0x5d}], 0x7, 0x0) 15:08:19 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000380100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 626.884684] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208040, 0x0) getsockname(r0, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x1}) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7f, 0x40) write$P9_RREADLINK(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000017020007002e2f66696cff30"], 0x10) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xcd4, 0x111000) getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 15:08:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 626.945832] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000c265, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)="6272696467653000000100", r0}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"62726964676530000000000000012200", 0xfffffffffffffffd}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000600)={{0x0, @rand_addr, 0x0, 0x0, 'nq\x00'}, {@multicast2, 0x4e24}}, 0x44) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d11c35b268d75df403851dbb5ff98c15b0202962cfc8c6145567abba6d7078ad0d969a9bb04a2f93a13dd037356cad06a27a6cbf551da58279020c519d257029da514dc78799df3ba114d3a711d48e7f28a822bfd94a014b46af5b0dc0ffe7682396aec38a5b1d377f329d66aa6c36af3aeefd9c0a950d3d816eeceb"], 0x1}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000480)=""/116, 0x74) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240), 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000800)={0x0, {{0x2, 0x0, @remote}}}, 0xfffffffffffffdfc) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000005c0), 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, 0x0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bo\x00'}) 15:08:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000500)={0xc0000002}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000480)={0x20, 0x206f, 0x7}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xc000000000000000, 0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x200, 0x40, 0x1000, 0x3f, 0x4, 0xd5e, 0x9c64, 0x9, 0xffffffffffffffff, 0x3, 0x85, 0x3, 0x6, 0x5, 0x9]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x0, 0x30, 0xdc30, 0x2}, &(0x7f0000000380)=0x18) r4 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r4, 0x9, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000005c0), 0x7674b943ea2f8561) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r5 = dup3(r0, r0, 0x7015d98ad3c6d966) write$P9_RMKNOD(r5, &(0x7f0000000400)={0x14, 0x13, 0x1, {0x80, 0x4}}, 0x14) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000440)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000040)=0x4) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000740)={{0x0, 0x7000, 0xd, 0x20, 0x10001, 0x200, 0x3, 0x3ee, 0x1, 0xffff, 0x100, 0x9}, {0x4, 0x1f000, 0x3, 0x200000000000, 0x6, 0x3ff, 0x8, 0x27d7b03e, 0x5, 0x0, 0x4, 0x7}, {0x1, 0xf000, 0x1c, 0x5, 0x3, 0x5, 0x624, 0x4, 0x100000000, 0x5, 0x401, 0xffffffff8cf91f21}, {0x105001, 0x10000, 0x7, 0x2, 0xffffffff, 0x6, 0x5, 0x10000, 0x3ffc00, 0x2, 0x7, 0xf0}, {0x5000, 0x1, 0x0, 0x7, 0x3, 0xd280, 0x8, 0xff, 0x80, 0xfffffffffffffff8, 0x400, 0x4}, {0x5000, 0xd000, 0x4, 0x7ff, 0x8, 0x67dc1cc3, 0x3, 0x9, 0x4, 0x6, 0xff, 0x2}, {0x12000, 0x100000, 0xf, 0xfffffffffffffffa, 0x2, 0x6, 0x100, 0x8, 0x5, 0x4, 0x100000001}, {0x2, 0xf000, 0x4, 0x7, 0x1, 0x1, 0x7, 0x3, 0x7, 0x8, 0x5, 0xfff}, {0x10f000, 0x4}, {0xd000}, 0x20000010, 0x0, 0x2, 0x10, 0xf, 0xc00, 0x2, [0x1ff, 0x20, 0x5, 0xfffffffffffffffd]}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000880)="2f93875e73ed0c9e1a4825d4070e58a7918055720e0b8baabd89438e8ef60fddd788b9ec6b607ac322c120613b2a21dccc3ff49f6cd71d88a4ba73643751fe5c4a2fadd6dd144c8b29ff4eeb370a4fdb2bb3ca15b430dad5774924d27097304eeff99d059c0ca13cdf02621cf045720a1a6343497b788e7eda24d5b52a4a68ef4c34f47e3192939aed5d9a055542c3b9f24214044a7ffadf2e900c4053eb4133ab76a91a86270e9125b598ac396e65e012b4d52ee1b7b214eea6fead038f2de55c83a68f2e49fcd2cb9bf4720dbcf3beeb757c7192a11391c39436cd03d144f51e2690d78d72922bf7803aa427b8f140343166e85f107290574c6f9209035b12") openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x101000, 0x0) [ 627.034239] binder: 357:358 got new transaction with bad transaction stack, transaction 998 has target 357:358 [ 627.051596] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 627.062459] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 627.087932] QAT: Invalid ioctl [ 627.101120] binder_alloc: binder_alloc_mmap_handler: 357 20001000-20004000 already mapped failed -16 15:08:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='gfs2meta\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa33c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 15:08:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000e0c00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:19 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 627.170055] binder: BINDER_SET_CONTEXT_MGR already set [ 627.187490] binder_alloc: 357: binder_alloc_buf, no vma [ 627.228533] binder: 357:358 ioctl 40046207 0 returned -16 [ 627.250783] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.259262] binder: release 357:358 transaction 998 in, still active [ 627.260001] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.265843] binder: send failed reply for transaction 998 to 357:358 15:08:19 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000340)=""/204) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000100)="747baf507d39fbcdf08a93a2cddc08de0a48d3eecd4af1848ee8812c7c4cc0fb6f2e6e", 0x7f) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000600), 0x4) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/174) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000004c0)=""/116) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @local}}, 0x8001, 0x8}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000740)={r3, @in={{0x2, 0x4e21, @local}}}, 0x84) write$FUSE_WRITE(r1, &(0x7f0000000200)={0x18}, 0x18) 15:08:19 executing program 4: r0 = dup(0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r1, &(0x7f0000000200)={0x18}, 0x18) [ 627.286911] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 627.298411] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 627.325070] binder: undelivered TRANSACTION_ERROR: 29189 [ 627.325794] gfs2: gfs2 mount does not exist 15:08:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 627.351071] binder: undelivered TRANSACTION_ERROR: 29189 [ 627.360384] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 627.386697] gfs2: gfs2 mount does not exist 15:08:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000000380)={0x101, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x105900, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000080)=""/32) [ 627.456526] binder: 400:403 got new transaction with bad transaction stack, transaction 1002 has target 400:403 [ 627.747500] QAT: Invalid ioctl [ 628.205591] binder_alloc: binder_alloc_mmap_handler: 400 20001000-20004000 already mapped failed -16 [ 628.220412] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.220417] binder: BINDER_SET_CONTEXT_MGR already set [ 628.220438] binder: 400:401 ioctl 40046207 0 returned -16 [ 628.226874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.227084] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.233934] binder: release 400:403 transaction 1002 out, still active [ 628.237876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.238076] device bridge0 entered promiscuous mode [ 628.250039] binder: release 400:403 transaction 1002 in, still active [ 628.275906] binder: send failed reply for transaction 1002, target dead [ 628.286654] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 628.299904] bridge0: port 2(bridge_slave_1) entered disabled state 15:08:20 executing program 5: syz_emit_ethernet(0xffba, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08060006080006040001ffffffffffff03000000aaaaaaaa2ee2ac1414aabb444bd3cc552720067d22ddd2ad70d8ce35b4dbbee732570100000000000000fba1a4859bdcab4e4bc1073d18ad75bac6a47be72c5fdf8ae63d459860b2fe72b537fa2849cde7173177247ea2f169494d247e8bfd7a918c9470758413d4a305805607bca39fd476d4ab41404ac92f0d25d4dd28e24802af11c781e7425596297271db38172f7eba4da439dc5e422cd8e53d69c72da1a25c72b8a702d3228918fe56cced8d4973d5da543b91b70fc05cac733a81dc47f86e140000000000000000000000"], &(0x7f0000000080)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffffffffffffff00) 15:08:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@setlink={0x44, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x44}}, 0x0) 15:08:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x6000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e23, 0x6, @local, 0xfffffffffffffffc}}, 0x0, 0x20000001, 0x101, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0x492) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000380)={[], 0x0, 0xfffffffffffff000, 0x7f, 0x0, 0xfffffffffffffffe, 0x0, 0x1, [], 0x4}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:20 executing program 6: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) munlockall() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) [ 628.306466] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.313082] device bridge0 left promiscuous mode 15:08:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3ff, 0x200) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000240)=""/144) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180), 0x1ab) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000380)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x6, @remote, 0x8001}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x2649, @mcast1, 0x200}, @in6={0xa, 0x4e24, 0x8, @local, 0x100000001}], 0x84) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a0000002700000000000000950000000cb44e6fbd56af204c807619b4f07f8c6c43ad7a1705000000000000002aa8b81ff2b6aa3b28b9f3500120488e8c5d7ee114f4ad91a9a0174c868bdd9c811d845b1244c945efb8084a31e398f847cbac632b27e307141fe19196370f5333294085d145105d0d7fb1c90832"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xffffffffffffff39, &(0x7f0000000340)=""/207}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x2}, 0x10) [ 628.355334] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 628.382929] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 628.653375] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.660246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.667044] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.673440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.680261] device bridge0 entered promiscuous mode [ 628.687096] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 15:08:21 executing program 2: r0 = socket$inet6(0xa, 0x8005, 0x1) ioctl(r0, 0x8914, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800130000400300"], 0x3c}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x5) 15:08:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) 15:08:21 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80800, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x87ef, 0x200000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0xfffffffffffffeff, @mcast2, 0xfffffffffffffffa}}, 0xfff, 0x8, 0x20000, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xfffffe58) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x4) sendto$inet6(r2, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa8b9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x84) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0xb3) 15:08:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 628.703017] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 628.728613] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. 15:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)=ANY=[]) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000680)={0x18}, 0x18) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000480)=0x60) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000740)={0x0, 0x0, 0xc92, 0x0, &(0x7f00000006c0)}) fgetxattr(r0, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6bd1bdb5df82abf63f9903d677fcef84587ec411327d396ea1bab318b28cf7eb39a2b13487a44612f20177cdbd0c7f196d78cae9d448c5390b598d64d3ff995e2b4c7", 0x70}], 0x1, &(0x7f0000001080)=[@iv={0x20, 0x117, 0x2, 0x7, "c5ab0f165fab8c"}], 0x20}], 0x1, 0x4010) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=@random={'os2.', '#posix_acl_access\x00'}, &(0x7f00000004c0)=""/116, 0x74) vmsplice(r1, &(0x7f0000000000), 0x0, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000008c0)={0x0, 0x0, 0x72feb984, 0x0, 0x0}, &(0x7f0000000900)=0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={r5, 0x10001, 0x1, [0x0]}, &(0x7f00000000c0)=0xa) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) fchmod(r2, 0x81) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) dup2(r0, r4) [ 628.806193] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 628.819042] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 628.832849] binder: 455:457 got new transaction with bad transaction stack, transaction 1006 has target 455:457 15:08:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0xa0000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080), &(0x7f0000000180)=0x4) [ 628.863006] binder_alloc: binder_alloc_mmap_handler: 455 20001000-20004000 already mapped failed -16 [ 628.873162] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 628.895333] binder: BINDER_SET_CONTEXT_MGR already set 15:08:21 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000ef6b0000000000040000000000000001e000000100000000000500000000100000000000005ea26a000020000000000000008fd4d3f306428e9a2edb34ba8cb6c6b4fce9333cc1c9c69e99d5f132acde00d573a79532107dc489a90bc13df339", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) sched_setaffinity(0x0, 0xffffff55, &(0x7f00000000c0)=0x5) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x5) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000600)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000680)={@remote, 0x0}, &(0x7f00000006c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000700)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000800)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4008214}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@polexpire={0xf4, 0x1b, 0x220, 0x70bd2a, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, [], 0x1c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e21, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0xa0, 0x0, r4, r5}, {0x8000, 0xfff, 0x6, 0x8000, 0x8, 0x3, 0x2, 0x40}, {0xe2e, 0x7f, 0x100000001, 0x9}, 0x0, 0x0, 0x3, 0x1, 0x1}, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@remote, 0x0, 0xa}}, @replay_thresh={0x8, 0xb, 0x1f}]}, 0xf4}}, 0x80) recvmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000000440)=[{&(0x7f0000001080)=""/251, 0xea}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x7f, 0x80, 0x5, 0x1}, 0x10) accept$packet(r0, 0x0, &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000) 15:08:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffd, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0xfffffffffffffffa, 0x4) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/128) ioctl$sock_inet_SIOCSARP(r0, 0x40096101, &(0x7f0000000300)={{0x2, 0x0, @remote, [0xfe, 0x60000000, 0x0, 0x700000000000000]}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}}) [ 628.914771] binder: 455:457 ioctl 40046207 0 returned -16 [ 628.942455] binder: undelivered TRANSACTION_ERROR: 29189 15:08:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 628.961114] binder: release 455:457 transaction 1006 in, still active [ 628.967860] binder: send failed reply for transaction 1006 to 455:457 [ 628.992530] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.050688] binder: undelivered TRANSACTION_ERROR: 29189 [ 629.123640] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.163373] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff78) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) recvfrom$inet6(r0, &(0x7f0000000040)=""/95, 0x5f, 0x40000100, &(0x7f0000000180)={0xa, 0x4e24, 0x2f133769, @ipv4={[], [], @broadcast}, 0x20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:21 executing program 6: socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x8000000009, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x100000001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, 0x7e7, 0x82dc}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0xd5, 0x7fff, 0xdf9, 0x1000}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) getpeername$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) 15:08:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000240)) r2 = gettid() write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) tkill(r2, 0x1000000000014) 15:08:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:21 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xfffffffffffffffb, 0x0, 0x3, 0x0, 0x0, @remote}, 0x108) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000025c0), 0x0, &(0x7f0000002680)=""/184, 0xb8}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5, &(0x7f0000001540)=""/117, 0x75, 0x5}, 0x40) 15:08:21 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'eql\x00', 0x401}) r2 = getgid() keyctl$chown(0x4, 0x0, 0x0, r2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 15:08:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000feffff0700", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 629.221394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 15:08:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:21 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000007c0)) ioctl$KVM_SET_PIT(r2, 0x4040ae77, &(0x7f0000000640)) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x101, 0xf4b2, 0x30, 0x8, 0x400, 0xec8, 0x7f, 0x11, 0x2, 0x5, 0x10000, 0x5}) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000140)=[{{0x77359400}, 0x5, 0x100, 0x5}, {{0x0, 0x7530}, 0x17, 0x1000, 0x4}, {{0x0, 0x2710}, 0x17, 0xdc, 0x5}, {{r4, r5/1000+30000}, 0x0, 0x2}, {{0x77359400}, 0x2, 0x80000001, 0x6}, {{0x77359400}, 0x15, 0x3f, 0x7}, {{0x0, 0x7530}, 0x16, 0x3ff, 0x9}], 0xa8) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000840)=ANY=[]) [ 629.326008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 629.333519] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.335765] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.355412] binder: 506:521 got new transaction with bad transaction stack, transaction 1011 has target 506:521 15:08:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x5, 0x40a200) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xbb, "abeb8e6e7b85c529b84191d95326c59d518f2e4e86bc5fcb7cda728925f663308911f49074b73b819ec461ab381f8197c89fcdaef197899831c77e810be2a2ec977a1e4b2f2b1f815cc7b5a749eb9483ce258c755d940bc303335a41da7d2bb8400e338eb347d066fd56f04012dae4139e9326006e88f4415ea78b4a9cc772ce36f2b225f29031b4685c954e69f8943678db8ba613e8cb71ad9f43b2c4dd3010340d6861f14e915eb6dd750b3c14f56d539d5136a1e97a168bb06b"}, &(0x7f00000001c0)=0xc3) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380)=r2, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x1) mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x12, 0x5) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 629.387156] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\v\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 629.449861] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 629.468497] binder_alloc: binder_alloc_mmap_handler: 506 20001000-20004000 already mapped failed -16 15:08:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 629.521955] binder: BINDER_SET_CONTEXT_MGR already set [ 629.537312] binder: 506:508 ioctl 40046207 0 returned -16 [ 629.559171] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.562107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 629.568239] binder_transaction: 12 callbacks suppressed [ 629.568258] binder: 506:541 transaction failed 29189/-3, size 0-0 line 2970 [ 629.607165] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:22 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000003796400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:22 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002480), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='syscall\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e21, 0x1deb, @dev={0xfe, 0x80, [], 0x20}, 0x1}}, 0x8000, 0x7000, 0x91e7, "d084b99ec69261f0ed86b9c4f350c4d921d66322d3962a1f6238734992d497f3bbdfbaeff0160e11be74f77a6313ece2208ab2fa3751e09076beee3f8817285db87fc17451197740a4300efb9bb7be29"}, 0xd8) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 629.666593] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 629.685325] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.698854] binder: send failed reply for transaction 1011, target dead 15:08:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:22 executing program 0: pipe2(&(0x7f0000003000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000003040)={'team_slave_0\x00', {0x2, 0x4e20, @local}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0xfdf3}}], 0x1, 0x1) recvmmsg(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)=""/18, 0x12}], 0x3, &(0x7f0000000200)=""/110, 0x6e, 0x8}, 0x7f}, {{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/48, 0x30}], 0x2, &(0x7f0000000400)=""/131, 0x83, 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000780)=""/64, 0x40}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/51, 0x33}, {&(0x7f0000000900)=""/97, 0x61}, {&(0x7f0000000980)=""/214, 0xd6}], 0xa, &(0x7f0000000b40)=""/108, 0x6c, 0x8}, 0x8}, {{&(0x7f0000000bc0)=@ax25, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c40)=""/38, 0x26}, {&(0x7f0000000c80)=""/113, 0x71}, {&(0x7f0000000d00)=""/201, 0xc9}, {&(0x7f0000000e00)=""/160, 0xa0}, {&(0x7f0000000ec0)=""/254, 0xfe}, {&(0x7f0000000fc0)=""/158, 0x9e}, {&(0x7f0000001080)=""/173, 0xad}], 0x7, &(0x7f00000011c0)=""/24, 0x18, 0x90}, 0x6}, {{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001280)=""/13, 0xd}, {&(0x7f00000012c0)=""/33, 0x21}, {&(0x7f0000001300)=""/249, 0xf9}, {&(0x7f0000001400)=""/204, 0xcc}], 0x4, &(0x7f0000001540)=""/214, 0xd6, 0x7f}, 0x1}, {{&(0x7f0000001640)=@nl=@proc, 0x80, &(0x7f0000002c40)=[{&(0x7f00000016c0)=""/188, 0xbc}, {&(0x7f0000001780)=""/21, 0x15}, {&(0x7f00000017c0)=""/163, 0xa3}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001940)=""/107, 0x6b}, {&(0x7f00000019c0)=""/180, 0xb4}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/26, 0x1a}, {&(0x7f0000002ac0)=""/143, 0x8f}, {&(0x7f0000002b80)=""/154, 0x9a}], 0xa, &(0x7f0000002d00)=""/242, 0xf2, 0x4}, 0x7}], 0x6, 0x40, &(0x7f0000002f80)={0x0, 0x1c9c380}) setsockopt$inet6_dccp_int(r2, 0x21, 0x3, &(0x7f0000002fc0)=0xef, 0x4) [ 629.750907] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 629.839179] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 629.850339] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:22 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x121040, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x81, 0x4, [0x293d, 0x1, 0x0, 0x6]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r1, 0x6, 0x9}, &(0x7f00000002c0)=0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/201, &(0x7f0000000240)=0xc9) [ 629.898932] binder: 568:570 got new transaction with bad transaction stack, transaction 1015 has target 568:570 [ 629.909351] binder: 568:570 transaction failed 29201/-71, size 0-0 line 2882 [ 629.950683] binder_alloc: binder_alloc_mmap_handler: 568 20001000-20004000 already mapped failed -16 [ 629.970469] binder: BINDER_SET_CONTEXT_MGR already set [ 629.985507] binder: 568:570 ioctl 40046207 0 returned -16 [ 630.001330] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 630.001340] binder_alloc: 568: binder_alloc_buf, no vma [ 630.013139] binder: 568:573 transaction failed 29189/-3, size 0-0 line 2970 15:08:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000002600)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xf, r0, 0x0, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e20, @broadcast}}) 15:08:22 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x200) getdents(r1, &(0x7f0000000180)=""/81, 0x51) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="e829f650db0f", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x300, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000180)={0x17, 0x5d, &(0x7f0000000100)="1e326cb750b300d1b3cca6e4f7fb4375723eb1be923891419c1cd5d23000d7c1808371b667a083829b089c411ed4ed47aae6f3683eb942a0fa4252be649d48ec213314c93541003f74d5b2bc1448817c5c68500517ea7bb7abe4bb3719"}) [ 630.050262] binder_alloc: 568: binder_alloc_buf, no vma [ 630.055981] binder: 568:582 transaction failed 29189/-3, size 0-0 line 2970 [ 630.064323] binder: send failed reply for transaction 1015, target dead [ 630.075009] binder: undelivered TRANSACTION_ERROR: 29189 15:08:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, 0x4, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x1000000000000000}}, 0x18) 15:08:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 630.164601] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.187646] binder: 588:589 got new transaction with bad transaction stack, transaction 1020 has target 588:589 [ 630.188188] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.198031] binder: 588:589 transaction failed 29201/-71, size 0-0 line 2882 15:08:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) shmget(0x2, 0x5000, 0x78000000, &(0x7f0000ffa000/0x5000)=nil) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xe7c458116ec5eefd}, 0x18) 15:08:22 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x401070ca, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x2, 0xb0000) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0x6}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @ipv4={[], [], @multicast2}, 0x80}, {0xa, 0x4e21, 0x7fffffff, @mcast1, 0x7}, r3, 0x8}}, 0x48) sysfs$3(0x3) [ 630.235795] binder_alloc: binder_alloc_mmap_handler: 588 20001000-20004000 already mapped failed -16 [ 630.247261] binder: BINDER_SET_CONTEXT_MGR already set [ 630.253131] binder: 588:589 ioctl 40046207 0 returned -16 [ 630.266228] binder_alloc: 588: binder_alloc_buf, no vma [ 630.271838] binder: 588:606 transaction failed 29189/-3, size 0-0 line 2970 15:08:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 630.293645] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:22 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) msgctl$IPC_RMID(0x0, 0x0) clock_adjtime(0x1, &(0x7f00000000c0)={0x3, 0xc3ca, 0x100, 0x3, 0x5, 0x3ff, 0x80000000, 0x92a, 0x2cd, 0xc9, 0x80000001, 0x2, 0x2, 0x4, 0x81, 0xc5c, 0x2, 0xffffffff, 0x5, 0x6, 0x4, 0xffffffff, 0x4, 0x0, 0x4, 0x7fff}) [ 630.343857] binder_alloc: 588: binder_alloc_buf, no vma [ 630.349429] binder: 588:618 transaction failed 29189/-3, size 0-0 line 2970 [ 630.353842] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:22 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000080)=[@exit_looper, @decrefs, @free_buffer], 0x0, 0x0, &(0x7f0000000340)}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) dup3(r0, r2, 0x80000) ioprio_set$uid(0x3, r1, 0x205) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80100, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) 15:08:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x3ff, 0x2, 0xd268, 0x9, 0x0, 0x1000, 0x8000, 0x3, 0x4, 0x7f, 0x5, 0x1, 0x7fffffff, 0x4, 0x9, 0x0, 0x8, 0x7, 0xb5f, 0xf0, 0x100000001, 0x3, 0x3f, 0x4, 0xfffffffffffffffb, 0xfb4, 0x4, 0x3ed, 0x7, 0x7a81, 0xcf, 0x2, 0x800, 0x2, 0xfffffffffffff4b5, 0x6, 0x0, 0xd24, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x42, 0x2054, 0x4, 0x5, 0x0, 0x80, 0x1e7e0c41}, r2, 0xd, 0xffffffffffffff9c, 0x2) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req={0x9dfa, 0x0, 0xffff}, 0x10) setsockopt$inet_int(r3, 0x1f00000000000000, 0x5, &(0x7f0000000000), 0xfffffffffffffd7b) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x101000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000180)=0x10000, 0x4) [ 630.391335] binder: send failed reply for transaction 1020 to 588:589 [ 630.399037] binder: undelivered TRANSACTION_ERROR: 29189 [ 630.422111] binder: undelivered TRANSACTION_ERROR: 29189 15:08:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x37, &(0x7f0000000040)=0xdd2e, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\r\f\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 630.515237] binder: 632:634 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 630.533220] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.535867] binder: 632:634 BC_FREE_BUFFER u0000000000000000 no match [ 630.595936] binder: 639:642 got new transaction with bad transaction stack, transaction 1025 has target 639:642 [ 630.604052] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.606373] binder: 639:642 transaction failed 29201/-71, size 0-0 line 2882 [ 630.640677] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.643792] binder: 632:634 unknown command 0 [ 630.665203] binder: 632:634 ioctl c0306201 200000c0 returned -22 15:08:23 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="890800000000000002004e21ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e24e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) r5 = dup2(r2, r0) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="66baf80cb8146bf680ef66bafc0cb800000000ef420f013f66b809008ec8440f20c0350b000000440f22c08f8978d69db6647b9664460fbc0d836c0000b992030000b800000100ba000000000f3067cfb90f0300000f3266b82d008ed8", 0x5d}], 0x1, 0x0, &(0x7f0000000180), 0x0) 15:08:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x6, &(0x7f0000000480)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8, 0x0) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x6, 0x0, 0x0, 0x1, 0x101}) r3 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x800000000016, @time={0x0, 0x989680}}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x113, 0x1000}}, 0x20) ioctl$RTC_PIE_ON(r4, 0x7005) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x1}}, 0x18) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) [ 630.692084] binder_alloc: binder_alloc_mmap_handler: 639 20001000-20004000 already mapped failed -16 15:08:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 630.738548] binder: BINDER_SET_CONTEXT_MGR already set [ 630.744439] binder_alloc: 639: binder_alloc_buf, no vma [ 630.749987] binder: 639:654 transaction failed 29189/-3, size 0-0 line 2970 [ 630.770009] binder: 639:642 ioctl 40046207 0 returned -16 [ 630.804838] binder_alloc: 639: binder_alloc_buf, no vma [ 630.810391] binder: 639:665 transaction failed 29189/-3, size 0-0 line 2970 [ 630.837947] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.850000] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.882198] binder: send failed reply for transaction 1025, target dead [ 630.939512] IPVS: ftp: loaded support on port[0] = 21 [ 630.965968] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 630.998258] binder: undelivered TRANSACTION_ERROR: 29189 15:08:23 executing program 0: r0 = inotify_init1(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x10, r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x50040, 0x60) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r4, 0x5}, &(0x7f0000000200)=0x8) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0x6, 0xff, 0x5, 0x4}, {0x6, 0x10001, 0x672, 0x1ff, 0x200}]}) ptrace(0x4207, r2) 15:08:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x0, 0x470, 0x1f8, 0x2b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, &(0x7f0000000040), {[{{@ip={@multicast1, @rand_addr=0x1, 0xff, 0x0, 'teql0\x00', 'bcsh0\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'bond0\x00', 'syzkaller0\x00', {}, {}, 0x33, 0x1, 0x2f}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xf}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@ip={@empty, @loopback, 0xffffffff, 0x0, 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x67, 0x3, 0x4}, 0x0, 0x98, 0xc0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x8}}}, {{@ip={@loopback, @local, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'bcsf0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x2a}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0xffffffff, 'ip_vti0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xff, 0x2}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xfc4, 0xfffffffffffffffd, 0x2, 0x10001, 0xffffffffffffffc0, 0x7fffffff], 0xd9ab, 0x5b, 0x8}, {0x5, [0x8, 0x6a4e3e34, 0xb5a3, 0xfffffffffffff6b0, 0x9, 0xc], 0x0, 0x68245841, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='teql0\x00'}, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, [{r1, 0x0, 0x7}]}) 15:08:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000081, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000004140)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004080)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000380)=""/38, 0x26}], 0x4, &(0x7f0000000400)=""/32, 0x20, 0x79f}, 0x5}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000001740)=""/96, 0x60}, {&(0x7f00000017c0)=""/143, 0x8f}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x8, &(0x7f0000003900)=""/234, 0xea, 0x1000}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003a00)=""/33, 0x21}, {&(0x7f0000003a40)=""/70, 0x46}, {&(0x7f0000003ac0)=""/79, 0x4f}, {&(0x7f0000003b40)=""/1, 0x1}, {&(0x7f0000003b80)=""/168, 0xa8}, {&(0x7f0000003c40)=""/215, 0xd7}, {&(0x7f0000003d40)=""/49, 0x31}, {&(0x7f0000003d80)=""/40, 0x28}, {&(0x7f0000003dc0)=""/148, 0x94}, {&(0x7f0000003e80)=""/189, 0xbd}], 0xa, &(0x7f0000004000)=""/93, 0x5d, 0x8}, 0x7f}], 0x3, 0x10000, &(0x7f0000004180)={r1, r2+30000000}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000041c0), 0x4) 15:08:23 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 631.125707] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f0626360f0136996d66b8010000000f23d80f21f86635000000a00f23f80f01ca66b9800000c00f326635000400000f30656726f2af65f4650f01caf40f6a2e0000", 0x42}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000008, 0x80032, r0, 0x0) 15:08:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x3f, 0x5bc, r1}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x113801) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x4, {{0xa, 0x4e21, 0x6, @empty, 0xc2a}}}, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0) [ 631.263393] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 631.296392] binder: 693:696 got new transaction with bad transaction stack, transaction 1030 has target 693:696 [ 631.356789] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 631.397690] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 631.410676] binder_alloc: binder_alloc_mmap_handler: 693 20001000-20004000 already mapped failed -16 [ 631.438989] binder: BINDER_SET_CONTEXT_MGR already set [ 631.452021] binder: 693:696 ioctl 40046207 0 returned -16 15:08:23 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200900, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="be000000", @ANYRES16=r2, @ANYBLOB="220c2dbd7000fedbdf250400000050000300080007004e230000080007004e240000080005007f000001080004000500000008000800080000001400060000000000000000000000000000000001080001000000000008000300020000002400030008000500ac1414bb08000300020000000800080009000000080007004e20000008000400010000001c00010008000b0073697000080001000a000000080001000a0000002c00010008000b007369700008000b007369700008000b007369700008000500040000000800020087000000"], 0xd8}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000804) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:23 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x40) sendmmsg$nfc_llcp(r2, &(0x7f0000003e80)=[{&(0x7f0000000080)={0x27, 0x1, 0x2, 0x6, 0x9, 0x8, "5c328294aa2e2b66fb1a60e50d8a37a7d4a164e4716739a20f9390cf010b467e3016b0b22a5f1c03face0993ea7101dd4b91a096d969c7e4ebe31d81f462a9", 0x8}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000280)="f40d9d532f545902e771860201eb8c2c1d3ecbb7b3906832c5674f6969468994569ff466970e3583737b1a323844974c38e7cdec31650e86d46c9975c1603323c6f3c846d1606b41092a65b33d6bc83d08289f9f8a379d65063173305780a867d8895bb5243a2f57dd0b2b1c53c9c2c6a53a7dd519e76b1a45184684f72a7f4df2b9263f306b9e0d78fbf1db00e6a1249e21f2d278e83f9bdf5e3842903542d15fad67b597d9e7008c72c6fee0c6330f96b43cd6982da4cbe1643e39d81bbd8f7a5d1926afd601d4bfb6468b5d", 0xcd}, {&(0x7f0000000180)="e5c2dcc4b50f6e91bac5ca3b05e7be81065d067ca4a0a37356ac2d96ef5478698fabdb28e3697319184b8e99aeb132a14c3bf66d6e8c4250f30d97bc2d663e0db65d206c47881c58cafc50fb9030693b6e90fa8b1e126ee5bfcb963433a4511a8642585b1f2419b5e087efbd2380", 0x6e}, {&(0x7f0000000100)}], 0x3, &(0x7f0000000380)={0xd0, 0x11f, 0x1000, "cc8ef58b788d627cc14e64c73e9712646a579d2e324d9410ae68d06bd2f2dfb0b9e60c376141aa3e2535a6798ca422f2a737f785351af6d07b6c732fb89ae443de4f1ef08b3a4e60256c588443ea2cf15277f5a33fd36aff0d69e6107975933e0ad30c2ab98ce038fce6b189146bdec96b3dc8e09b0a6a742ef003cf3f0f86a4d10bf6e2edfef656a251f662490a8b447778308aea6dbcd1e1df182ac691b13a79dcc1616d7984ddb0b99ce7f345ea31d839db384272152b38bc34529ff121ed"}, 0xd0, 0x20000090}, {&(0x7f0000000480)={0x27, 0x0, 0x2, 0x1, 0x7, 0x3, "3b8c881fa4ecbfbbf21fa86cdba041024dc52437f285d469fb7ed9b4b399be5da56a9fffe7dceb1617315391f67705ba7fbb8d051857a6cad8cbbac10674bc", 0x1e}, 0x60, &(0x7f0000000900)=[{&(0x7f0000000500)="d419447bf98ee225f322d8de9a2bf75e40acb9e5683ebcc443b2448f24dcee6e43035b5c54785788c40ce3bc", 0x2c}, {&(0x7f0000000540)="22c5a84d24e83b4289691e0a4aa9cd714935ef60f47b52867279bbca70808624e1b2c1c00a1b585c2d5430333add1cff9fc3e6", 0x33}, {&(0x7f0000000580)="23957795246e4a89a56aa2b0bac1c02d3e1c7f4894b003ae913ead3fdaa227a1881b92ed9035149811cb961672b3540001908852e2e429a0c5e1a3c5a9d194a0fb310e74b2ba037b3d27538a3ea4484ea207c84e31b3cb46421b467273bde57ba6c8e668b0030d5fd9d43dad421a8cd3e34e88bb91a57ec7255c091695e21ad8cc13028a0c4770f944e113824f22", 0x8e}, {&(0x7f0000000640)="2910b519242bc68b8aa361eff5abc5d7692d09feef8b93be56da1c913cc5d55c0900f295d2e3ae76ff2f9b23c04896c440687ccc4559bfe4a87c63cf7be9bed13a", 0x41}, {&(0x7f00000006c0)="4a7bcf45ba8abff3da9bb9f9e9ab59d5f1fc2a598757566d51a19fba77bb19f3486f93722d5cd937f6da01ecd3c9a184e9ce1f20fa4ebeb4723118ee4802d0196758777af7e29754fa942a2d4c8565590e2697ec9b12b96a942e08d985014376a4a0f3617c095ef70ebdbe7430818c2121f3af4497ec99a897cf8af69e8304d7fcc48fc0b59f84152912041f", 0x8c}, {&(0x7f0000000780)="78f7447d81bbf707d3e1376a595782834fa449f891b20d18e6848ca2fe1b0abd0e3097a0b4a47b7da96c6f66246502087e19f3dd8704e4b3e3df43274c89dd1fe0bbf4f060d06771f2f232e40063f14dadebaf4685ddff47f7327ec722222d37e41aa64caaf4d9e34fbd7fa63c2ee06764a83170d616fc0d5a4681a43e8cc7aa05e4f146a710754cc667977da4a98d7bc14efa727d865b719ae94b3081e06bdef1d2e39b8ad06d09931d5f18bdb0177be5130daa0d8f3e521a11c7aa6f770d0eb4d648a8aa9dbd8ae478e2cf6db6b6a370a3b7f30936d1021a5f0f808e4bffbd0e", 0xe1}, {&(0x7f0000000880)="18432fca1f0129161ba285b1bf5cff0fafe45bd3907125f3206e34a77322856af962665a45d5", 0x26}, {&(0x7f00000008c0)="9fcc7b927ca5d6bc2efbd2aafb82c085eb4412b8643c5ac327c97fcb3b858e32", 0x20}], 0x8, &(0x7f0000000980)={0x50, 0x103, 0x8f, "0d6b9833d9b5c282953105db8e23582b2de52e15d70fd2ac02370ba642da2fd86ed8ace7cca151bb4b891bc28b416184066116abdebfdd63e2cba9b30a"}, 0x50, 0x10}, {&(0x7f0000000a00)={0x27, 0x0, 0x1, 0x5, 0x4, 0x3, "6442722d6ee7d2b38c6a4de1b8c858a2edad5fbea73982d200b0d480599bb96b91cadbb42359252de3c13ed3f25389f20ece04d098e414649a592fa58d6335", 0x30}, 0x60, &(0x7f0000000ec0)=[{&(0x7f0000000a80)="6dcd117b618c3e54bbfecaf84964f2057d7b9653741d67c1f90316eae443099a8d7b1f09fda20f45c28a143b223f4e0fcb990061dbf9ba55daff859ea6042589b8149271cfe86666d8035b45862fbab758589dd7cc86c08d89f9f9bfb4138f0e94e815f56df111bc1ec8030a1b37b0b1871155e6a55fa34d6a2f4c6915f65007172a83f302ae16bb6742c7302e6a1c469bb3dc3b28", 0x95}, {&(0x7f0000000b40)="ee27047c2068edf07503976f2530b3dc35d0bbb0bc473707a2b12979359d7c2a73a9744cab6d229cc3210b4d38bc655774572ed2d91f61771a946795c79f9a202b27e1c967bab71b56212b4d749dba4e4982f0523a8d918cf2aeaa094f974c554fa80e24acbf6a7e4a754c9ed8812418fcfdd6854694d1da8fdf4b97d6d227279feb80aa632856c5e8190667c17eb0842012c0c60260291da83888ae4850bd210d6cf98b4930f3245774439e1f66de3338aa6d3b544975c941ac1dc842d102c5765892a64543", 0xc6}, {&(0x7f0000000c40)="7f70e10797a5c2b7a0149c4465d2eb0da397fa50408283e211e8723ec3aad337f10bb84cffa579a5bb50ec359088cdadede6b1eed558123e27c7b27441238082f5770404a7a7ad4b7c5a8cea0d0925c1d285efd94a7ff1e9a168ee8a7109ba9cd3b7040859f5a85859d88923ba40cf9efa2cb28f12ec3dc54d04159e7b711cc3a3af2a2109001f268d3d8ca826981afe22cbde58e36324e5953c2f0c273c652d680094a29bc6ce7d12765d668d8e9b2ac74697103dc397466ae5a839d2ff1ebb47a8a33ac47f86e64625027c64d82b4641b4c0d352488c39446ce6f3", 0xdc}, {&(0x7f0000000d40)="f09b8b12a1561ec1f1a5510ef0e38923c9e5d778fbd0cb5e651463864cdfdee29653277e558125bec34051dc0b3849bb1d73d2e5fe6e599fc5cd8bf9e04d0060662dac959d6086450df64d0ab28cd2766c3753e7b106557f792a59f6f15b1a41e13f5eb599543b30", 0x68}, {&(0x7f0000000dc0)="4ee12ff87cd820cd448ac53530a6453b0e9f791b9d0dd6c8f2e1eb069eb9edab84263b2391ccf2b95c64aca760d8a5c2ed8074c157f922ee2f60a6ce53808c7d3380bac10ccf9fdfd70593cfee462b095ef595170d1e9592f00f0cc099f4a046f876432fde1756e236321fc63a", 0x6d}, {&(0x7f0000000e40)="21cb892952bc36147e53769438ee743cbec89a4a19b323dc7042d5e4abaec7108dbd337f2e4c718f285d8ea1910e2997a774857214179aa4daa9eeab6e6900cafdcd5a62d4981683affa1fe8c75c3b99aa1a1eb96dc2e2eafe507ca9c5aa", 0x5e}], 0x6, 0x0, 0x0, 0x800}, {&(0x7f0000000f40)={0x27, 0x1, 0x2, 0x1, 0xa46, 0x6, "2aebb0d5724d903a8d29e666ae4066245ceefe08a1879b19b189a840b2921ed1d5fb4901d4db2f87edd1bbe2807472642940a4d11833636fe8afa260e948d1", 0x24}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="08416e45e0d3dc04b8b80c7b483ff274a33b430246a3e47fac401b6ba1b7f46bfebad8e0a3846c3a8ffda93a5d8fd06a80fecbb1ce5aea8f28c71e93507c82db0c59c84de9e8a49140b45a85f289da3939b70dbd624dfd7a43f40b39eb54b8b3554e7d511850e70cc1b286274a59a3cfb0eb9f7d172f477670bd2880df5d", 0x7e}, {&(0x7f0000001040)="f68c9bdfad94ecbeb72f3241e4d37c193d75b56b8525c3d0038f0bcf456718dc8d437288e3ade6ab3a2cbf1e6c88737b725c4524017d4b031b723902157279c5c87a0fc229d14218ef9fa18d6cb28d1f49bbaf167d5d23ad5addf2da", 0x5c}], 0x2, 0x0, 0x0, 0x20000010}, {&(0x7f0000001100)={0x27, 0x1, 0x1, 0x3, 0xffffffffffff7fff, 0x7c7, "b1899f76751f8253984a22aea4966d3140e9cea5e89620226d1f1363cf8b2ea9b4dde761a7af566d879cc7afa8966557412db797e5e2b50c8e11cbbe6b2bbe", 0x8}, 0x60, &(0x7f00000033c0)=[{&(0x7f0000002200)="52eb3b18484b5f9434e603250995fa4687ad9d3952914a323b364349494ecb636d12e30860f3cc5ba7276d42cfe7fe8f03f65f4d62663caa351adf0129bab4afb2c2b05d010a81f7a5a36e00ac6ec732f09892dcc7faa87cb1561c5c039a980bdab402b1", 0x64}, {&(0x7f0000002280)="3d485656c5e10de58f89f7eaffaa6cf771857303ffe3cddb996190937224f12be04bda3b3786d0468c0c9d9914ced9cc720420dc8f88aee80cae13226291af36b080d24fea0ecb391f6bb932e31ec9fb4d5a846292e8b72645332b68490ced473fb385dc235fe978f43821b6461d094bf27377e69b283ff4421b5c65a4675d31a1afa2432724c8d1", 0x88}, {&(0x7f0000002340)="80c1cac9c729dc59f7cf2a871be994a3697287c8bc83a4c9554ebb05370ca932be181d01036c0f7c25f69aadd03e48ce5181b8ffd1659edced37b54708a34311974f42eff1769505b63ead50e6ca41d2514add8a2e5b3e859662dd35147dfd9baa54ef41bfdb7d982c4939", 0x6b}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000001180)="30a548cf7c5a78cd92d6ff92305de14f3c", 0x11}], 0x5, &(0x7f0000004340)=ANY=[@ANYBLOB="d0000000000000008d010000ff7f00004e8f5ef705e9bf25fb6439eb0ed70286e5c4a692ba2582f819813a6622ed1a68b46758805db46e7efb6b4d13ad366af8f4ae915bb816618ee5fb81a39c2de7ef7f8e035cf655a238aa02efff374398fa52e92b8be15b31bb34355bb4912395012d0c434f809b3b5bbc1fcaca6116624e0600883079df015d6db14971de39feb3ad9bb45b4f7d507852dd5260b9d5946b6e1e31704f0ccdea719eaa0ad404defa65b6edd82f238ea44f631ba9333403af902788d3750634e43c3d493a7300003e6396444f000000000000005de9459a85416710be81b7e77af542a4ead7380f620711e8d6d511ccb06fb5cd89871fb0336aeeface367c5cd9ed9f2f88daa30c5211688b9e3772975f0949cc93e0f4a07c279fec36f0c13a4c76d886c9a43b70b1839f4839329817dc982768256aa0af813c49676d930a863e1aa63e03c9f00e1d8e85313076fa0a24036c4610a9d0f031de5b82ec40c6867b071b16ed9ba12fddd8a0b1c2673144e08b4bda92db111ba5651b1ade1682d40c1d8b1eead7b56fcb40a9b06d7bbbdab28d1202f1"], 0xd0, 0x4000091}, {&(0x7f0000003540)={0x27, 0x0, 0x2, 0x3, 0x0, 0x8001, "6e519104b1c74efe1da701877c665b18d40fa316ea23a8cf6c944763e99c9cbd6dd7aab9a4f3db1560afce8549c3329adde31b5c07ae3d97b1d7076ab6fb99", 0x1f}, 0x60, &(0x7f0000003700)=[{&(0x7f00000035c0)="ee640513fba444a6766275a182dd0c1ba3c5bb85f7a0ea3dcbe51562fcb24189363b22b997cc1e5774ea27c7c701fa5cb4941f8774e86d0c2ada35bd2eddbca2fc2db93970c68e384aefa15d69b179b61a3682c69830344c1ce45824b2acb17b9753c350add7538575c97fc519db2b935aa24f8e7eebbb5872bed481376acb18c200afd14c3bcd1bc88ca530ea890fddb2cd60dad5c31504d6c55a23eaded01d4dbc0239", 0xa4}, {&(0x7f0000003680)="4b7968bd020285ec8f8a1e6d52a282be833b4c9356a687497610f56f40c5d22302fb3c5613fedeaa8b95f9ac42904feecdae9ea8bec92bb6c144fbd1c4e775722ca274a997b66b99d4e4c8a90418e66a3126bcb54dd3a33e99813ed43896ffbb283461a1e31fbd1aca746abf7de1", 0x6e}], 0x2, &(0x7f0000003740)=ANY=[@ANYBLOB="5000000000000002000000000200000079f0810f8cf22ee676ddd5065f04018c3674e7ae4699a7d81b0400a0813c25e2de9231584282c22a4dadc6a0ee6ebaa1808d69a7734dc84f26e344152259e127"], 0x50, 0x4}, {&(0x7f00000037c0)={0x27, 0x0, 0x1, 0x3, 0xe04e, 0x6, "6b5793ce7bf34c02cbc07a1007af597cb4ac1d25fa57795b6849dc657bfb8f311292554e1738764b98a5b1b92a216b147e7a1863da5bad0d59f06d85842440", 0xf}, 0x60, &(0x7f00000039c0)=[{&(0x7f0000003840)="79bf8696c898472936e079945c3951899ed35d4387df4acb7c47722f73d2bf30b298a62ed2716171641833e9bb50d3e1cab20ab281560539097204e485c1cc724cf89f428a27036def835fbf8a20449730d083938c84a46467e2762ceb382217cd7ffde763e02d8ca222af0888eacf8b63b3d703c6faee3807801a740155", 0x7e}, {&(0x7f00000038c0)="8856157e61506d63715b55c3a888327a286ddcccfd11a93ec19aa8e9627a03d1cd584484b531f26e04b78b0c553b1a30364a3d799b912c99def7c6b6588d20e347e344443fdb9631c88ca9d009a4c8ed334a7776e8b4ff9cbe836408f31282805e2c132cc37e2f77ad73cae528c62ff97509d8f8bf9af3449829f336d8a1b493bd14030ffbd324a8e561d3613d687d7f2891d2d196b310b6dc10641d", 0x9c}, {&(0x7f0000003980)="57ffae", 0x3}], 0x3, &(0x7f0000003a00)={0x100, 0x10a, 0x7f8, "b5d24a5d40bcdada211b366fa7e05eff3804ac3440da41859dc8aa6ccf37dd68bb386415ad29ffaa46965d9d35acda91dd1313e27b52520310a04058a2fa66139f43e45cd50dd0014bb9657422beb4540cb7efe9312c15f5bdceed1740ee9abb70c1ec14398a84ce05547b13de72fd9d39a64f6a46414b50fe178b6616935d434a598eb96c64788c15ddd3d54ff6bc56551929cfaaf3d4af5c0845747df97c8f9ee963d2ade74ee3fa18b28d151ec722ce5b02e3a9c400f8c2cad9c368fe2354cd41f708534d6d850607877bc91cdac09f228512b06e5123434d8725a327c9106319e6d17b5266f323d9aed5"}, 0x100, 0x10}, {&(0x7f0000003b00)={0x27, 0x0, 0x2, 0x6, 0xffffffff00000001, 0x7, "c617d63e5edbbbd53eb47dc844c9984ee3845d4527e62aeb2121943bfa274eb19cee5101fd5cd760df23daf397efbf4baeee209af32d46ce9a7640141317d2", 0x20}, 0x60, &(0x7f0000003bc0)=[{&(0x7f0000003b80)="3575b6470389665ebf3946ef6a3687f9a253afe4b23b925ab34b1318a77a082ec4df9c5775a2cd20cc33d30eaba92dc62b03c3882e", 0x35}], 0x1, &(0x7f0000003c00)={0x50, 0x3a, 0x4, "1d65bda5da596f2d59df23bee3fb54c9d00a9a8cf99504e5b367c5231b4bc03f4fdc5a154798ef8fab27fff45202c2926ab33c3d6cd0f0ad12c5ac"}, 0x50, 0x4}, {&(0x7f0000003c80)={0x27, 0x1, 0x1, 0x3, 0xb9, 0xc2d1, "d7fe4fd20486df8fb9153c7cd207355296e62701e249a6e6e373f50a6ed5e317d0f0cefdf9cf006d67a8b4a1e57e2b0bf8876d41fa0bd2d183f4f67863a4cd", 0x2b}, 0x60, &(0x7f0000003e40)=[{&(0x7f0000003d00)="f75faef3174a5c212737d74ed8a605d34e580324bf62d1032b5612982193046ca51d96a503c26b0bf4792030efd350a30f23e6c21bf7cbbfc8f93d1751c09e8c62144832067fe134afae2661afb9ce0684a5bdef410020258e927cb6fa5253a191877c5a2f66271d42114fd3d8b923b7e84a8926b506c5d2c8a04fa8ea5014ba62bacd12e5d195", 0x87}, {&(0x7f0000003dc0)="4140a201da1dd1cad09bb01b493bcb3111b2d2d14f106763d3733aa22934ac4714788c6439617e81d92f52a8fa577a0b0dfbf67e47325abfd64117b971dae1f897057fa15a93d8a47bf65c03938dee7a4e50ceacee6befbf264896833955027f6b4af243bbefcd57c8af8f8e24de", 0x6e}], 0x2, 0x0, 0x0, 0x40001}], 0x9, 0x800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000004080)=0x14) sched_setscheduler(r1, 0x5, &(0x7f0000000140)) r3 = shmget$private(0x0, 0x3000, 0x80c, &(0x7f0000ff9000/0x3000)=nil) stat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000004300)={0x5, 0x0, 0x100000000, 0x9, 0x6, 0xffff}) getgroups(0x3, &(0x7f0000003500)=[0xee00, 0xee01, 0xee01]) r6 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004200)={0x0, 0x0, 0x0}, &(0x7f0000004240)=0xc) shmctl$IPC_SET(r3, 0x1, &(0x7f0000004280)={{0x4, r4, r5, r6, r7, 0x10, 0x3f}, 0x80000001, 0x7, 0x5, 0x10001, r1, r1, 0x9}) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xe, "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", 0x1000}, 0x1006) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x41010, r2, 0x0) 15:08:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 631.483438] binder_alloc: 693: binder_alloc_buf, no vma [ 631.510429] binder_alloc: 693: binder_alloc_buf, no vma [ 631.574962] binder_thread_release: 7 callbacks suppressed [ 631.574973] binder: release 693:696 transaction 1030 out, still active [ 631.604032] IPVS: ftp: loaded support on port[0] = 21 [ 631.631423] binder: undelivered TRANSACTION_ERROR: 29189 [ 631.638869] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fstatfs(r0, &(0x7f0000000280)=""/197) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode'}}]}) 15:08:24 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xb}) r2 = socket(0x10, 0x802, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x10000}, 0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0xff, 0x80ac, 0x1}) write(r2, &(0x7f0000000200)="220000002000070700be0000090007010a0000ff0c00000000200010050013800100", 0x22) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x2, 0x8, 0x401, 0xfffffffffffffffa, 0x8}) 15:08:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 631.676851] binder: release 693:696 transaction 1030 in, still active [ 631.683775] binder: send failed reply for transaction 1030, target dead 15:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x7, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @local, 0x5}, 0xfffffffffffffc32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 631.719181] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 631.737800] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:24 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000000)={0x1, {0x0, 0x1c9c380}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) recvfrom$packet(r1, &(0x7f0000000280)=""/4096, 0x128f, 0x40, 0x0, 0x2c) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x5, 0x9, 0x800, 0x4, 0xfffffffffffffff9}) [ 631.762697] binder: 732:733 got new transaction with bad transaction stack, transaction 1035 has target 732:733 15:08:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 631.858441] binder_alloc: binder_alloc_mmap_handler: 732 20001000-20004000 already mapped failed -16 15:08:24 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x100) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=0x0) fcntl$setown(r0, 0x8, r1) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x323, 0x40000000, 0x27a2, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x0, 0x1ff, &(0x7f00000000c0)=[0x0], 0x1}, 0xfffffffffffffeb0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x802, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r5, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r5, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x100000000000010c, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140100000107010927bd7000fedbdf250a000001f0044b36f629bdc347ec0dde8f39a021068456c87e1137d1d229b4b537ef92b66326a0cac6e9b2a448fd47128b2c77479ceb400cf96bd6bc19e5a6d7000050b36abd2665fd3e8e1b2db7d88166be0a451ce1c16879c04162bdf7e964e1bbe6a7f37a65f9e8558b0f8c8a020acb8770e4ec22d8a3d0fccc380806ffa798646f709e216330ddf0159cdda418e62691f147f80293f0f6555f93516796a58f72049329068a44ffda5c0aa47d65d70cdcbbd8b0cdf94e57dde28a7ec48a2573d0fbdaf46f8b83203c167f4c577bed71b4fa3b399ad50bb9d0990fc810094158f25f53396984e8e859a60c34d6f732fb5b220e6d96abf11f51f6da55165695d200000008cd51a6d2b64b66db4e2987f007ec8fdfb0fc206396c4138d1696db9910086e7e5ffc6dd92133b882f1465261f22525282d456d07c13acf8c"], 0x114}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) [ 631.903698] binder: BINDER_SET_CONTEXT_MGR already set [ 631.942513] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 631.955239] binder_alloc: 732: binder_alloc_buf, no vma [ 631.983021] binder: 732:733 ioctl 40046207 0 returned -16 [ 631.991276] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.011463] binder_alloc: 732: binder_alloc_buf, no vma [ 632.032424] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.055011] binder: release 732:733 transaction 1035 out, still active [ 632.070860] binder: undelivered TRANSACTION_ERROR: 29189 [ 632.097838] binder: release 732:733 transaction 1035 in, still active [ 632.104529] binder: send failed reply for transaction 1035, target dead 15:08:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) read(r3, &(0x7f0000000100)=""/158, 0x9e) ioctl$int_in(r3, 0x80000040045010, &(0x7f00000000c0)=0xfeffffff) close(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x2, 0x7, 0x1, r2}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x100) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x151402, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x114) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x208000) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80000) mlock2(&(0x7f0000b18000/0x1000)=nil, 0x1000, 0x0) r6 = dup(0xffffffffffffffff) mremap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000972000/0x4000)=nil) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0)=0x72, 0x8) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000380)={0x0, 0x18, 0x8, 0x0, "0563fd41529fcc634bd77f190d3950c471afc115320fef84e149b38b3eb0c16f"}) madvise(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x10200000008) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0xc397}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'teql0\x00', 0x4}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002ec0)=ANY=[], 0x0) write$cgroup_pid(r0, &(0x7f00000004c0)=r3, 0xffffffffffffff4b) accept4(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000002c0)=0x80, 0x80800) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYRES64=r2]}) r7 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x80000) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000180)="f429e5f536ba254fe45470e08e697078da9b9453089ee286fd91067970da0101f5883ef50a4b172e8df4b2a97e6365cc2ce05093f82d03f5d785366135acc5c8697ef20d9e") ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:08:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="8d97a82b627ecf273ad22983561f38c59099cecfb50a27f59f140bbc317369ec014bf9357f599d362f6755fad90f08d9414f3ce8fe7b474c8bd0eba1aa6651e9ea583eb4b5fa8192fdd43db34f9a80d00647a223a474c6427a18385087edbd5e0dc4ab8b38dd458c0c69f87467196d7193d6cc7fb571d8137b586f5509bdadd89995fa251ebc928206b7a28a7f77e4369bcb56158934", 0x96}, {&(0x7f0000000380)="badd45dc017a37e4d5e770e49ae5fb8e5ebfd94ac6585ee0d5584992299e3144873bbcda89efc02fb115b383dd9041c04e3c5a12360c94eadb5e3ab3247ba454e8ffa8a98b233247fbe7b3f4dcb6132fc73fef23a6e9477dcf66b084ad0be39104f9289baa8745e83607fc6bb26e5dd065db2e7980239b49003669042d05fd22854a550a620c1379805e1a693f16f835db5710aa3df9a3d7e254af7ad5a8fa6aed317ecbdb01b91e14474af5aa49991d8345326ed11ab137b2a5916ab939e01adfd8bab3052851b392", 0xc9}, {&(0x7f0000000040)="260b9f", 0x3}, {&(0x7f0000000080)="e83296", 0x3}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000740)="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", 0x1000}], 0x6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5c2069e5405cd3364d70") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a80)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@errors_remount='errors=remount-ro'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@check_strict='check=strict'}, {@fat=@codepage={'codepage', 0x3d, '863'}}]}) [ 632.346338] binder: 773:774 got new transaction with bad transaction stack, transaction 1040 has target 773:774 [ 632.373187] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 15:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x8a) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x200080) write$FUSE_WRITE(r1, &(0x7f0000000240)={0x18, 0x0, 0x5, {0x1}}, 0xffffffffffffffa4) [ 632.396472] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.420948] binder_alloc: binder_alloc_mmap_handler: 773 20001000-20004000 already mapped failed -16 15:08:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\r\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 632.482668] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.486690] binder: BINDER_SET_CONTEXT_MGR already set [ 632.548560] binder: 773:774 ioctl 40046207 0 returned -16 [ 632.578007] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x20300) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 632.602444] binder: release 773:774 transaction 1040 out, still active [ 632.617073] binder: undelivered TRANSACTION_ERROR: 29189 15:08:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 632.645985] binder: release 773:774 transaction 1040 in, still active [ 632.652977] binder: send failed reply for transaction 1040, target dead 15:08:25 executing program 0: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r0 = getpgid(0x0) capset(&(0x7f00000001c0)={0x20080522, r0}, &(0x7f0000000200)={0x401, 0x1, 0xffffffffffffff9a, 0x7f, 0x7, 0x7}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='.\x00', &(0x7f00000002c0)='9p\x00', 0x81, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e21}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e24, 0x2, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x5d63, @empty, 0xff}, 0x6, [0x2, 0x0, 0xfffffffffffffffd, 0xe4, 0xffff, 0x4, 0x4, 0x10]}, 0x5c) 15:08:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 632.788890] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.822075] 9pnet: p9_fd_create_tcp (833): problem connecting socket to 127.0.0.1 [ 632.832992] binder: 829:830 got new transaction with bad transaction stack, transaction 1045 has target 829:830 [ 632.833203] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.854036] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 632.892527] binder_alloc: binder_alloc_mmap_handler: 829 20001000-20004000 already mapped failed -16 [ 632.925372] binder: BINDER_SET_CONTEXT_MGR already set [ 632.955224] binder: 829:830 ioctl 40046207 0 returned -16 [ 632.980356] binder: release 829:830 transaction 1045 out, still active [ 632.991047] binder: undelivered TRANSACTION_ERROR: 29189 [ 633.006409] binder: release 829:830 transaction 1045 in, still active [ 633.013144] binder: send failed reply for transaction 1045, target dead 15:08:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x250, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f69705f76735f737461747300772d32d49fde4a994afa86fdd37766") keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:08:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:26 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffedf, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x35, @local}, 0x1c) write$FUSE_WRITE(r1, &(0x7f0000000200)={0x18}, 0x18) 15:08:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x151) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x80000000cf50) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file0//ile0\x00', r1, &(0x7f0000000140)='./file0//ile0\x00', 0x400) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/\x00'], 0x2) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000400)=ANY=[]) rmdir(&(0x7f00000001c0)='./file0//ile0\x00') mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x80) 15:08:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x151402, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x114) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x208000) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80000) mlock2(&(0x7f0000b18000/0x1000)=nil, 0x1000, 0x0) r6 = dup(0xffffffffffffffff) mremap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000972000/0x4000)=nil) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0)=0x72, 0x8) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000380)={0x0, 0x18, 0x8, 0x0, "0563fd41529fcc634bd77f190d3950c471afc115320fef84e149b38b3eb0c16f"}) madvise(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x10200000008) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0xc397}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'teql0\x00', 0x4}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002ec0)=ANY=[], 0x0) write$cgroup_pid(r0, &(0x7f00000004c0)=r3, 0xffffffffffffff4b) accept4(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000002c0)=0x80, 0x80800) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYRES64=r2]}) r7 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x80000) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000180)="f429e5f536ba254fe45470e08e697078da9b9453089ee286fd91067970da0101f5883ef50a4b172e8df4b2a97e6365cc2ce05093f82d03f5d785366135acc5c8697ef20d9e") ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:08:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 634.016281] binder: 849:851 got new transaction with bad transaction stack, transaction 1050 has target 849:851 [ 634.028949] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.030004] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.061696] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.078615] binder_alloc: binder_alloc_mmap_handler: 849 20001000-20004000 already mapped failed -16 [ 634.108889] binder: BINDER_SET_CONTEXT_MGR already set 15:08:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140)="287714aac47a8a6550fa03b3fd2e38dda56c3033d3ff38af2ae6569d6b0395ab02073fd6457b15575efa58a34dba4e42fd580035409ef6bc9f31d3edef154bd205764694469ae970a9023aa550cfaa918b493ed90b571fc4d37d225d5a692325446f2710a147055bc118c0cae353a1f0e1ef98c66eba2aa737e1c633050d8e74a3e1c4c8c7c6405b89e3225121d1c8645ea638af9de11d615ef8283b479dc95992bc7df9b077b045ea", &(0x7f0000000200)="1f5a5aea611a6aa9560a72d4413b7b077c01667f070252f6506acb3bbf0f5d908d05c623e536069b1f5a0e5f8a766c7704fee41d94eeeacb5f9c7019638c97cd06"}, 0x20) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2f, 0x4, 0x0, {0x1, 0x3ff, 0xfffffffffffffea7}}, 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 15:08:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 634.137363] binder: 849:851 ioctl 40046207 0 returned -16 [ 634.155591] binder: release 849:851 transaction 1050 out, still active [ 634.169286] binder: undelivered TRANSACTION_ERROR: 29189 15:08:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 634.193920] binder: release 849:851 transaction 1050 in, still active [ 634.200673] binder: send failed reply for transaction 1050, target dead [ 634.271282] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:26 executing program 6: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0xc7b2, 0x8, 0x2a, 0x4, 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) 15:08:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x570}], 0xed, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc0000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x400000000000174, 0x0) flock(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @empty, 0x8000}, {0xa, 0x4e20, 0x7ff, @mcast2, 0x31}, 0x0, [0xfff, 0x5, 0x0, 0x5, 0x9021, 0x0, 0x3]}, 0x5c) mknod(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000240)='./control\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9008804}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[]}}, 0x8000) r5 = getpgid(0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioprio_set$pid(0x2, r5, 0x9) preadv(r6, &(0x7f0000000480), 0x10000000000001d3, 0x0) [ 634.324698] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.335434] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.363715] binder: 888:889 got new transaction with bad transaction stack, transaction 1055 has target 888:889 15:08:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x3f, @rand_addr=0x10001, 0x4e21, 0x0, 'ovf\x00', 0x0, 0x3, 0x26}, 0x2c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 634.406000] binder_alloc: binder_alloc_mmap_handler: 888 20001000-20004000 already mapped failed -16 15:08:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 634.486193] binder: BINDER_SET_CONTEXT_MGR already set [ 634.525837] binder: 888:889 ioctl 40046207 0 returned -16 [ 634.564642] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.573177] binder: send failed reply for transaction 1055, target dead [ 634.621602] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x8000040000001) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x1, 0x7fffffff}], 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@dev, @empty, @multicast2}, &(0x7f00000000c0)=0xc) sysfs$3(0x3) 15:08:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000007fffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) personality(0x4000009) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x80000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x9, 0x0, [{0x9e0}, {0xf3b, 0x0, 0x7}, {0xbfe, 0x0, 0x4}, {0xbfd, 0x0, 0x5}, {0x950, 0x0, 0x7fff}, {0x40e, 0x0, 0x1f}, {0xb99, 0x0, 0x1f}, {0xb20, 0x0, 0x6}, {0xb36, 0x0, 0xfffffffffffffff7}]}) 15:08:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:27 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r0 = memfd_create(&(0x7f0000000040)='tls\x00', 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) [ 634.731205] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.754364] binder: 916:918 got new transaction with bad transaction stack, transaction 1059 has target 916:918 [ 634.764789] binder_transaction: 17 callbacks suppressed [ 634.764808] binder: 916:918 transaction failed 29201/-71, size 0-0 line 2882 15:08:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 634.835445] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.892639] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.941515] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 634.948956] binder_alloc: binder_alloc_mmap_handler: 916 20001000-20004000 already mapped failed -16 [ 634.993929] binder: BINDER_SET_CONTEXT_MGR already set [ 635.012958] binder: 916:918 ioctl 40046207 0 returned -16 [ 635.027216] binder_alloc_new_buf_locked: 7 callbacks suppressed [ 635.027226] binder_alloc: 916: binder_alloc_buf, no vma [ 635.038879] binder: 916:941 transaction failed 29189/-3, size 0-0 line 2970 15:08:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x151402, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x114) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x208000) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80000) mlock2(&(0x7f0000b18000/0x1000)=nil, 0x1000, 0x0) r6 = dup(0xffffffffffffffff) mremap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000972000/0x4000)=nil) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0)=0x72, 0x8) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000380)={0x0, 0x18, 0x8, 0x0, "0563fd41529fcc634bd77f190d3950c471afc115320fef84e149b38b3eb0c16f"}) madvise(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x10200000008) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0xc397}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'teql0\x00', 0x4}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002ec0)=ANY=[], 0x0) write$cgroup_pid(r0, &(0x7f00000004c0)=r3, 0xffffffffffffff4b) accept4(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000002c0)=0x80, 0x80800) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYRES64=r2]}) r7 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x80000) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000180)="f429e5f536ba254fe45470e08e697078da9b9453089ee286fd91067970da0101f5883ef50a4b172e8df4b2a97e6365cc2ce05093f82d03f5d785366135acc5c8697ef20d9e") ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:08:27 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 15:08:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f00000006c0)=""/229, 0xffffffffffffff4c) exit(0x0) getdents(r0, &(0x7f0000000040)=""/202, 0x45a40b78) 15:08:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x7, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 635.106307] binder_alloc: 916: binder_alloc_buf, no vma [ 635.111832] binder: 916:938 transaction failed 29189/-3, size 0-0 line 2970 [ 635.126701] binder: send failed reply for transaction 1059, target dead 15:08:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 635.151984] binder: undelivered TRANSACTION_ERROR: 29189 [ 635.165861] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 635.173312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 635.184666] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 635.186950] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xf7, 0x501000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x200}, 0x10) [ 635.243183] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 635.250707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 635.264805] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 635.288212] binder: 961:962 got new transaction with bad transaction stack, transaction 1064 has target 961:962 [ 635.298556] binder: 961:962 transaction failed 29201/-71, size 0-0 line 2882 15:08:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 635.333863] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 635.341348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 635.402958] binder_alloc: binder_alloc_mmap_handler: 961 20001000-20004000 already mapped failed -16 [ 635.413486] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 635.427876] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 635.448807] binder: BINDER_SET_CONTEXT_MGR already set [ 635.466216] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:27 executing program 4: r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="37c9dd4664ae03d1bb19a67d664037946a0cd9dbc3b9da93c9c0beea18bd65e080e6d05a108f55d680c5412b90502900a6f0261ce73859933d75a833540cc3552a0ddd0ce4aaf7b639a1147ce665c68ff5ede4c57aa645bd8a9feeb02ed6bad98345f0e90aaa1139c216bcfc0f8b8a12f63bcb5d4be79b190e01d7ae2eb73748a17e7aecbffe39cda98d10fc6474fec8cf84019e9bfea3884023ad1e907f3a58eb54eac6dbd93646bdaf5642aee49ef50b613929e27bc9", 0xb7, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r1, &(0x7f0000000200)={0x18}, 0x18) 15:08:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 635.496132] binder: 961:962 ioctl 40046207 0 returned -16 [ 635.496181] binder_alloc: 961: binder_alloc_buf, no vma [ 635.507303] binder: 961:980 transaction failed 29189/-3, size 0-0 line 2970 15:08:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x80040, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="2b8b915494b75efe6aa616fde0748c20", 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff7, 0x7, 0xfffffffffffffc00, 0x800, 0x3, 0x3, 0x47, 0x0, 0x2, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x817, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x0, r0, 0x8) shmctl$IPC_RMID(0x0, 0x0) clone(0x0, &(0x7f00000002c0)="9d13d673ec246a72ac805ed96ca884f1a8216244f332b9173dce1416fd9ed9bd47fe57c01d56d52c745d8e89469ffdd0b39a71a89d43c49f8bc0d31159b3084d5e062cf9b57efd43cd40cdd6892ecd3531f156ffd533fb354bada4bb5f0a22988fcef53b34f159f40e8ea32a7755f0dda71db34f9784ac402dbf4a07d6e8021ebb38d5526c0cc92d8001c7f3b007521fe36ef99bd1ac04c2e3d88c8945a691551b53d38f84587c6bc580e3dca8d11d09d165d2379f39c132cc4206ae2cdf2dca916d641ef5ab44e5ea7f123988b14c114fa47334d49d19067b989434fd65df4058", &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000003c0)="51d762d10e41ba47b493dae661bc592a08bfdfa79f20209e24812e5257bd2c9f47ce2c420fe973fa380ff648d850fd527565755f7d8c114a4ef122dbf5617da25da06edb3917aba9a1e0fc1d43d3d574b4cf8418aa49d8889d56d1e8da109e5ae2f67378afe95c2cb87e93f34dc7e32528ff7e73919c801ab917740bfcad1e99077957a8080e") syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="078cffff29006000000cda40fff9d4c97f13", 0x12, 0x400}], 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8, 0x3}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000500)=r1, 0x4) [ 635.572857] binder_alloc: 961: binder_alloc_buf, no vma [ 635.578535] binder: 961:983 transaction failed 29189/-3, size 0-0 line 2970 15:08:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r1, &(0x7f00009fc000), 0x5fa, 0x8000, &(0x7f0000357000)={0x2, 0x4e20, @multicast1}, 0x10) sendto(r0, &(0x7f0000000280)="f8c1f2bd8f40c3dcf0d8a4808dabe2fdee56561ef2c98c2518c2ede41bdc6c97ce2b2c5623fed171460484eb83899b384cc3cbecec2b5bd451cd198ef32406515467af2b79315dd245196a117982a405cd63cd84fb51c1a23c00", 0x5a, 0x810, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x2, 0x0, {0xa, 0x4e24, 0x401, @local, 0x80000001}}}, 0x80) sendto$inet(r1, &(0x7f0000000040), 0x355, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = memfd_create(&(0x7f0000000240)='/dev/nbd#\x00', 0x2) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0xfffffffffffffcdc) bind$can_raw(r2, &(0x7f0000000380)={0x1d, r3}, 0xffffff51) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r4 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4100) ioctl$BLKRRPART(r4, 0x125f, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000300)={'veth1_to_bond\x00', {0x2, 0x4e21}}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0x97f}}, 0x30) [ 635.646967] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 635.679546] binder: send failed reply for transaction 1064, target dead [ 635.694592] binder: undelivered TRANSACTION_ERROR: 29189 [ 635.703195] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 635.750233] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 635.870663] binder: 1000:1001 got new transaction with bad transaction stack, transaction 1069 has target 1000:1001 [ 635.881425] binder: 1000:1001 transaction failed 29201/-71, size 0-0 line 2882 [ 635.984141] binder_alloc: binder_alloc_mmap_handler: 1000 20001000-20004000 already mapped failed -16 [ 636.000519] binder: BINDER_SET_CONTEXT_MGR already set [ 636.012465] binder: 1000:1001 ioctl 40046207 0 returned -16 [ 636.039873] binder_alloc: 1000: binder_alloc_buf, no vma [ 636.045459] binder: 1000:1005 transaction failed 29189/-3, size 0-0 line 2970 [ 636.075557] binder: send failed reply for transaction 1069, target dead 15:08:28 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x2b, @broadcast, 0x0, 0x0, 'sed\x00'}, {@broadcast}}, 0x44) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r4, 0xbb1) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2000, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dfd000000000000000000000300000000000000c7902c1500000000430a00000000000000000000000000000000000000000000000000000000000009000000430300000400000000000000af213c4affffffffff01000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) io_submit(r1, 0x4, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xfff, r3, &(0x7f0000000100)="33aae86aaac378b0029767e4ea451f6cea8d0f61674a7beb6ee8c06e77e71a9b21be5baffc48a5a9735de7d5326d87c77836ac8f320671f45eafddf7829b817b81bad2de577709099ec34ce736963daf817601f04a9304dc069505c908ba81ff8a141fa3c272f7938714ff6e3f1a1754086c2caeb24786eecf6ee53f94ccd60beec31cdf86b5580aa6564dd93da347b54e41855ca5e58496082efc5910c24e6a7bc386a8eb28f2196831bf", 0xab, 0x2cd, 0x0, 0x3, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x8, r4, &(0x7f0000000380)="a9448d13ddac87b55b8d9347ef4fafb2f86b3ec965c02d689bb43d043e0829d74d609aa9fbd1d3d69f1ed6c226c7209a6368740af2caa031401a0e46a576cddeb3d8f221897d7f78684aa863e4f82844b5e980b7de6d7f565880c2cf3989205ba4380237f548c9b02caa9ca53e7d48557c4840e5c54b6d5ddef301ffe9054a53904e886b5b369f0f52a1301fc816723f8cfc82167bdd1d8870aaa5ec55e18a6ce04e76e063e7904b7a7d9fae7ad878fb4c0c70aabc487237039a4324b22b10b9ec8f6d890f481470379c98e2f8ac96876bb2e27420ec9e8a7798cbf73866000d3141adddebfca00bceb76125699a", 0xee, 0x480000000, 0x0, 0x0, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x101, r4, &(0x7f0000000480)="caa08a55922bfe28a899b060ba415037121fde88ee5ec7c9e56123969bffd355d4f4b8bc2581367ffe46fe72501113438f735b130f945a1dd16617e77837b065d5e9c2e5299e45fff08e9b9446c9f74351439c75b9903cd7dd8e572d7161916ad94606c45cb8751943ea2848fb8a23e89b17fd6ed291cfe94e1ded9e35aad26ff51609fe8a02c31b8a55720e1bacd877d98a08e8f0fe3c4c94708b46c6aab09186b486f8e93d4abcc3b8024418e42668ab02be01ce5a9940", 0xb8, 0x3, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf, 0x1, r3, &(0x7f0000000580)="0a26b6a645f998550b5809c27f29d534f2ea6be026e50b6a919548d1d4fbbfef34138c216ee0d0697007fcdefa136c5f9f5f55d24f11d29432d7de5eaf25215dc02757386ae81adb7ec7f8233b11f8f1201ec59f0e557b54b988ed0b5bdbe050730f23a6363ece9f558576586d63c29054da1227a2e84914fcd89e0e1976d5c2d625fa5b7d21e2839678aa3cbd8166da7abea57291cc5c6c7a8b69b839e1afc02d8c4bb962c0eb6ec2aabe4b048c08619d32002a682b3344ab77b023ce082a8808813b84d4fdd5f213d51d2dc30bc0c65e7e92a514335b7f50ca0c35bfb6bded3207fae86e55a78395", 0xe9, 0x8001, 0x0, 0x3, r4}]) fcntl$setstatus(r5, 0x4, 0x2000) 15:08:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @multicast2}}, 0x731, 0x81, 0x1, 0x7, 0x1}, &(0x7f0000000180)=0x98) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xfffffffffffffffc, @loopback, 0xfffffffffffffffe}, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='attr/exec\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000240)) 15:08:28 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)='Q', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000084000000000000000000000000000000a23b55807ba8d6f368a886a14c7b3818993c817835992c699302284b0e093296e52bec88ef23b051daa1e9741a0bca69c26d8529e32d4949a7217fd842fe041b3704a4227db92fb87cd08d00dbfbb51f404ae523ee63eca708689a5731fe198c14f945956151d1cef5fe61fdf94ad95ad4f708a5ad9875e843adbe4dc37054d8be21c4cd89525d5cfa17eb760e8f851bcd3bd7cf907a126940e7e0e7991a04056c6c0277c83793fff3eb9e640dd541645001c55d5cbac7c3728a1a"], 0x18}], 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000000c0)) 15:08:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x1) shmctl$SHM_UNLOCK(0x0, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0xffffffffffffffaa}], 0x1, 0x400000) r0 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='mountinfo\x00', 0x0) r1 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='#\\cgroup.\x00', 0xfffffffffffffffc) keyctl$reject(0x13, r0, 0x0, 0x2, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x395c, 0x85, 0x8, 0x1, 0x5, 0x1, 0x100, 0xd62, 0x20, 0x101}) preadv(r2, &(0x7f0000000480), 0x100000000000017d, 0x0) [ 636.294160] binder: 1016:1018 got new transaction with bad transaction stack, transaction 1073 has target 1016:1018 [ 636.300051] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 636.304917] binder: 1016:1018 transaction failed 29201/-71, size 0-0 line 2882 [ 636.327908] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x12, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0xcbf, 0x2}}, 0x28) 15:08:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x101}, {r1, 0x1428}, {r0, 0x4}, {r0, 0x402}], 0x4, 0x56ab) [ 636.372820] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000000000000000000dc4cfe450500000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000159c2cde000000feffffff010000000d000000030000000000766c616e30860701ace235008a0000007465616d5f736c6176655f310000000076657468305f746f5f7465616d00000076657468315f746f5f626f6e64000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000"]}, 0x1a8) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r2, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 15:08:28 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 636.500281] binder_alloc: binder_alloc_mmap_handler: 1016 20001000-20004000 already mapped failed -16 15:08:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4000, 0x0) ioctl$KVM_NMI(r3, 0xae9a) setsockopt$inet6_buf(r4, 0x29, 0x2d, &(0x7f00000001c0)="7a0aa0e80fc53bf0379ac11fbf38440277a460f357", 0x15) write$P9_RSETATTR(r4, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000240)={0x180000000000000, 0x2, 0x9f, 0x9, 0x8}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000003d0056e655bdfb034d565d00"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0xaea2, &(0x7f0000000140)) [ 636.552967] binder: BINDER_SET_CONTEXT_MGR already set [ 636.570026] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 636.583376] binder: 1016:1047 ioctl 40046207 0 returned -16 [ 636.583448] binder_alloc: 1016: binder_alloc_buf, no vma [ 636.594806] binder: 1016:1057 transaction failed 29189/-3, size 0-0 line 2970 [ 636.604076] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 636.634920] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000240)=@dstopts={0x9f, 0x1a, [], [@calipso={0x7, 0x48, {0x6c3, 0x10, 0x6, 0x7, [0x6, 0x1ff, 0xffffffff00000000, 0x5, 0xf81, 0x1ff, 0x1, 0x6]}}, @pad1, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x401, 0x8, 0x0, 0x2, [0x9, 0x1, 0x9, 0xff]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0xfffffffffffffffb, 0x2, [0x100, 0x6, 0x6, 0x20, 0x8, 0x1000, 0xfffffffffffffffe]}}]}, 0xe0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, &(0x7f0000000380), {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c7ffda84666dccfe00ad24882103751742a0190b38c3ea87be70960de0b2"}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x4128, [0x7, 0x4e055880, 0x34, 0x8, 0x1ff, 0x8], 0x101, 0x644, 0xfffffffffffffffb}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xe7f, [0x0, 0x100000000, 0x0, 0x3ff, 0x8000, 0x4a5], 0x5, 0x3f, 0x9}, {0x0, [0x3, 0x7d0, 0x1ff, 0x3, 0x8000, 0xffffffffffffffdb], 0x0, 0x8000, 0x5}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000180)=0xa, 0x4) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = socket$inet6(0xa, 0x3, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) getrusage(0x0, &(0x7f0000000400)) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 636.668488] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 636.684168] binder_thread_release: 8 callbacks suppressed [ 636.684180] binder: release 1016:1018 transaction 1073 in, still active [ 636.696630] binder: send failed reply for transaction 1073 to 1016:1018 15:08:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 636.777185] binder: undelivered TRANSACTION_ERROR: 29189 [ 636.792244] tls_set_device_offload: netdev not found [ 636.800298] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 636.809286] binder: undelivered TRANSACTION_ERROR: 29189 [ 636.891575] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x81}) 15:08:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\f\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='tls\x00', r0}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40601, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, 0x5}, 0xfffffffffffffe47) 15:08:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000a80)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$evdev(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x2710}, 0x0, 0x8}, {{0x77359400}, 0x0, 0x0, 0xffffffffffffffe0}], 0x30) r2 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x85, 0x7fff, 0x5, 0xa00, 0x0, 0x9, 0x80000, 0x2, 0x2, 0x3, 0xfffffffffffffff9, 0x3ad9f0f, 0x3, 0x80000000, 0x8, 0x8, 0x0, 0x8001, 0x4, 0x8001, 0x7f, 0x1ff, 0x8, 0x1, 0x8, 0x8, 0x3, 0x400, 0x99c0000000000000, 0x0, 0x80000000, 0x41, 0x40, 0xc000000000000000, 0x7, 0x7fff, 0x0, 0x9, 0x2, @perf_config_ext={0x1e69, 0x200}, 0x90, 0xe3c, 0x1, 0x0, 0xfff, 0x317, 0x2}, r2, 0xc, 0xffffffffffffffff, 0x8) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="09007900000079db00"], &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000880)='devpts\x00', 0x2010, 0x0) socket$inet(0x2, 0x0, 0x1) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x18) r3 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') link(&(0x7f0000000940)='./file0/file0\x00', &(0x7f00000009c0)='./file0/file0\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000980)=0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'syzkaller1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d00)={'team0\x00', r4}) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000a00)=""/95) io_submit(0x0, 0x6, &(0x7f0000000840)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000340)="4ca126357ad0c2ea036b110601bf8db3db0bc68c7c10cafc58bb69db1acc156b6b0f941d16a9a9853a20f02e8ebcc9a0bc223e71f9e08af2a44aaa497028817e73444936e47186e797c94de41a4d77985a21a2d471fcff72ed345e0392c582930771007a19c787b7b40939a5903b4862b55b6baebebb8c433b4a4fc88e3953be6580d327214f7282ee3dfd7440b3ecd96a0d0979f828e2cf5b67a52921a8cdb73c573f8bd8fedba682980c6186d74eea8ef50b8fb2d592e1e70b4c2b7ff6727b00df307848da513aa9b7dd6c661d64480d24bcfbfcf551ce9b1de7deb35c5bc34af1a28367e16a38572b1fa0a7a4a4c192f24ce4019a2664da", 0xf9, 0x5, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xf, 0xfffffffffffffff9, r1, &(0x7f0000000280)}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000440)="7e8f8127fd77ea02e384fb8521f7ece51c7f398d41e1b864cea2be1e7c7f27aaf54147a2c67c220323f3fcc5d1a6957106f2d0485379b94a9875340c65ed126a254ea4380b3cedc21149ce054f167ef69aee9c10", 0x54, 0x80000001, 0x0, 0x2, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x9, 0x9e49, r1, &(0x7f0000000500)="5a0040941c0d585dc38c05b2018cd954b39a495c2c94717c1ce9eff6b43811ebfcc87616b1699409a9017c986293391f3844c65a123e2f1f01ad7e9254dbcc1e19cd2a07cbe2e2c02b382f086b19186e4380d2462d3b09e27ea32e09b450f13182018372f5346c1cbbc443d368c5043de4fe6014e1ad3522d9042ba21492e141f55cd76cbfc41003dab6a744709b81ef49737406667752fc", 0x98, 0x94, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r0, &(0x7f0000000600)="089f14edf054813a82b03e1b5d3b57e897cff342fb6f2c551ca026efef605b4aade7a39b3b7250fa5fee1e1c6d0f54c812153cea16fea6d83d5d4e36763ca11e97edde6ba1ea5dda4fff82af4306250e743d323e499da193a6d1cf646f0eb92f3bc46e8dcf159e0263d7958053d6fdef10104526bb0028f93db6c99d43ff16b27a75c144639487dd6de702e0f6", 0x8d, 0x400, 0x0, 0x2, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x80, r1, &(0x7f0000000700)="058a9ae9606ee9905a7c7a4177c040c9b993a05accdc13713c7180147c8892837fca386c14fc7e116485a3f5279ba9df96ff5b6b7c5b7d5811e6fcba5c015decf6e11fba0bf160927d5dcfcde77ac2bb94d8939330785cbaa422103ea1357cb53ebcf219a9a656fc44a892dffb7ca8d03b4f8f7f8eaa9b30a817ecd7454c906b9e215d6a3ddf7c6e58a9aef00d2ce1b8fb09937ecd82329e95d93db8c322bbe1da307290f34c55f152f8977fdf580db3664aae8bb3fdcb20749d7a4aa6f24d0d3d931f2b1cf9fdc63290d1b22eba753fac0346586cf9fd95ab1dbfc29294e6a3bd6ddfe1", 0xe4, 0xff, 0x0, 0x3, 0xffffffffffffff9c}]) 15:08:29 executing program 2: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x400000000000000, 0x0) [ 637.460060] binder: 1087:1088 got new transaction with bad transaction stack, transaction 1077 has target 1087:1088 [ 637.483832] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 637.493013] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:29 executing program 0: r0 = perf_event_open(&(0x7f0000001000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00'}, &(0x7f0000000240)=0x54) semget(0x0, 0xa946cc943aa7f47, 0x70) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x7, 0x40810, 0x0, 0xb842, 0x8, 0x4, 0x1, 0xfff, 0x40, 0x7, 0xffffffffffff475b, 0x6, 0xfb7, 0x7, 0x9, 0x318d5954, 0x20000000, 0x7, 0xfff, 0x80, 0x101, 0x5, 0x3, 0x916, 0x80000001, 0xffffffff, 0x1, 0xba90, 0x0, 0x8, 0x1, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x2, 0x8, 0x5, 0x6312, 0x7fffffff, 0xfffffffffffff000}, r2, 0xe, r0, 0x1) [ 637.522052] binder_alloc: binder_alloc_mmap_handler: 1087 20001000-20004000 already mapped failed -16 [ 637.543104] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 637.543108] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:29 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xffffffffffffffb5, @local}, @in6={0xa, 0x4e20, 0x80000000, @remote, 0x5}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x6}, @in6={0xa, 0x4e24, 0x4, @empty, 0x7}], 0x80) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x200, 0x400000) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000140)='./file0\x00', r3, r4, 0x1000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x100000000, 0x7, 0x7fff, 0x5, 0x1000, 0x200}) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}, 0x0) 15:08:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 637.567635] tls_set_device_offload: netdev not found [ 637.588457] binder: BINDER_SET_CONTEXT_MGR already set [ 637.599853] binder: 1087:1088 ioctl 40046207 0 returned -16 [ 637.645192] binder_alloc: 1087: binder_alloc_buf, no vma [ 637.680638] binder_alloc: 1087: binder_alloc_buf, no vma 15:08:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4e23236b, 0x600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) r5 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = getuid() stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) r15 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000780)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000880)=0xe8) r17 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000009c0)=0xe8) getgroups(0x1, &(0x7f0000000a00)=[0xee01]) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000ac0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r3, &(0x7f0000001840)=ANY=[@ANYBLOB="e8050000feffffff070000000000000002000000000000000000000000000000050000000000000004000000000000000000008009000019030000000000000000000000000000000400000000000000fbffffffffffffff0800000000000007000000000000000200000001000000ffff000006000000ff0f0000ee00496af68c9c66bd3310282ce35ac0b3439bb405000000dfd5e76f00b4b52c388ed287ab14774c60ac5978a2a2465ef98a4b385daf00085ccb57d489b1ff0bb5e213df0b8bb50cb0c6b95b7126985100", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="86040000ad07000000000000010000000000000000000000000000000000000001000000020000000000000003000000000000000301000000000000060000000000000006000001c300000006000000f000000017030000008e000000e100000000000000ffff00000000000003000000000000000000b70600000800000080000000010000000002000005d70c6aeab10e5ee8c9c4c3da81944f18873663e6b73dfef2c8a978b8ca8ed210016cb5c59639d47b952f374a48e25313bd2345980711a5a44157d606fb6a75ae801b21c0f793574a6aa24b79e4e08db7cca752fcf8d35175c915d9753765b97e79b4ace891673ed4d321a25b669c94e2efa10402ccd1c9a91bb6a4e0b348cdc51a3eeaa1d49139d27100c163404c520998d3677b65bb68917345", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00f0ffff40000000000000000600000000000000040000000000000000000000060000000500000000000000030000000000000090e9000000000000ffffffff00000000ff03000003000000050000000000000000000000000000000500000000000000e00e00000000000069020000000000008800000000000000050000001f000000070000006000000004000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1f0000001f00000000000000020000000000000040000000000000000a000000010000002f6465762f70746d780000000000000004000000000000000200000000000000ffff0000000000000100000001000000070000008c0d000004000000000000000200000000000000ff030000000000000800000000000000040000000000000020000000000000000000000042d30000090000000000000009000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="690000000300000000000000040000000000000001000000000000001e000000090000002947504c2f2473656375726974792f637075736574656d303a707070312d0000000000000000000000000000000000000700000000000000070000000000000004000000060000000100000000000000ff00000000000000050000000000000009000000000000002409000000000000000400000000000001000000ff0f0000ff070000af22000081000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="c4000000ab23000000000000060000000000000000000080000000000c000000050000002c2d2d2c70726f636264657600000000020000000000000003000000000000000300000000000000020000000000000004000000ff0f0000070000000000000007000000000000004000000000000000ff7f000000000000310000000000000000000000000000000600000005000000320000000400000000040000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="ff070000b2030000000000000100000000000000b6050000000000000d00000001000000556574683176626f786e657430000000030000000000000000000000000000000600000000000000060000000000000039060000050000000400000000000000000000000000000009000000000000008000000000000000010000000000000006000000000000000000000007000000400000002000000003000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="010000000080000000000000010000000000000000000000000000000a000000010000002f6465762f70746d7800000000000000030000000000000003000000000000004600000000000000de0000000000000004000000010000000200000000000000080000000000000007000000000000000600000000000000f7ffffffffffffff07000000000000000900000008000000070000000000010005000000", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="07000000000100000000000005000000000000000000ffffffffffff0a000000030000002f6465762f70746d7800000000000000030000000000000003000000000000000002000000000000040000000000000000010000008000000000000000000000000000000000000000000000000000000200000000000000018000000000000007000000000000000600000001040000faffffff018000000971ffff", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="050000000400000000000000040000000000000008000000000000000a000000010000002f6465762f70746d7800000000000000"], 0x5e8) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f2786cce0fad21c4ce22cf1aed03b5ee77000000000000000000023ae9bf4041000ae3f4eb7505000000bb02107e7060799f0d8813c9caadc9e163c77b492492", "c3ad24a5ccb7412c2ab68f4429c8d2dd6c39de29daf4692562dce4423008719f30a13fcc8346eb3b962f8a512471d87c1e0bea3523941df7054fdd81130cdc2e", "22481815e3f3c8f7cb5d417c992df1e792cb400c906176bce6107e55707b7802"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xffffffffffffff3f}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r22 = syz_open_pts(r2, 0x20201) write(r22, &(0x7f0000000140), 0x28d) 15:08:30 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x117981) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local, 0x2000000004}, 0xfffffffffffffe98) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000200)="69726c606e30044ad12e312ca85dcb6b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000300)=""/94) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x3}, 0x20) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0xfffffee8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0x2, 0xffffffffffffffff, 0xea}, 0x8) rt_tgsigqueueinfo(r5, r5, 0x14, &(0x7f0000000280)={0x0, 0xffffffff, 0x100000000, 0xfffffffffffffffe}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000140)=ANY=[]) 15:08:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x200000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) [ 637.725931] binder: release 1087:1088 transaction 1077 in, still active [ 637.732843] binder: send failed reply for transaction 1077 to 1087:1088 [ 637.761495] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) getsockopt(r0, 0x2, 0x168000000000, &(0x7f0000000240)=""/168, &(0x7f0000000040)=0xa8) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0001000059e19a14237b351c4372bcec0f0aaa90d5fa131b99c593f55d4d52492f67d3d2", @ANYRES16=r2, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x4801) [ 637.797440] binder: undelivered TRANSACTION_ERROR: 29189 [ 637.829873] binder: undelivered TRANSACTION_ERROR: 29189 [ 637.836324] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) 15:08:30 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe0000000000000000bbfe"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff00000000000000000000000000000000000002"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4081) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000012c0)={r2, 0x3}, &(0x7f0000001300)=0x8) [ 637.867562] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 637.945870] binder: 1140:1143 got new transaction with bad transaction stack, transaction 1082 has target 1140:1143 15:08:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 638.001433] binder_alloc: binder_alloc_mmap_handler: 1140 20001000-20004000 already mapped failed -16 [ 638.058672] binder: BINDER_SET_CONTEXT_MGR already set 15:08:30 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x801, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0xa, 0x5, {0x57, 0xfffffffffffffff8, 0x3ff, {0xe5d, 0x6}, {0x0, 0x200}, @rumble={0x8608, 0x3f}}, {0x52, 0x1, 0x0, {0xffffffffffffffc1, 0x4}, {0x5e1ff614, 0xff}, @const={0x2, {0x80, 0x2, 0x0, 0x200}}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) dup3(r1, r2, 0x80000) 15:08:30 executing program 0: munlockall() syz_mount_image$ceph(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xf0, &(0x7f0000000940), 0x0, &(0x7f0000000a00)='#}GPLppp1+em1em1\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, &(0x7f0000000180)='eth1:\x00') r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@multicast1, @broadcast}, &(0x7f0000000200)=0xc) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000002c0)={'filter\x00', 0xc0, "f546e86a0075df6ffce02599e83cb8228443e959ce8357a77a00717821f7c7ae73895fdd63dab96dc34e11d5f13da8f9fdb8b98592fa85b13911a31396d776859194d05fdb3a50a421787d533f0e8ddc8413f5a36953fd6f03bd2d86976a4834bbb403fbb1e9dd0cb95e2cf44533b5d024441c482ea95ed7c9ea3003bfab1109f77c01f0ace6b6cdb9f2e4cb0489a387fc8c31412e5eae1a2e95966bde27c31e017dc15de062fd4388cb6983556ac0cf1dcb21d01925e4729a2c7fd0f2f1f401"}, &(0x7f0000000040)=0xe4) [ 638.093180] binder: 1140:1143 ioctl 40046207 0 returned -16 [ 638.093239] binder_alloc: 1140: binder_alloc_buf, no vma [ 638.104991] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 638.122275] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 638.147249] binder_alloc: 1140: binder_alloc_buf, no vma [ 638.174414] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 638.186916] binder: release 1140:1143 transaction 1082 out, still active 15:08:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0xc0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000240)={0x0, 0x5000, 0x10001, 0x1000}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @ipv4={[], [], @local}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = msgget$private(0x0, 0x4) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000440)=""/150) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) accept4$bt_l2cap(r1, &(0x7f0000000300), &(0x7f0000000380)=0xe, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x54, 0x10001, 0x7fffffff, 0x9}, 0x10) 15:08:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x1, 0x6, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 638.199299] binder: undelivered TRANSACTION_ERROR: 29189 [ 638.238203] binder: release 1140:1143 transaction 1082 in, still active [ 638.245102] binder: send failed reply for transaction 1082, target dead 15:08:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x340, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 15:08:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet(r0, &(0x7f0000000280), &(0x7f00000002c0)=0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'syz_tun\x00'}, 0x18) socketpair(0x11, 0x7, 0x1dbe3007, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x4f, "7fc2b543902474a52891a8d6f7a62dc70c9685f49acf3f0de038a1ac40fdb6d7425bec0c95d13318fe07871842ab42cc182758e3ad56c2816f35524a5e743964033ffe160de91e160ccb882d0217a2"}, &(0x7f00000000c0)=0x42) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r3, 0x40}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0x6}}}, &(0x7f0000000100)=0x84) 15:08:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x294) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0xbf}) r1 = socket$inet6(0xa, 0x8, 0x7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}}}, 0x5, 0x2}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r2, 0x7f}, &(0x7f0000000380)=0x8) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0105303, &(0x7f00000001c0)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) sched_setparam(r3, &(0x7f00000003c0)=0x3f1d) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 15:08:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 638.409799] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x18e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 638.455836] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 638.458139] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:30 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x113000) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x401, 0x2}}, 0x30) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/170, &(0x7f0000001340)=0xaa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, &(0x7f0000000380), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="66b8008000000f23d00f21f86635000000070f23f80f20e06635000004000f22e09a0090f1000f06660fede70fc719baf80c66b850d1618666efbafc0c66ed2e66dd4e4e3e0f09ea6f351401", 0x4c}], 0xaaaade3, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)="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", 0x1000, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7fffffff) 15:08:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="021700000a000000000000000000000004000300000000000000000000000000000000000000000000000000000000000400030000000000000000000000000000bd82b8fba719179571e5bb88806e6c000000000000000000000000000000a9c0c6f31b42a028980a5558be00b40368d8bc3c6ba0a09443912160fcb513f7cb29bd"], 0x50}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) [ 638.540505] binder: 1217:1218 got new transaction with bad transaction stack, transaction 1087 has target 1217:1218 [ 638.569904] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 638.582268] binder_alloc: binder_alloc_mmap_handler: 1217 20001000-20004000 already mapped failed -16 15:08:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) socketpair$inet(0x2, 0x801, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xb5, "a80e6b28e67ffe49334a21cb44cb6f9c4b83c1c792ca035f1469fccde03a26e91ed32d525f457c3de8c057be89694c70d765f07237dc36629227bd568efc2333affb1e33944c7fe0a035aedc7e55d6760534f52e218bed2ee8bfdb999bf1e9b106b5427e4389a4974877622d859485ee549e8f61feba6a301c4393be939331a40d49f93812f1055b37764e995459c3db28416b6e47291ec7644062fc7f2a7c56447fa864c75696deeaea2831c0bc11a600ade0e93d"}, &(0x7f0000000080)=0xbd) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x9, 0x8208, 0x8, 0x2, 0xc587, 0x100, 0x0, r2}, &(0x7f00000001c0)=0x20) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 638.638531] binder: BINDER_SET_CONTEXT_MGR already set [ 638.656882] binder: 1217:1218 ioctl 40046207 0 returned -16 15:08:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 638.681592] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 638.711226] binder: release 1217:1218 transaction 1087 out, still active [ 638.724005] binder: undelivered TRANSACTION_ERROR: 29189 15:08:31 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x60, 0x84441) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x3, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001340)={r4, &(0x7f0000001180), &(0x7f0000001280)=""/130}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f00000001c0), &(0x7f0000000000)=""/127}, 0x18) r5 = memfd_create(&(0x7f0000000a80)="2762f7ffffff6d6e6574312b6c6f2b70707030736563757269747976626f786e65743073656c665e2c73656c667070703000", 0x0) ftruncate(r5, 0x44004) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r5, &(0x7f0000000000)=0x3, 0x7ff6) [ 638.743564] binder: release 1217:1218 transaction 1087 in, still active [ 638.750521] binder: send failed reply for transaction 1087, target dead 15:08:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd25, 0x25dfdbfc, {0x2, 0x90, 0x0, 0xc000000000000000, 0x0, 0x1, 0xfd, 0x9, 0x200}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 638.835056] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000b0aa0300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0xfffffffffffffffb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xc00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) [ 638.907156] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 638.937174] binder: 1257:1260 got new transaction with bad transaction stack, transaction 1092 has target 1257:1260 15:08:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5589, 0x0, 0x0, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x85, 0x0, 0x0, 0x200000000000001, 0x0, 0x100, 0x9}) syz_open_pts(r0, 0x0) [ 638.972369] binder_alloc: binder_alloc_mmap_handler: 1257 20001000-20004000 already mapped failed -16 15:08:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:31 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000591fee)=ANY=[@ANYBLOB="aaaa6329aaffaaaaaaaaaaff8100000088a8"], &(0x7f0000746ff0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) [ 639.035524] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.075911] binder: BINDER_SET_CONTEXT_MGR already set [ 639.116123] binder: 1257:1260 ioctl 40046207 0 returned -16 [ 639.144422] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.153687] binder: release 1257:1260 transaction 1092 in, still active [ 639.160564] binder: send failed reply for transaction 1092 to 1257:1260 [ 639.193565] binder: undelivered TRANSACTION_ERROR: 29189 [ 639.214317] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:31 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x121, 0x0, &(0x7f0000001380)={0x77359400}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x100, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8000, 0x80000) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000140)) 15:08:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r0, &(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000500)=0x80) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="aaa598cdc8d6ad7618ba247a3a7a71a5d2125270817e7e3528466d3dbecf41f6b9017598072813471154ea27e3e8d7b6ffeea127286fd5ed8c0723222604624e4f432323b13e867c4b701b924d11d5982c4a654fbd828fa41f752d4862a3b4baa94df1950d2e20801e1dcc1fc91195dba5c021ed7fe521ef30b26d6b21") setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4, 0x2000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) r4 = geteuid() r5 = fcntl$getown(r2, 0x9) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x17e0, 0x13, 0xf, 0x714, 0x70bd2c, 0x25dfdbfc, {0xe, 0x0, 0x2}, [@nested={0x134, 0x96, [@generic="8c5491b0db0cbf3134528b67694d8bbc26d80ebf0f75b26115e3738c16a3b2e4b8b81630", @typed={0x8, 0x35, @ipv4=@loopback}, @typed={0x8, 0x50, @u32=0x3f}, @typed={0x14, 0x90, @ipv6=@local}, @generic="dfc1d6f92bfca621756b7ec177a2673a6e0146df7c95a0273fca4e0d2d0993364e11be36fd38d5724a3b1ab8fca46ea5e7ccf41953a2378dae0c66b772593a667b6335dda9884d0f1540190e6ce505ae5215ec96dfb084bcca85af7d41517b1ae7442a2724a1c1232ec29f450629739f16fdfa71945dfb66252b04246d525572eb14ee61cff561eabfd5a0cf4209f14b498527cf70b1b6bfe4cd6ddde014673948494342328db4a7d742efcf56d5f4291f0300ff2e5a4a5c0b", @generic="70d4f92568330904c0e70e767dc271981e6532e13375a5910cefbcf5782d59be11dbec82a1ab614581f25dec5bd75e"]}, @nested={0x200, 0x5e, [@typed={0x8, 0x2f, @ipv4=@remote}, @generic="000f05e63ce8e22f7b720bf37db32f7b43185355de19e3ed5104a275ea0815ec4415f27f6d23336963fc7a26c1030265fa944f010b5b5b2e003be09d5b0e35c4161b65769ab1216b0d3a242521dbec94b4d8203548301909cb8d4a68607ba9a4d5f049cfee0c77b7accf12960367693464f29e4419c94cca31f81b4fa768284f7801654c3e94b80f3aeca1777440009f6648834039c61eb2e37a64f416fd8b6b94ff042e75c106bee4df", @typed={0x8, 0x6d, @pid=r3}, @generic="0205aa2f12d5a4ddc53e36be7e2d7c8fcf405e671e3344b590b8808b35cb20560a487b262c873fcbcfc2dbc917022afdb4f2d994c3b27c0587d06b5913b40071ce9736c215cffb7e333446c1ad8c997a43bd2fef607437c12b4e18b3aee78207aa82a1e09b3fbcfc111317284b1ef95fd12b963252dceb8093c5e6f4a37032e4992ea4b8faf3c25d337e4f0c97b604ee1b203a02f5a0f9c1554ba508ef42a57476af196144d63b7f370c0be002e2e413d636284b83ac9ff7771e20c30dfa9f8375b0", @generic="9ebe146c13d34c4bd6ce3744f67fa0e1cb45bd465358eace7a671ac97d61e9c1132ec823947260fb023abdaaec9b0e2545c389698ee22ddc251ac5bdfa4b12a626433b5c680c79cbb0620ec0fd763f8d0e", @typed={0x8, 0x60, @uid=r4}, @generic="038b3188c29427166adb3218ecd7e24724983da0bcdd7f3c7246f8350b22", @typed={0x8, 0x4e, @ipv4=@loopback}]}, @typed={0x8, 0x90, @ipv4=@local}, @nested={0x90, 0x84, [@generic="ebb4839ce73618e0c9b57d4f14adcf5734342a6bd1290437a19a0b33711725b0c94658f20db3408086f50bc95e570ac289f1af777736e542b714f4025c23e4251c6ccc48c859376b85bec7cc8d324432283f21adf614f5ef27f90656a44c7eec0f9b729ddf23c572f433d277bb2f", @typed={0x8, 0x30, @pid=r5}, @typed={0x14, 0x22, @ipv6=@mcast1}]}, @typed={0x8, 0x59, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @nested={0x314, 0x56, [@generic="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", @typed={0x58, 0x4a, @binary="25d46ab1bcc39f43359500bc384364b31d85c44f2af85c4b70536d5af2ad1cd63c598f7cc36a0e1e0ccb03654cceba7c7ad7872ddae0438888bd66020918cc1fb51f31b56bb0a470d681b406e147a3c06f6b6e8a"}, @generic="8ee7358bdd9c5f8bb8758a46bca90a21b5837ada40e5391060421fafadf5c6bc4418a3120617e64d227c34ba4197c2126868a17b4ec2f0e9ab23f6fdc6b7867c2a4660672424a6a9d4520c700e89accecc74816a479514c82b82cf6ae4a21b15580b70f08055167d80a73559a52562da79d48a5a2c95b4aea6f2b1c5966e0bd2031bed6258c1ce3b78ac518c4aef7bfc49509bf20a66faa1acee27db7794e1accffc3b9e737d88a53c917e6cc5be3462e7f8e8ba04047c434a63c0460890e08911386968777868e1e452177acfbe0d7a6c385af028eb236e69b0bc3cfcf0f841704e4c0603", @generic="855c35eb1322c8ebe360b3c5dfdcb19ea91248bb3147b447b6fae2e4b51af6a61318abc21a9a9dd601b74ba89819a75628019ef5c7fc4cafd2ef6b65be384e851fc4db872ff47c14bc012f111cadf1d9e3eaa2bd3e0ae27dce607437b04b5c1c19bd4512b8e0950ba3f526858722cee06b124452d71e6c90e002f6c476fb7638e44ffe3c6e0cbf1d4e8fdf6eeaf6954b8da2ab2c5fd90f8e09ae2a183ff4ca7e515c42c989e3907412f6707aa4e535f541b869778282143d7c054a6d16fc2391bd9335e2c0730c2366432c7b0720a6faa6"]}, @nested={0x1074, 0x24, [@typed={0x8, 0x27, @pid=r6}, @typed={0x68, 0x63, @binary="c7e672f52978de88c470556ebe48f43b5b6434470fd074fd0a801a99da970e13f4a53905c47e7cfa77f4e6f87c4bfa9f1df97ea9c398dcfaec13f6e8475425a69b45367e9382911ab9320a6bbb9df3d0b28cf2cafff74b09611037049d7a67311b357a11"}, @generic="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"]}, @nested={0x70, 0x88, [@typed={0x8, 0xe, @ipv4=@loopback}, @typed={0x10, 0x1d, @str='eth0)]!(\x00'}, @generic="14c93b33f6b21487a075e6214ad971696b4a01c07e8a51fd3b3185fd84605b45e274694fd056426bf1849116a59044231075e1db62aa4566a375d0f207957da72b75668ff14027e565e673c1d0560d2bcb9e1d"]}]}, 0x17e0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x9, 0x4) 15:08:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000100)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80, 0x0) getpid() 15:08:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:31 executing program 0: clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000661cb86ec80000000000000000002e529625485b26d200000000000000000000000000000000c0ffffff000000420000000000000000000000000000000000000000200000000000000000000000000000000000000000"], 0x68) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) 15:08:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x3, 0xfffffdeb) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0xffffffffffffffbc) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)={&(0x7f0000000400)='./file0\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = accept(r0, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x80) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000740)={0x2, &(0x7f0000000500)=[{}, {}]}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x180) getpeername$inet(r3, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, &(0x7f0000000180)=0x10) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000240)) r4 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 15:08:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) [ 639.385065] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.392235] binder: 1298:1304 got new transaction with bad transaction stack, transaction 1096 has target 1298:1304 [ 639.401795] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x23, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 639.435667] binder_alloc: binder_alloc_mmap_handler: 1298 20001000-20004000 already mapped failed -16 [ 639.461093] binder: BINDER_SET_CONTEXT_MGR already set [ 639.462938] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.473951] binder: 1298:1304 ioctl 40046207 0 returned -16 15:08:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505330, &(0x7f0000000340)={{0x0, 0x3}}) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) r3 = getgid() keyctl$chown(0x4, r1, r2, r3) 15:08:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 639.523841] binder: release 1298:1304 transaction 1096 out, still active [ 639.536515] binder: undelivered TRANSACTION_ERROR: 29189 15:08:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @rand_addr=0x8}, 0x1f, 0x2, 0xff, 0x8, 0x685e, 0x1, 0x6}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:31 executing program 0: set_thread_area(&(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x100000000, 0x3, 0x2, 0x9, 0x2, 0x80000001, 0x7fffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000200)="787af068aa03913e40cd54092fc5039563b7c7bfeeb65733fb7df06998eb5761cee5d1b4d0a635d44ddb9484668166757a2088d48dc14283208e4a23542c9ee92595203fa64d51022683", 0x4a, 0x1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000001640)=""/166) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e21, 0x80000000000000, @dev={0xfe, 0x80, [], 0xc}, 0x81}, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [], @multicast2}, 0x53}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0x4, @empty, 0x10001}, @in6={0xa, 0x4e20, 0x10000, @mcast2, 0xff}, @in6={0xa, 0x4e24, 0x100000001, @local, 0x8}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}], 0xdc) close(r0) readlinkat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x3, &(0x7f0000000100)=0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000440)) select(0x40, &(0x7f0000000040)={0x1f, 0x8, 0x7, 0x5, 0x0, 0x6, 0x3}, &(0x7f0000000080)={0xfd, 0x8cc, 0x901, 0x5, 0x1, 0xfffffffffffffed0, 0x0, 0x2}, &(0x7f00000000c0)={0x80000000, 0x2, 0xf79a, 0xe0fa, 0x33749b12, 0x5, 0x0, 0x7fff}, &(0x7f0000000180)={0x77359400}) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="100000004ee793000000000000000000", 0x10}]) [ 639.579352] binder: release 1298:1304 transaction 1096 in, still active [ 639.586256] binder: send failed reply for transaction 1096, target dead 15:08:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 639.644258] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.704971] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.742873] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.755834] binder: 1348:1349 got new transaction with bad transaction stack, transaction 1101 has target 1348:1349 [ 639.766556] binder_transaction: 14 callbacks suppressed [ 639.766575] binder: 1348:1349 transaction failed 29201/-71, size 0-0 line 2882 [ 639.794665] binder_alloc: binder_alloc_mmap_handler: 1348 20001000-20004000 already mapped failed -16 15:08:32 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x121, 0x0, &(0x7f0000001380)={0x77359400}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x100, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8000, 0x80000) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000140)) 15:08:32 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000), 0x0, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) 15:08:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:32 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:32 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x6) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001080)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2444, 0x869, 0x4, 0x4}]}, 0x10) [ 639.826064] binder: BINDER_SET_CONTEXT_MGR already set [ 639.840109] binder: 1348:1349 ioctl 40046207 0 returned -16 [ 639.854007] binder: 1348:1355 transaction failed 29189/-3, size 0-0 line 2970 [ 639.866874] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 639.878938] binder: 1348:1363 transaction failed 29189/-3, size 0-0 line 2970 [ 639.898318] binder: release 1348:1349 transaction 1101 out, still active [ 639.912939] binder: send failed reply for transaction 1101, target dead 15:08:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000280)) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x4) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x11, 0x40000002, r1, &(0x7f0000000240)="2e2f66692e65318c00") 15:08:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 639.947297] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.002581] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f00000001c0)=""/139, 0x8b) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x81, 0x20, 0x3}) 15:08:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) fadvise64(r0, 0x0, 0x1f, 0x0) 15:08:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000080)=[{0x6, 0xb6, 0x5}, {0x7, 0x4, 0x3, 0x25}, {0x80000000, 0x5, 0x3, 0x4}, {0x0, 0x8000, 0x6, 0xfffffffffffffff7}, {0x9, 0x9, 0xfffffffffffffffc, 0x202000}]}, 0x10) semget$private(0x0, 0x3, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x40000) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 640.076496] binder: 1379:1380 got new transaction with bad transaction stack, transaction 1106 has target 1379:1380 [ 640.087327] binder: 1379:1380 transaction failed 29201/-71, size 0-0 line 2882 [ 640.088149] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 640.114699] FAT-fs (loop2): bogus number of reserved sectors [ 640.120764] FAT-fs (loop2): Can't find a valid FAT filesystem 15:08:32 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000003796400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.202506] binder_alloc: binder_alloc_mmap_handler: 1379 20001000-20004000 already mapped failed -16 [ 640.231691] FAT-fs (loop2): Unrecognized mount option "./fi.e1Œ" or missing value 15:08:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000900)=0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000000c0)=""/55) sendto$inet(r1, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0}) recvmmsg(r1, &(0x7f0000003480), 0x3ac, 0x8000a0, &(0x7f0000000140)={r3}) 15:08:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.248416] binder: BINDER_SET_CONTEXT_MGR already set [ 640.260123] binder_alloc_new_buf_locked: 7 callbacks suppressed [ 640.260136] binder_alloc: 1379: binder_alloc_buf, no vma [ 640.271933] binder: 1379:1380 ioctl 40046207 0 returned -16 [ 640.271950] binder: 1379:1407 transaction failed 29189/-3, size 0-0 line 2970 [ 640.289683] binder: send failed reply for transaction 1106, target dead [ 640.292502] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 640.336394] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) sendmmsg$inet_sctp(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x8000, @mcast2, 0x10001}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="5fcf9f95d25f5a5fe2d8b37023d519c6ab943e8ba9f49ac21ad5c3eacab125922cdb92cdce0e5889e80897999f897a17d3533cf678d56035b8c3692cbe5d7376150e6eca38b09e816b7d8702a6886922bf0057a4bc60ebe686b9f449a3a20666be6fa36f7e3f87b65cc7bcc8937d6c5fa705060fc9bfef7382871cfa7c6c2e0fee6b432df0cb7ae266b841f8868a9c4154e27f8b7508c1937d1cc7096e308a1d3570ba0bc0354463340e85fcd280ef1a05b98931e415a48ae544fd7092ab8199ec95ff314e9d01c5cf862834cccc928b6b184384fefb77a176242c", 0xdb}], 0x1, 0x0, 0x0, 0x8000}, {&(0x7f0000000180)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="c4675806eb066340c4b204bb7e16b16c41e071364b21cac3cd39c1b7c52d2197e84f0e01d0d028438c987a643e17baee439e94e368f54ec583ae80273551c6276f6cb42dcbc36b81b33255989cc3da5a77ae9a91dca9ccc97b8e5c9b7ad17f63424a9fa75853aa7f341e002e7665c01364b66bf2bfb0d3445c78d00665dc540c8763f9f7b51a784b9abc47667c23c88a4efe19babbe78f68081de7c51c", 0x9d}, {&(0x7f00000001c0)="f1985d467d9c28295b7e91c1fc0aa0e2215b848a4ffaa954aec16188bcac4d7ed9d7d23b93e4b45d7c32cd16e7ca80e7b07e0823418a4287cab59e167497d53a9c180fcf5ff1fb55e88a11d5e03dd3de", 0x50}], 0x2, &(0x7f0000000400)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}], 0x18, 0x4000}], 0x2, 0x20000801) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f00000002c0), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x3, [{{{0x9, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00', 'ip6_vti0\x00', 'bpq0\x00', @remote, [], @empty, [], 0x70, 0xe8, 0x118}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "9aa7907eb1e54a48106abea576b3cefbadabee6d0561f9f1b22ce7ceecccb6fac7c32eb8fa4f5f024e7331ea3bfd044909f45c7d21b7f7fb53a10e4bf8e9e10c"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x220) 15:08:32 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000380100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.421964] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) lseek(r0, 0x0, 0x2) ioctl$UI_DEV_DESTROY(r0, 0x5502) 15:08:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040), 0x291) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x28041, 0x0) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x0, 0x2, 0x4, 0x1, 0x100}}, 0x8) tee(r0, r1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0x2b, r2}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:32 executing program 0: socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2500, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="1414bb01000000030000000002f2ddffffffffac14141219da7316d4e2a4977f2212946b8b55da7a1e46182a93b5564c39724e1b90a5000000000000000000000000"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, r2, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x1}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x2) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000400)=0x8) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu//yz1\'', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 15:08:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.534044] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 640.549700] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain [ 640.590807] binder: 1431:1433 got new transaction with bad transaction stack, transaction 1110 has target 1431:1433 [ 640.601595] binder: 1431:1433 transaction failed 29201/-71, size 0-0 line 2882 [ 640.620328] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x7, 0x8, 0x7fff, 0x5}, 0x10) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 640.666501] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:33 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) add_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f0000000640), &(0x7f0000000680), 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0xffffffffffffffff, 0x20000008}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) tee(r0, r0, 0x7, 0x8) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) [ 640.722175] binder_alloc: binder_alloc_mmap_handler: 1431 20001000-20004000 already mapped failed -16 15:08:33 executing program 5: socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x81, 0x8000) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x1f, 0x100}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0x85, "4db91c34644a67402a7fc79f02b277962ed584f80290f1d737fd59293e5d27a7078c88d1104fbde05e0b9edcab481ba14b1574db8459df1c342b6bb551ac1cf0310ad1b223c4f0b774b3163787895561423e36a81681d3b0a2d3d2c64d78e15464c1747bb27479eab31ffa17c2f4cc0a1e2487e5d7f9aea516fa586663d7094b31aa7d816b"}, &(0x7f0000000280)=0x8d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, &(0x7f0000000180)=0x100) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) socket$pppoe(0x18, 0x1, 0x0) setsockopt(r3, 0x107, 0x5, &(0x7f00000002c0)="90f736fd92f39d47b7353b19f0e64970927cf9d4456d88654770d545cd768318c21595f5cfa5fc8e75d85842a3d1e44fc2d2b8d39b34428ce02d19379ed1a94b60bb110d2482697d9f82042f3e3ce516502d33788a7f9b1428c4b291481b8fdd3ebab0326208642aa2857a36c73e7e88796e11581e11ebca72dd5f1ed8919756d82ca464c79f045726a45ab8bac709cbddf6ff7ec83a3168e6f0b00f0858129abccc72dd7b7ba610ff5d13c0d12137f01fb7c2dc129f1000126d1bf48fd84dbe8de6124f85cf341541c928fcba20c8a0db22487b17fb5c8c032d1d641b00bea88f1f20549e8cbe14a0fe0824f6c78eb9b5005f11186b", 0xfffffffffffffedf) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040), 0x20000000000000e7, 0x0) 15:08:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000200", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.767119] binder: BINDER_SET_CONTEXT_MGR already set [ 640.773918] binder_alloc: 1431: binder_alloc_buf, no vma [ 640.779567] binder: 1431:1464 transaction failed 29189/-3, size 0-0 line 2970 [ 640.818135] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 640.837334] binder: 1431:1433 ioctl 40046207 0 returned -16 [ 640.862301] binder_alloc: 1431: binder_alloc_buf, no vma [ 640.867946] binder: 1431:1475 transaction failed 29189/-3, size 0-0 line 2970 [ 640.882835] binder: send failed reply for transaction 1110, target dead [ 640.891158] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 640.900934] binder_release_work: 1 callbacks suppressed [ 640.900941] binder: undelivered TRANSACTION_ERROR: 29189 15:08:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x3fff, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x349c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) 15:08:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000064790300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 640.901480] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:33 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x10000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@access_client='access=client'}, {@privport='privport'}, {@version_9p2000='version=9p2000'}, {@uname={'uname', 0x3d, '/dev/vga_arbiter\x00'}}, {@access_client='access=client'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_uid={'access', 0x3d, r2}}, {@access_any='access=any'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65302f4e7daec58501770ee8c0fc74f58a7320bcfc67fa8a35a0c21af78ed0d2575baec81836468de899e174d84b0b61de5620dca343abfe2905d6879c8c430c8f23e0e80e957f3d74a630a7d518a212ab477b77de5f0c93"], 0x2a) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmmsg$unix(r3, &(0x7f00000005c0)=[{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000940)="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", 0x3bf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x800) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)={0x0, 0xffffffffffffff6b}) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/autofs\x00', 0x0, 0x0) r5 = semget$private(0x0, 0x0, 0x229) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000500)=[0x0, 0x7, 0x5b]) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r7, r6}}, 0x18) getgroups(0x2, &(0x7f0000000700)=[0xee00, 0xee00]) mount$9p_xen(&(0x7f00000001c0)='dfltuid', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='9p\x00', 0x80000, &(0x7f00000007c0)={'trans=xen,', {[{@uname={'uname'}}, {@privport='privport'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@posixacl='posixacl'}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@nodevmap='nodevmap'}]}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast1}, 0x200}}, 0x1a3f, 0x0, 0x7, 0x3, 0x29}, &(0x7f00000000c0)=0x98) umount2(&(0x7f0000000780)='./file0\x00', 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @dev, @loopback}, &(0x7f0000000880)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000d00)={{{@in=@local, @in6=@local, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x2b, r10, r2}, {0xe1, 0x3, 0x5, 0x5, 0x5, 0xb6e6, 0xa, 0x1000}, {0x7fff, 0x8, 0x0, 0x4}, 0xdb, 0x6e6bb6, 0x0, 0x1, 0x1, 0x3}, {{@in6, 0x4d5, 0xff}, 0x0, @in6=@mcast1, 0x3506, 0x2, 0x0, 0x101, 0x2c, 0xffffffffffff8001, 0xffffffffffff3391}}, 0xe8) 15:08:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x1, 0x800000000000000, 0x5, 0x9, 0x0, 0x10000, 0x0, 0x2, 0x86, 0x9, 0x8, 0x8, 0x9, 0xffffffffffffff2e, 0xaa5, 0x3, 0x5, 0x5, 0x1, 0xdf03, 0x731, 0x3, 0x3ff, 0x0, 0x2d, 0xfff, 0x7f, 0x4, 0x0, 0x800, 0x8, 0x9, 0x9, 0x401, 0x9e, 0x100000001, 0x0, 0xd800000000000000, 0x5, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x81, 0xd20, 0x7, 0x8, 0x3ff, 0x6}, r1, 0xf, r0, 0xa) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200) ioctl$TIOCNOTTY(r2, 0x5422) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:33 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="33857632", @ANYRES32=0x0], &(0x7f0000000100)=0x8) tgkill(0x0, 0x0, 0x0) tkill(r1, 0x0) [ 641.061001] binder: 1496:1497 got new transaction with bad transaction stack, transaction 1115 has target 1496:1497 [ 641.071844] binder: 1496:1497 transaction failed 29201/-71, size 0-0 line 2882 15:08:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000740), 0x1000) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000e0c00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:33 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000001400), 0x0) [ 641.108154] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.140491] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.173104] binder_alloc: binder_alloc_mmap_handler: 1496 20001000-20004000 already mapped failed -16 15:08:33 executing program 5: r0 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, r1) membarrier(0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xfff, 0x40000) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0xfffffffffffffff7, 0x23, "f924bf4991c7799275047a860c6d88a1d4e87362663afcb6847b23fe699d7beeec38e5"}, 0x2b) ioctl$KDENABIO(r2, 0x4b36) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000240)=""/81) write$FUSE_STATFS(r2, &(0x7f00000002c0)={0x60, 0xfffffffffffffffe, 0x5, {{0x2, 0x4, 0x3, 0x101, 0xfffffffffffff328, 0xfffffffffffffffe, 0x2, 0x4}}}, 0x60) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r5, r6) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioprio_get$pid(0x2, r4) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000004c0)={r3, 0x101}, &(0x7f0000000500)=0x8) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) write$FUSE_GETXATTR(r2, &(0x7f0000000540)={0x18, 0x0, 0x5, {0x6}}, 0x18) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000580)) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000005c0)={@rand_addr, @dev}, &(0x7f0000000600)=0xc) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000680)=&(0x7f0000000640)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f00000006c0)="b9800000c00f3235008000000f309a0d000000f3000fc79b10fa0000d9fef30f201f660f3882680ac4e1f75a3d900000000f20a00f32660f382a5d01", 0x3c}], 0x1, 0x1, &(0x7f0000000740), 0x0) fremovexattr(r2, &(0x7f0000000780)=@known='trusted.overlay.metacopy\x00') sched_setattr(r4, &(0x7f00000007c0)={0x30, 0x1, 0x0, 0xfff, 0x400000, 0x6, 0xfe9, 0x1000}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000800)={r3, 0x2000000000000}, 0x8) pipe2$9p(&(0x7f0000000840), 0x4000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000880)={0x4}, 0x1) [ 641.218910] binder: BINDER_SET_CONTEXT_MGR already set 15:08:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 15:08:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:33 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000080000000000005a"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x480000) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x8, 0x8, 0x2, 0x7, 0xc7ee, 0x5}}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x2, @empty, 0x7}, {0xa, 0x4e23, 0x0, @mcast1, 0x7fffffff}, 0x1ff0000000000000, [0x8, 0xf069, 0x60bc, 0x8, 0x5, 0x222e, 0x272]}, 0x5c) sendmmsg(r0, &(0x7f0000007e00), 0x0, 0x10) [ 641.253125] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.267805] binder: 1496:1497 ioctl 40046207 0 returned -16 [ 641.323064] binder_alloc: 1496: binder_alloc_buf, no vma [ 641.328689] binder: 1496:1533 transaction failed 29189/-3, size 0-0 line 2970 15:08:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000003aab000", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 641.376349] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.396018] binder_alloc: 1496: binder_alloc_buf, no vma [ 641.399182] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:33 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe801, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200020000f801", 0x17}], 0x0, &(0x7f0000000340)={[{@fat=@check_relaxed='check=relaxed'}, {@dots='dots'}, {@fat=@showexec='showexec'}]}) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) 15:08:33 executing program 2: clone(0x200020fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000040b7050000000000006a0a001a00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 641.442399] binder: send failed reply for transaction 1115 to 1496:1497 [ 641.451975] binder: undelivered TRANSACTION_ERROR: 29189 [ 641.482439] binder: undelivered TRANSACTION_ERROR: 29189 15:08:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:33 executing program 5: socket(0x1, 0x0, 0x8) r0 = gettid() sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x80000001) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000140)="6e732fed6e7400") setns(r1, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000540)={0x0, 0x800}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000003c0)={0x0, 0x1, 'client0\x00', 0xffffffff80000004, "6bd93986fd7aa43e", "04bb65aaf1a20e40b1a5e7cdbf2ea413606a109791842cbb5b0a4496a60e7657", 0x0, 0x1f}) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="16", 0x1, 0x0) 15:08:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xa88, 0x400000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000240)={0x5, 0x0, [{0x80000007, 0x81, 0x5e, 0x186}, {0xc0000000, 0x442b, 0x1, 0x9, 0xff}, {0x80000007, 0x2, 0x16, 0x8, 0x9}, {0xd, 0x2, 0x80, 0x43, 0x9}, {0xd, 0xfffffffffffffffb, 0x7, 0x1ee, 0x3}]}) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x80001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 641.520654] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.603069] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.615665] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:33 executing program 0: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0xfffffffffffffffc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='F']}) 15:08:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x100000001, 0x18a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x103100, 0x0) bind$vsock_stream(r1, &(0x7f0000000680)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x1, 0xe000000000000, "0d77d7ed7125338de47145b71f2226c0b6950fff03000052d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a0282e4f743e00c7a3eff599b13d518d1000"}, 0x204) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = memfd_create(&(0x7f00000001c0)='tls\x00', 0x1) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0xc, 0xfffffffffffff800}, {0x0, 0x1ff}], 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r4 = geteuid() setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300)=0x5fdf, 0x4) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000380)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000180)=0x18, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000240)={0x3, {{0xa, 0x4e20, 0xffffffff, @mcast2, 0x20}}}, 0x88) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setreuid(r4, r4) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000740)="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", 0x1000) 15:08:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000003aab000", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:34 executing program 5: clock_gettime(0x0, &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000300), &(0x7f0000000500)="656d30af00", 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000c9d1e42a21e52e27b4ab1760d8d691335818b591e4224dfff23850606f530b0bf551adf1b811b5a54091bcdb466aecc66c7599bb4029289b4f1d7e8b791e975dbf42e8476e7995376159d0c5192903dc8c464ccb90cb6b481d7bcfd03df76f3734f14d94e5bb46969b822959a0ad41ec69a3e58704e2b497748dc5622ee56ebb"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000100)=0x401, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000002c0)=0xc) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x7, 0xfb4d, 0x0, 0x1f, 0x0, 0x323, 0x1802, 0x2, 0x7f, 0x1, 0x1, 0x7, 0x7fff, 0x80000000, 0x6d, 0x5, 0x1e8, 0x2, 0x1e3, 0x40, 0xffffffffffff062d, 0x6, 0xffffffff, 0xa011, 0x9, 0x1, 0x5, 0x6, 0x4000000000000000, 0x2551, 0xd134, 0xf5, 0x7, 0x200, 0x3, 0x101, 0x0, 0x734, 0x3, @perf_bp={&(0x7f0000000040), 0x5}, 0x20842, 0x3, 0x6, 0x7, 0x1f, 0x8, 0x1}, r2, 0x4, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[]}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000680)={r0}) bind(r3, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) dup2(0xffffffffffffffff, 0xffffffffffffffff) mlockall(0x0) [ 641.686678] binder: 1572:1573 got new transaction with bad transaction stack, transaction 1120 has target 1572:1573 [ 641.698203] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 641.724317] binder_alloc: binder_alloc_mmap_handler: 1572 20001000-20004000 already mapped failed -16 15:08:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000000)=0xe8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ifb0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x0, 0x0, "d7eea8a3ae37fca7"}}) 15:08:34 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="852e56a5b7d795497adddc19f6000000080000005d005382fdcbbbc0f7b339cbf895baed6eca61975397e6ba1be12f"], &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 641.741542] binder: BINDER_SET_CONTEXT_MGR already set 15:08:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 641.799969] binder: 1572:1573 ioctl 40046207 0 returned -16 [ 641.800024] binder_alloc: 1572: binder_alloc_buf, no vma [ 641.832582] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x33, 0x111402) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000240)=""/205, &(0x7f0000000180)=0xcd) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 641.845891] binder_thread_release: 6 callbacks suppressed [ 641.845913] binder: release 1572:1573 transaction 1120 out, still active [ 641.890060] binder: release 1572:1573 transaction 1120 in, still active [ 641.896969] binder: send failed reply for transaction 1120, target dead 15:08:34 executing program 2: add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100), &(0x7f0000000280), 0x0, 0xfffffffffffffffb) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000140)}) [ 641.924098] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) fadvise64(r0, 0x4c, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffdb3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) rt_sigpending(&(0x7f0000000040), 0x8) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000007fffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 641.977352] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x2, 0x2}, 0xe) 15:08:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 642.147011] binder_alloc: binder_alloc_mmap_handler: 1624 20001000-20004000 already mapped failed -16 [ 642.163111] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x660040, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_trie\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) [ 642.189307] binder: BINDER_SET_CONTEXT_MGR already set [ 642.207421] binder: 1624:1627 ioctl 40046207 0 returned -16 [ 642.215859] binder_alloc: 1624: binder_alloc_buf, no vma [ 642.233335] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 642.255715] binder_alloc: 1624: binder_alloc_buf, no vma 15:08:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) close(r1) io_setup(0x8, &(0x7f0000000040)=0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xd4, 0x9, 0x4, 0xfffffffffffff800, 0xa5, 0x800, {0x0, @in={{0x2, 0x4e23}}, 0x4, 0x100, 0x80000001, 0x401, 0x8}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x1f}, 0x8) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) read$FUSE(r5, &(0x7f0000002040), 0xffffffae) ioctl$int_in(r5, 0x80000000005000, &(0x7f0000000000)) socket$inet6(0xa, 0x80005, 0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)}]) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}]) 15:08:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 642.290191] binder: release 1624:1627 transaction 1124 out, still active [ 642.307770] binder: undelivered TRANSACTION_ERROR: 29189 [ 642.327195] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000ffffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:34 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="6ce147df", 0x4}], 0x1, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x0) inotify_rm_watch(r0, r1) 15:08:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 642.332261] binder: release 1624:1627 transaction 1124 in, still active [ 642.342272] binder: send failed reply for transaction 1124, target dead 15:08:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, @multicast2}, 0x10) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) getpgid(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) mremap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000bf8000/0xe000)=nil) madvise(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x10200000008) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0xc397}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x1000000, 0x4) ioctl$VT_RELDISP(r2, 0x5605) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'teql0\x00', 0x4}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002ec0)=ANY=[], 0x1ad) 15:08:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20000000) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket(0x200000000010, 0x2, 0x0) write(r1, &(0x7f0000000080), 0x0) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r3, 0xae, "51a060", "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"}}, 0x110) r4 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xdb3}, &(0x7f0000000400)=0x8) close(r0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000440)={r5, 0x1cd5}, &(0x7f0000000480)=0x8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000100)=0xc) r7 = socket$rds(0x15, 0x5, 0x0) fcntl$setstatus(r7, 0x4, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@ipv4={[], [], @local}, @local, @empty, 0x6, 0x40, 0x100, 0x500, 0x1, 0x1, r6}) [ 642.443600] binder_alloc: binder_alloc_mmap_handler: 1661 20001000-20004000 already mapped failed -16 [ 642.458031] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 642.466495] binder: BINDER_SET_CONTEXT_MGR already set [ 642.494102] binder: 1661:1663 ioctl 40046207 0 returned -16 [ 642.505406] binder_alloc: 1661: binder_alloc_buf, no vma [ 642.520950] binder: release 1661:1663 transaction 1129 out, still active 15:08:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8001, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfffffffffffffffc, @loopback, 0x401}, {0xa, 0x4e24, 0xb999, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0xd81e}, r2, 0x400}}, 0x48) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)='\r', 0x1) [ 642.541909] binder: release 1661:1663 transaction 1129 in, still active [ 642.548788] binder: send failed reply for transaction 1129, target dead [ 642.574442] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 642.647284] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 642.662930] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x60, @dev={0xfe, 0x80, [], 0x16}, 0xe5d6}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x7530}, 0x10) r1 = semget$private(0x0, 0x5, 0x110) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000001c0)) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000080)=0xfffffffffffffffd) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000840000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mlock(&(0x7f0000503000/0x2000)=nil, 0x2000) mlock2(&(0x7f00002c8000/0x2000)=nil, 0x2000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2a, 0x10000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x25d0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r2, 0x5bffd173, 0xdb, "1fdc816bcac972f6f22e16ed6feb07f60913fbb9991eb0b2e8b3bc6319d866c29ded69b1bb940dbe953ecd780d576f370456882e68c85cb9d155db326057d0968b95587b9e1f7901bf58e1f58e135b1d9df8fd8f7937f196adb5158c55b576d0b5197c12f7d235cbc7aa8d7ae11ab80b0b40eb93b1f08fb35b4f13f6a8089639c6ad9b85770160a28084c1e656e1e8ee05f363d541d2d1169e5d46261f5d2de98f1180a8b2655a840ce3c657a0b28029b94184cc5803886ca64736ec240c8fedbbe0db30df371ae88b41e2372b26df9be8bfd601afa74fac7f60da"}, 0xe3) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000903000/0x4000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 15:08:35 executing program 5: r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:08:35 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 642.753671] binder_transaction: 2 callbacks suppressed [ 642.753686] binder: 1691:1692 got new transaction with bad transaction stack, transaction 1133 has target 1691:1692 15:08:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x200}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x184) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000c0e00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:35 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f0626360f0136996d66b8010000000f23d80f21f86635000000a00f23f80f01ca66b9800000c00f326635000400000f30656726f2af65f4650f01caf40f6a2e0000", 0x42}], 0x1, 0x62, &(0x7f0000000140)=[@cr4={0x1, 0x400000}], 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003, 0x0, [0x11, 0x0, 0x0, 0x0, 0x0, 0x7]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:35 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x70b000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7f) syz_emit_ethernet(0x37, &(0x7f0000000080)={@random="77b0e1efedfa", @remote, [{[{0x9100, 0x5, 0x40, 0x2}], {0x8100, 0xdeb, 0x3, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @rand_addr, @multicast1}, @igmp={0x0, 0x0, 0x0, @empty, "000000081e"}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x0, 0xfffffffffffffffc]}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) dup3(r3, r1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/ntrack\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) msgget$private(0x0, 0xe2) socket$alg(0x26, 0x5, 0x0) 15:08:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x6, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/20, 0x14}, 0x120) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], []]}, 0x478) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x52, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="bbf49802b2cca3f4250332dc0a29202e082a6a3644752318406ddc7a21c434215a873733f72f8abf8793f524d175e6e48bddd7c5e234df4b42284753ad8a80477c6ad97d41542050aa835cd3035711b6cb5db9c34aa7d4066808d98dac6b8d689c3106e698175d71bfbf923951e78641cf5c756c5affd487a7deaac81d1724d494da18", 0x83, 0x5}], 0x40000, &(0x7f0000000340)='syz0\x00') [ 642.884932] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 642.933953] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 642.972613] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:35 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 642.989079] binder_alloc: binder_alloc_mmap_handler: 1691 20001000-20004000 already mapped failed -16 [ 643.032866] binder: BINDER_SET_CONTEXT_MGR already set [ 643.051608] binder: 1691:1692 ioctl 40046207 0 returned -16 [ 643.077027] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 643.087316] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x3, 0x2}, 0x10}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000003080)={@remote, @empty, 0x0}, &(0x7f00000030c0)=0xc) sendmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x4}, 0x1, 0x2, 0x3, 0x2}}, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="804bad62481baf5b62f785ff86339803f0637fdddeba4f7816b2d3fdd37441fa4cc4c30e9a357bcb5da49450a3de44c215e081e987a8bf73a6c00d804351fdc9bd7541f6f2edde3acb52dd1ce7ddd351ae6ebf1625b0dc44153a27bf2ff0cc45142373c0594d1f22828db97c66ca4473c5f77e50ccfb"}, {&(0x7f00000001c0)="1513b6270bb9fa602ac8be270df828a81a63853ee20725ed6b19dc7110df5877068c8aafd5e9d9678cf4ed36552174ec2924a71859eab44410352bdb5b702ef2718ee3302ddace677272244eaf0076fab9fc2053beb4782a3a3fc5e1f901a83ba91ff8149da8dace58fe7b8deea6e3f64a"}, {&(0x7f00000000c0)="52d6f135c86974263aa3a0d33928f5e334fd7335d018d2cb4b4d4b60641bd41a8eaae9897c044781f9cd970f1f5a9f"}, {&(0x7f0000000240)="35f159153a71ec78e4b6e42be05543ab4651d4f22bd7f7ef4d2038d7f4a87375cf586e5b200901a97ecb88b59b949e6e9bc2ba04ba2de3848cefe1df32d25ead886a2a80b7e95a7ca3eea3b508dae7fcd88500b624b0e9017b7295836185fd030b20617cf6522d9ea66133fc6a9810fabfeec4ff0991f9249685ef4083e26ccc97366e14cc42cb94eb3b3d5e2c3c2ffea21aec584cf1bec2c7bb221549b4a846a69520401463f643fb6fd5a8b90a10c9c28e3e7422cb9e5c80d6d5d3c4e745ef9b826a73438e54169d4a4c29dc46d15a1715b4c35a9a81ec3583f12e7f575d23c3403864564f66e05a3cf3fdaa11599ae84d8730378f"}], 0x0, &(0x7f0000000440)=[{0x0, 0x114, 0x90, "a260018e6f8d6f36d5a4ca5c6e988c76e8634e91c9528aef093e3a2504641cc0619e05f353b0973df816fccbc47c607034776234f7ac30b83c507314efe76f1d4dd5dc3fe68375e165656a629dece9085f7138d29356c2a0897c1ce2489c480e515a2cb45f2006e62740c9c019eba24b049e11a145666fb440bb95dab7342fbaf2"}], 0x0, 0x40}, 0x3}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="f685397c1f"}, {&(0x7f00000003c0)="62fd8d1d097413c68eadb29a10e14454749f7c13f91b0c9d14700d108ad3b511838ccfc5c30a"}, {&(0x7f0000000500)="fd9c2fc3c6049b395a12a7ef6add079c47e4546eac8ea4d7d6d8b130aac2a309a2f9b0bbf5d95ea89947d9421168d376643fb1bf94d3cbcbd72dd7eb28025bc0ab7fe7904d7d3ad6791bc51f4be47b2c32629b61a9c9"}, {&(0x7f0000000580)="4a724ca52bc7970803d70a32871429041e5b142b5bccce91e79c42a5c68cd98d202d136f019594333b7fc5ae945cc804d2cafa5d9e6bebb79e47a2744e05dd14b9515c9f53f60123794cea1d897881a2f6cd2862331c8f74e548497ad497f7fb8e9ab599188746c25406488f6ccd1c0a48de2a319d7139e9e7d67cfc23d2c795de860e3f27a585ad6e94f9c3fe4ddb6bd87419e1fa147db25d9c9c8c53dad8d6247917043c6d1a0ac23baf3135e80eed24e0bf83f8eeec608e9654594bf3dcbc3d7e7386a14b1c6889b0e859e8cc02031308b0d3c5aefc5693b87282b0fb74f14def20e8a688148bc736f5bb04a97384e13da0aeb641cfe2771d431023520d9a6161b5bbcd4fee70c1b7b2fff4154289ae1bcd63bae08af1a385c43fb67942a95b7c7ed86c933024e04d7c9de2ba8a839f7ac8fcbd88c5ccc212034788ee24cf6fa5853b4a0ced8e179fd51201bd3cb2b884adca38e06dea87c8deb46f13688be130f22cc750ddf013eb3c9c2a6cd4ef118b66791679f77b3ab63a403c9c85585bbcf319180d8f86bec315627f99b32dfb49e8ab2b11aee51fa7678d19c0ee65e8f457627d4323ce0d8a50fbac5ac0ff16ee3a30efdeb81fa8d4dcf498a59d4ea9babb77b728a8df57feca4442ae00041df33cee8b98d056e5a8c093804bca8f211c7dc499535baff1a499b7d7259bf005470b2c86baf9219c520aaacd8835434aa548cb9b0d3e6c123ae447ac5dad1f4251cc93c36a96d3c42f6440a3cbec1b3bdfc68f07c48284a25e7a9d9d5e1289829d8de7abe3f870d6a0e25068ad92b75b8ba2cb577d3445b3526081815f6840958ff06ab7763f502a79499f2bad258625052ad992cfe970c291fb66c8991887e6f65c4ef996e1c48c5691032903faf51d24fb670eabac33fb0064cf9c04a158235619918504c42dcd613763685dad6c7e57e93ca22d34273109c5f1059a63e43210578a7f0cb7091757052593a3554f9acc8752b836a00c26f16349c2b4b0e52cd3eb58e9f0118fb5d3faee160a43de8a2b32639311463feadf6bbfe15cb6a2043afd77d91706b94b8e30ec91b0fbc06a1d4b4799a1c5bc5c4b834093db7659240a2841b9876ecd026693303b881aea9eb5d76ddedfd32083ad894c0da6cf0023ecb28b3e041a163c15e12b9911506079a286346fbf6ec0a7cb5be7f9dc3273f5fb39590c275fab63f76383d38ffac9a24b4bbeb9a5e60107dd793eb46e37d4a2f268e4b91dc18cf586d0b1df0a43740365cec8e12abbc11109f373beb387996fe520b8f0d4776e46fe47edbdc1d410fda991639e7293dbcda3733921a41066f12c22211c1018bbf00fbd34046d254415243d1eda5cfccaf453f43091689366db00459dccb0b2dbc361319fe5470c0ba120ed04657877d053ca367a87ca373e2872d75e7441f765e6516c8580cfc19e975b9d7bbbfce513449b8add4652b012aea44e3a2652c16e9039401ce530291f13df81e0696167c6cbcdabd6de3b8d37dddaa36305af35b9c943400a97d735f01ca0b04cde99b30cbbd5ccb950340155a784cf0def68e10b12b276286f2f207d183ec6d4674b9371e6473e0fe081af3c1a6ede0e285078ab316b1e1d0aa18972b4688270a93ca163eb70236d10f294c512904c7aabda9b9162f4595c21506be22512b17836241a2bc1a67fc84c25026aa0ed1349daddc2be5517429fe7472a356b1b05b4f10580da4cec7585ce1df40c3a717237b5bc20892185561d348b5db08ad667544878e4addb2831cea487a03061bbb2730929a544328b2e9ed73437b69512ae798ba969286fab42711fe3b4f3afeee51c877205fc6a49c01d809ca24ade35f70671c75ee75ff48202d0951655f3ff386ad17bf11c99c6bbc2e0221a1762103e37754bef2098350321664e7a392b1a188963e453fe9aecc15e6a4bf56c73f3cc68aeb4243e5696f20903e58844874180805cd51996d87a777a98fb6b4ef1f2dcbdeefc71fc58bab82bc3d9a1ad5e66f3c074c353dd79cc9bbd7f60530e6898c5bc3a1a9a425cbddb533954c361de5e6cbd9f95d07d22242a535846efa4b5ebaccceec0deca9bce55f70d1e1ccd28d400bfd1b29276601c9d55901191f87209395461707e329214f914d1bb25cd96ab8f5829c0e72bab2215ee8f78979dd9f21e50e69d0573e8a5c44f43e79a28e2b733cb89a3655a382ce047df4528c918ed0dc078843dfa505e7a528514027d4b24d3c3b623a2224890936849dda0b776e1049de2484c45e7d040428c1761438a396eb3796cb1d57104ba83f127ed1195c895d48649f7979a24c908b01a5da310c12ef2ba6f22b57797b2d73a2d059c240821eae2c39be563835056b6253249289556e26d23b53b4098c55002f8cabe4e0fb3d25a27d00eb24586ebf281b5fb9237a5b5251b25acf4d2e64a8259d1dca0a433d4093307b6c561330bd407820a1393fad41d676c0f35baeb5f989791d035aa44a9fb72167de7848aad4725d7a389bf83e52ffd01e026eb711a643d9d4be04723c67d43eba8d22beb611492e2388bec3bf82da95b5b8a2a44ab976e1d0543e86c25d10a7eb146aeb2af65d452623b8b24c27d990d5f80a77caedee3c58d54b3781c3c9bd07d4a795e38efe90d017228540ec7888d7ed0156f1776c3cdf75539b3f95de3952081b476da66a51b9dff7be51d468c4662e15b424aa552653bd907c79fb9195782a9fa99836d5183f99c5c73f265d3e035ab1e453079d13c945967cdcb2e5c434d7043ba2b9e7c32f5d9679917b6ad266afa74a3f037e7ed28ee5fa05469495a7c43e7dcea300b9e581e202590aa22cadf303ddccc06405574fdef51e8d08e63c4caede5ae383a44f037296bb96d4e508f498342090d9b33403c4e7bbdffc9405e9e013faa6f289f7baa4d05c35b4dc00eccfc7e43a80436982437b92ab90b73f729e02152cab33b45da44a73dd76381dfcee40343c0f6ccc46c74e08633fbcca07379bb4e6904b05b39e30ba1dc23c67ca05f68eeb18787e7f491783aabcdfc75249565b2ff11ecb0af89053d9dc23dcd4d62fc56208f6f348a0d3c5ea2848796c15caec75ea7cfb160accb7ec35b3ca0123d62e2600d08f9daa1fa563ab219c706eb60d248da15c7cec71b4637df32b5522bc6ab538c8ec8be6f3b2060ae45c18fc47d540b958afde91d515bc38cffd213f5be171735a8c2603f0a075346072d62819392f139897e0953d1be0c86caa45d8f3de8a703f992ffebfcc5e13d5d03d5d06e348bc396c678e203a0d925763531854cc20340053f20dd210ef66304866f0008534a2a0f4a2c1e0cd792251ba8b1153fbae95b8471f01eeda3b0eee0696359924b68989a5584ef5a0f8434dcf28ce494208c074f90a35ca988e4c8cc98a88bc17d8093bf13d3308aa6e30628869f6940fc211c1730981baed6481c74847b0011612b73f2aabfafcfb9f8b0e3073d3e0a8caa23352364d8c8071994d98619717552cc6e0f7b222eafc2dec830e9dc7503d79516d26a0181c17829cd00b36ac9062d516e298d43a38d82aca611271cd10f22a671d16305b1bc0b751b0ea8ccac792b689b2e451fd43270db337bb34ca8b10d642ecde2e6d61e001b4fd33ae717bbdc65daf8d2fa9902b27307a8577778c1a61c78ec852518366dea33a1b91c0e6f7ccda198245f456dcb31c04235c34bcd0f93a09f0c397d06dd66f5eae59697c378f52d4bbc9b5bd75af1007d2aeca663a0e69bd8d6a4ffad59d8c4927af4cb8f03492b82f9dda92005d6a5d7989526ce6982b72ce34a8d5b44b257fe5166c1bb0ab05c62f17440598639cafb43687f43d157f7375e1fa03602b5c4505780f98d74905b7f6e076f7aa52bdf1079e6825f26d95455030d9a695a8fdb3d557e412803e882c681f406bf5f3b679a4e15661f26bcc0a2b49a7f012f06343cd383ca996dca76223110d12f8066b1bb21e52f8fd939719409e6192a6d22f4fb829fad7afae779f69ca9011d56df4d052666aec20e68f3a2b64235ba6261b8c9371cf5cdcc3ba776d6a27774fafae906b5afdb2587b27664f963694dc11239eea4b657debe481c1ea95f0b3c1263309a4775d4806b7beec04ba79721b9984e0352fa5bdaee637d6150b8a8a0867e4ef9c3ff408d93434f6aa2d7ffb81668da2b47999d7a1994910158015764ed69cdffb066a67ba56534cd521061e309741a335f9cfacaac6af14dbc4d79afba3791b6dc3c151a197be0ec23cbb1f85e6ef777b904a800e0ba9867293497414d61b762ddbfbf3e491f00b25f9da3dd077bafeb164e26c84a99ae6b62636a39fae0ea3b7a118e574391ff9a8609d9d848144038d5935a815c4748edb63896db093553ddd7f8a2851010bae4f71e6a7a4723e0016fef6cdc147d9281e65acfb7660872dfe5082b17733e0c0a7c885f82e9150992d36128078e22e1bc83cd96d928f58eec3b4d686443ec16fe047f7d0b5762376a815e30b1e54673c1bae4a94994c040a67bcbbb01f76750038769ef168bba200815d26fbd5b34dc73cae844cbe9d7ab10ef9366ac0eb9339d3ad50835cae353b296472a1e71d3b0f068aee7bcd50af2441f05009ab14742c8f2bcfad2887eca0baba8cb186445fdd9cacdebb7ce0445900ddfd2128297e67cb2b68fdbf3a46009c89e7ac9efa682f126a0f62a17d176f2549592f82042d10d8a02996deebe3042bc749e02e89f116ea2f6837f042825b91e57f2805ab09c4cfa51a1f16be473a85c1920a66e92d73bd8feddc9b5aebe2f17d60f9398d420461c665cffbe9b454663b0a199e2ea613d1b4db7dfe99bd02b7702f1014000b7eaa29df704fc1cf0108be9c7624cbce2b2a8069dd4eba5675dd030213f1ad9e92a03ef9e0bab4d8a77c37098883d9edd27a6fedee91075c0d5b7f1f7f76fd299d5d7343506dd23c650c6467125f52ad7ddfc46121b98fa7d9a286bc7969a5f93fc98ffcfa154240d453f7be0eefe2fa993819b5c8151d7778e0beb365e5cb3afa0b1c9850220a9308d2aaa5aeca613993e7e0a1b7c45c1a410706f1a202f2474d4018883ff9f3104d58f4e603e6212908d5a03b253a57f750d7ed18eb87dc88b353a54eee2edfba0debdc758d33af318c6809293ef52224650671b586ac66e4437d87cdbe445649ad47e3e9e5a2c473f82aa879f56dfa8d6c057f107e52be284e747f42600f429d3a5bed1844e4989ed6e223979003a4ffac7082e6ed77306a0dad01380e4f7cba6d74d3d0c35bcac5bcf85d3a705141e2d6f7fee880cc74aa959af0580c7fe1a079337e0f88619508e1da26d0e5dfb6b0f029d2eaab5110b29dc5d7a516a7ecf65fff9581caddc0e214ee04149636194cb8910fb7dd7554f3330fd70b1e83b72df8d607aa9929338267a89f5956fdacbb91f20905768a5dab0d414863fe55f99743a589b8d8bf3e014dc83e944590a917624da8fe91186a5da824a55d63ad26f8b20b649eaf2fd7ba25602260bbde6338badbe90d9da6b216fcb7c0f6e8693b32c0fefe2e54711485f6ad8cea6f2b6bb57ef691036be9cfe54ca8543f58d1410ea9234f6f3f0843c5126decb742a2919e2f2fdb152dfffe6d5e8c0c42ae4e4adf857e129d4dc694b4279d8aedd3593b6fabdad5cd0a40addf37735e1d265a05a64902020886af62888c4a667e56a63cf457f9629e13986d13a31ba9a720a7aeb7c9beb6491f671f4bed2e2fa4e3d0fe62d362f1a973687c538253e7f4df5b0eb0c8efaa984ba753376d92fdb59c25efc48967f587118642d0dfeae"}, {&(0x7f0000001580)="92a01b806592b64c937db7ad1a26a2d7e0dd349ca61f3127eb87dcaddc528a997e18d7b69fba7ee7412f395b1ea6d6281149fe960ceca846a6ad1c531f87292b6616c0b558187c80ed045fedd5978bb34738c39c7e0902156b851d61f35cce4524bb91e73dca4f99d02d8cafcd37979a0d891e"}], 0x0, &(0x7f0000001680)=[{0x0, 0x10a, 0x3, "6125c9f8a0b955848dd217ac557b53b37d062bfd607239949a4bae821af6b393229a2e8a79fb4bb6fcec4a5f9dfed538b20e771bbc812806b34c7a10cfb9cd68d993367504511a772bc2743f5d6a349bac5a75b385ca5a3c04fd12ce8fe562df4609b5bd7a733b5054e2e295bef8e6856113dd5b8b7d82b54b041e8d26dfb0a358dd668f807677de8b68f24ab06cbd1cf7dfa2a3b8ae1047c858bc5914276c9020a745dc2df4c2cd0e350cd6bd"}, {0x0, 0x1, 0x1, "1d92d436746036cbcf8f119af0d75f11b57e3c7ecc28a549b5f703f72036e046af81225b9ed87374147deb4cbb721b370c95f6f58062a04a37b5d8d79adf6c7627dbd53faab0d604a472690a99aad4b34eb5aced5b6674b2868a9495b176b630932fefae42e22964e9d94630333aed425880a5e3ab195ae99ca549def21df489320953fb4114e5e0f3634dc2f8094fb375188bef9da1ee9b2df791f3752872b5a4f97612985dff2194187f5952cc94ae9e"}, {0x0, 0x10b, 0x20cf400, "5b31d559cba0ca4b25bc786e7cac06edac738ce2338ec41a062722e526a958b1655ca323054bdec797e25b3e8e1c3f07b9bc168f3c0f76a99f07d47c0b488cf854d36e31143c3b1b66d839d89b9136d70707ad4d90122592ee0de38757b783cde2698ccbd664452889a412a09b73fcfc149f134bf29a17eb5dc88058193b6934807dd22d3ff2d5d033f0af517f26f40e1c057806ce7ddacc83b30830b6c15b945b5a09af86fcdbb1f1ab5667cfcfad131df40e2fb7c0f09c217ef3cfb8f6456dec2a000c0cb6b8e2ca046fd95bbed9ccda8187f0e21c778e70d7e0626d1262e7"}, {0x0, 0x10e, 0x8001, "31cc8ebeeed852d4111faa57b23ece43398153d25a835ad0e532a1877d6eb58d40cca5917358a0d87d599dd734f0a4b2b93a26835c9c01f69ead"}, {0x0, 0x84, 0x8e5, "e68a210c96e008e8584304cc8ba5759feebdb255c44eef4698e0db36692d29fbc29d2f4434c5561e4781dc2594d42c40b57d6f549d63fecf95"}, {0x0, 0x11f, 0x5, "bac455d1f928735e2a3893a3a5ad4cdb09776a8c548f1b65a8c1fe7d9297039cb9c8459066afd19e0deb67748b67416b4097132882aff83bf3dea811e137ad7f51d06fbccc82a4cb3edce9ddf10f07c48c3c636c8da057436c91ba64e4db50829aae0b85315ef5868fe0980a81b515bbc80fd52c02d6dba145dd25ced1a24675f72ae00e70e753c12c1b4152e544f5974fe91c2c6c2d441f001ac325bf7c06a1bfe13c0eba76534c03263f52"}], 0x0, 0x20040000}, 0x5}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001a80)="23660fdcdb3b98960c369c21215266e474d82a8fa71ffe93435832e3383761b9b6c82e253326f412b19034cdf446e75aa7b3b0725c0cf3f46908c862f15bbca5923ac30d5780fb6bdaf8b989155b181f636ad6e78eb373816c603637e908ca3f671fb0f6d9d45d4bd9be69cc57810f9a38552e293974c0d0f2def6c1f730fbf94afce21fc43923009ff359143e647c83bbb2"}, {&(0x7f0000001b40)="7c656f8208bf1cbbb79ca569350a4b70f90cba359acc932c14a08169b664024491b7b4848bffdbcf521294a13a377670502469dfdb88d2b75336897b36a172f489151eef3e28a8435d4e9a35229d3b3b053b141c3978e4fc02ca1f33fe1a3adf6d9a62c4ff9c93cbda74fd20b4143a4a4d8ed90b02e32d405816e37e3948d7160c072655fa0feff53371113b2717f9d3e1a152659edb8cb41e6a02413337e4b373f399a324e8d5a671a0"}, {&(0x7f0000001c00)="a3552415471a78c5a4c9598f09f942b971052edbf4d408da86f26fa07d24b54473be40d2b73f0c11d5d526a6ba2003b60ff68fb9af94b406e8648ef5b154cefeac4c70ba51e564c70b3776749f4f96aefbb1b5d36ff8b4dd2bed957a6ca9ca850129656ed13769aa7b1e47f34a3f4a1782e654e763990ec5b6323cee131d1401b901bb0dd6481a335d9de9bbba871f097ca3b708634dec8ed4c4c595fc486ab3e320c3c4f8d2ea71e2f4e720472c8b442962c77868a8a1bd90bc508dbd2f030e4e9dd58e781f9322f42222ac737e7ed6cad0035923badbe1de84721d"}], 0x0, &(0x7f0000001d40)=[{0x0, 0x104, 0x855, "1174c3f6801cae48bcfdcebf92e2fb8dcee28fc2bd3ad8a494b00253"}, {0x0, 0x10a, 0x100000000, "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"}, {0x0, 0x10d, 0x8, "3deea07ad5ec6d0f4c34d1d569b97d7777e1ab370e2f1418d87375350548eef9af9cb540656cd5b92914b88c36903055b30f745aa924b8f867bf4702c400351f95b2279b024ff0a99f2861df2083665514578e226bc6ab28"}, {0x0, 0x113, 0xffff, "999d52186598cfd5318e60b4d3eaf1e06c01d0b84dbafc9332684c7a3bf8a598598a70b1ac166270631414ba8c6e41e064b8bfe199349aa133abef4bd645d31607ee222ea89a647b10536d606c824f0c5753d5df2ef59d654696dbb6cd80da78fe720b5718f5d58e5cb69d32d108c573311ef8b04d5242f4cd86b351f8334001e0978e5081a86966cab57aa476ce558ee70878abd21fbb86a83679babf379e2d6d628f03a0a868147cc486b193695d22b579cf94f17bfbb6686f4dc642c2384075b347a2bc7c02"}, {0x0, 0x10e, 0x7fffffff, "7abb2e198b0875585b5e5f6647f121b316d2732efa55486a10f5d476fcd96511ae774277622cd07f96c7284267fabf081b4d8593a032f85c028d07f4880f031316775f47caa850c75cb1e275015501eab4bff4b3e2"}, {0x0, 0x0, 0x80000000000, "aabc5b4c315b81dcc47860ca1b822ed5c4db5763bc9cb022294a105ce24f2fa092102d2b4b2950a943e352ce69018585cdaa8cb1555226e519a35319689002594226067020a72f0e9efa13c71a9444b85a3f39f7ee6689569eb0b3976a1e25ab2ece96fd6414f7a81cb6038f7e9db400c9a557fd45c3da947621e29c61c4e2acfec19580d2898aeda41c40e76fd4945b0cc20fc1b0e302836fea2f2cc6e6744a8ccd84e23a3410ca4422abd0dd"}, {0x0, 0x0, 0x7, "fb7ff80adfff83e7f23b05b13194a54ac36832c31776af517ebec37649379589fc0e3f0aed9f08ee1c3326f809d538414bfb3ca4aac97570e8d0a074ff56dee0f8b265f2e95bff26a2ac26b3fbe5a2ebc5be3074866e561faa514dd21e3a6cb4c2d6f11c068235e12d5662aeece832ba3bdb403411a9fa3467953962e6"}], 0x0, 0x40000}, 0x6}, {{&(0x7f0000003100)=@ll={0x11, 0x19, r1, 0x1, 0x9, 0x6, @local}, 0x0, &(0x7f0000004180)=[{&(0x7f0000003180)="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"}], 0x0, 0x0, 0x0, 0x24008000}, 0x7f}, {{&(0x7f00000041c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x3, {0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xf}, 0x100000000}}}, 0x0, &(0x7f0000004400)=[{&(0x7f0000004240)="1dbec934e25ab1a32dcc02dbf4cf3729bd8645cb24db1cb39e38f3b8459966ee09580d894db2c8d839e157b2bcfdc330e5cf7344d8636e26f165b6ac2babad7640d8839ced9b1fa8216e06085ed2c03ba95fadfef06c7848dc9d3dd4add7232ebbfc0ff7326427a5155bdbb5af1d2af9d4e4b6ca9ee9374761706bcee08d9dee85d915c4d1dbf07cbdd6416a474277d379ef5b049ce925affb6e"}, {&(0x7f0000004300)="4ad3b40b9928f6f07ec6251731af03037d4be883b542"}, {&(0x7f0000004340)="550a7f3212a51567a19298cacb66f1e51e93cc2371768ad4e4a8bc8052f031b61bbcd3404119c86ca1fcb162a52488ff53659c368b19b2b77a329ec48766eaaee8ede392bde62cd8b3539484492afc066541f2bca36f73524ea0937fcd1190933a46ca23866ab2f1906d5f5983c04c748e53328cc11304fef3ebf38999da89f95e2df65eb95fb1d0d1c85fbc160c62c4a5d9158583aef765f70896d3773359338e85759677a5e2efe9e9"}], 0x0, &(0x7f0000004440)=[{0x0, 0x8c, 0x4, "e492c046e9f8bc43bfb07307b6106b4746f24043313aff95dbfb676e94d3cb2ae271cbaea4953bedae1c87569ea4"}, {0x0, 0x0, 0x1, "cc2a7d3853db250963a4c025bb41b63ebced388fd33c380631e28779949029903a7a4143e23c75fa8c97d3ab0e22285fa9773efebcfa3183d8f1a8affc6ac9b1d6a523b908bdc87f934b4bd87d4dacbf3193d8d0d6f4328843f4e4c124d2e202e80816d41580a9b043c3f819afd10527ea71b1cc7be053c9dd043d20d083850b021556fdb7d2c39872e59606094d4cbd37ada8357bfb265a9ab05b8e06423c86ad144484e6"}, {0x0, 0x117, 0x5, "801c41c51fb6eb4c5672fe0015c66008598d0ad6bb5177716b751a19a66f8666b5a800e1af164df178419b1cedebcdcf36ab841bf892cbba720e2f772bc1b3880a9d6dbbcc611e1bc07e79a1234a4e4b92315a96cf8a8e5efd76ec4a7f84b319e3a81e15061a752888fc2d9160bc34b2731a666102946a89ec56302bb76b305e2e13c881dcb1aeb11d03977b1cacc0d2f303502535143f274173fbab6b980b0006b3d685a0929b7ed313534756e501733d"}], 0x0, 0x80}}, {{&(0x7f0000004600)=@hci={0x1f, r1, 0x1}, 0x0, &(0x7f00000059c0)=[{&(0x7f0000004680)="961051d55bc3e416c3ea457e3dd53df16b27ae85c0be72c1b43c27bee8963ed09b2f3a6e96f9ac2ed64c119c4adec094adddd5cc4e1f166c2deb6f9bf8d741cd0efe0b0555709e33ae868282b8db5a5ac0a8c19f9495947198edc750a1dfd8e1235d05877800f346b32a3654133bd760f5773586107684a7592f09b212564b2b6c43dff7d6e7d8c0ebcf4247d151e4cc1226768137f7c181a4c5c0e00b65023341ec5fd58a191580fd10b9fc6f3f4d1c5db7e0c051a6a52d6fb7da"}, {&(0x7f0000004740)="4a7af5339c236bfa9c6a"}, {&(0x7f0000004780)="c4e94a46827d47e60946cb51560ee0b16cac8bb3e3534f4920b2868a47a6d3de53bef46ec08836b7136c1126b7b2f918bee67e46b9e029925ba40d2a2dd6ea0899366a855cb522a724816ae50c766c62847cf9cf6e7443195735bc293c738be14b77f05307502e7a8547144658ee07dfea6d20d2f21df1d2ba8d73f2f86f16f485700d57eb7e51c2041e0441a45a98f8344e33bcad249dacfebf6518197d9b021d4e58b29b7a95429c8d824e3f04ead7de898e36febb8f28901516b9c12e07444e37f93872831d03cb4de09959dc2c9561fdbc9e3a3f11268b4897001b0eae9c7b3283d66ea95b0606451180cb28"}, {&(0x7f0000004880)="13bc30c65ef9d3cdab1e76dcd8f4d2d2a9a0c5bd8924aac7e41f82a607cb80bb2507650600f6e80a549416e488687681f73aeab0593f9ac8a465a06defc5e9e46e331cf7bcb6c818d0a1c49ad2195b1b535108330f115449c7d46c59409f6ce44be51ca25f4d9dc4d1"}, {&(0x7f0000004900)="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"}, {&(0x7f0000005900)="7fd7cda9b197ae9d992c40e78f678a7fc053883c12939e43b5608a0f3d1b181207d5fad8b420106b7b943479ca0dc64bbd0fb52213fc722508c96edb58c14249e664270d48656e9b4f6f92d367f7334a77348bd299480b4b3c1ca08fd9bc5c81dd54ab93a34378cc43fcd78fada594422e5ba9b611506e3d14971e75ed87796573484f3b1a4918fa76b46ba1a6252816ba29df75989b6136d39fb85e305165"}], 0x0, &(0x7f0000005a40)=[{0x0, 0x0, 0xceea, "b309e5c8d0044889fe0776190c830f59cdb3133bc5408d52d029c4ea588726e25de07022e0b2ddc0969abceb56b759b7dc29fe8a186f0ebffec320937f2db3355dc9ebbd6ee5f7eef07c4c04bb3329dea38f8dd3b8390195364f950c3f921f8ceab4401d648e08870b705fb34e31c890dd4f6bf8c227706c307b0bb5c34bfb1e3335e0d6a4fbb90d7c7a94b23cf9aa06659d82f84a4d12a21c4443d90b384f9c35d8e5943dd2e74d888885d886e419b104cc"}, {0x0, 0x11f, 0x0, "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"}, {0x0, 0x13f, 0x7fffffff, "d3ea57ebdebb40550c9307500d39c49690fcd2983c38ed9010752f95ac8acdd601fae66ee53a8fe663542c9bf47305dcd05666fbf84ebc997c3f1bf1c6071f3c2320a350af7b982c53cba89a2224eae4c01779311f1d89b10eb2393ed01d3fc25930e447e480247c4b721d46e59fb6d997c8f508810cb58b3a0039ac4c573082c5ac98ee0b9c1e919a989efd2a4df250e003a49ec55adc"}, {0x0, 0x110, 0x2, "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"}, {0x0, 0x0, 0x2502, "24c147bb4edf6e2c5a2c54efbe6fc3dab968c18e16d6ca5b5ed62b54292cd897d330d08abd6ea0c84cca05d00813eecc61745b9f146c2b5b1fb10880112915e1c3ef7d83daf622d4cd57"}, {0x0, 0x113, 0x6, "b86cab686da15ea4ff9bbb019a58d4d8a61951f246af95f2c87d5d2383f3c24f394e4b1526740550d3485ee0a3b87b3659907cc4dcfa5717b9367ea1902d77b16ed734e828d5878fc59d33feb6e88ea69a35436fdfe814b1fc71453804e0c39f5885a4175188490c310caeb60a02866719e9c56a128b4c0b385cdf36787b52a06632eb46e8df92d09bbd645d4d7069b6425638a714111e4f529c45dbe18803cb425af342095ead46e78d9b34455cc542365bd0c4f8e9eeab682fd2ac1684629165fb10389e11a111d5133abb35f7ff4e6145f06d925166573709b566d9d07f7c27ba3f344c603bd6a2ee99ae866b"}, {0x0, 0x10f, 0x0, "76635cd51280f1c8df4fe9d737870f8a7380678dc6072aa19c45c154ad8cd45f4ba289e0977889404d27ebdc9c8a85c9c4b0dfa150cf3418a68df9aa7b5bf4d13dddf91c6de98cd28ffc7caed6bf5660a4fd3e4d4e6e574e960ddb3546a363d5523ba2408ac5941047499252c652f0ff4dc0b0b6a15f4d64335d9fe69e6b47ed70c13e7f11e74ee684c85edcd2ea1cb456717fa380e31c343d9fce9595e880fa82ae8c3da9903520e087a88a9fd8a1a87ab59f00e667b0da19d886c124"}, {0x0, 0x111, 0x7, "ea7010718979c7e95cfb8e321d690a60c7a6a9ea085c8972d08fcf0c7f88f8c651aa38039b90e955470395ac2278de0aba3247a3fa91e4cc30458368"}], 0x0, 0x4000000}, 0x4}], 0x279e980293f81b8, 0x0) [ 643.127102] binder_alloc: 1691: binder_alloc_buf, no vma [ 643.140586] binder: release 1691:1692 transaction 1133 out, still active [ 643.150161] binder: undelivered TRANSACTION_ERROR: 29189 [ 643.164003] binder: release 1691:1692 transaction 1133 in, still active 15:08:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000600)=""/4096) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 15:08:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:35 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 643.170889] binder: send failed reply for transaction 1133, target dead 15:08:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa, 0x40000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000180)=0x4) r2 = getpgrp(0x0) ptrace$setregs(0xf, r2, 0x1ff, &(0x7f0000000240)="a2f9d798260de173044583f69f6c19579d333c706afe517112e790953eb94a49d3422305c74cba40a1e328900a12668533fb7189b782f124e9d273f8ff7a53b7eb8c35cdc0b2669484a35e5a28e86e76b3b47a7c543265b1b9c0e254b01db8f8bfaad00808ddfd8e7a6d7cf538de8818fe4e3d8223dd5cf4e0f4e58188653b1a9050dfce6d25a28c558f51eecba5c2e6063742cf90a88155b3a13ab80b3aaa0b8dff6116bf452d8d3d961e3041df9b1712429fddef668fbbedcde98b2d21802ca8bf") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 643.324498] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 643.324634] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 643.342581] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 643.364233] binder: 1756:1758 got new transaction with bad transaction stack, transaction 1138 has target 1756:1758 15:08:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = dup(r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x4, 0x5, 0x6, 0x1, 0x3e1d0e43, 0x9, 0x6]}, &(0x7f0000000080)=0x12) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 643.407143] binder_alloc: binder_alloc_mmap_handler: 1756 20001000-20004000 already mapped failed -16 [ 643.423804] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 643.440991] binder: BINDER_SET_CONTEXT_MGR already set 15:08:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 643.462846] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 643.465030] binder: 1756:1768 ioctl 40046207 0 returned -16 15:08:35 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000feffff0700", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f00000011c0)=@ethtool_perm_addr={0x20, 0x6, "ed87d1bbd9e4"}}) close(r2) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x80200) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000000c0)=0xfc00000) close(r1) [ 643.560048] binder: release 1756:1758 transaction 1138 out, still active [ 643.574826] binder: undelivered TRANSACTION_ERROR: 29189 [ 643.592167] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 643.614963] binder: release 1756:1758 transaction 1138 in, still active [ 643.621983] binder: send failed reply for transaction 1138, target dead [ 643.690562] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 643.708072] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000013800", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0xfffffd1b) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xee, 0x101000) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 643.734131] binder: 1813:1814 got new transaction with bad transaction stack, transaction 1143 has target 1813:1814 [ 643.797977] binder_alloc: binder_alloc_mmap_handler: 1813 20001000-20004000 already mapped failed -16 [ 643.855496] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 643.867016] binder: BINDER_SET_CONTEXT_MGR already set [ 643.901381] binder: 1813:1814 ioctl 40046207 0 returned -16 [ 643.921099] binder: send failed reply for transaction 1143, target dead [ 643.940043] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:36 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x5010c0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x3, 0xfff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffd) 15:08:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) set_tid_address(&(0x7f0000000180)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x9, 0x6, 0x0, 0x7, 0x3bc000000000000, 0x0, 0x7, 0x7, 0x40000000000, 0x40}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x1c}, 0x51c5}, @in={0x2, 0x4e22, @rand_addr=0x2}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x10000}], 0x48) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000ffffffff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0xffffffffffffff1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:36 executing program 5: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000180)=0x24) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) keyctl$get_security(0x15, r0, &(0x7f0000000340)=""/183, 0xb7) 15:08:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000380100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x10, "8252cc7051f5e05371ee63a76f6c3c92"}, &(0x7f0000abaffc)=0x18) socketpair(0x11, 0x7, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 15:08:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x29, &(0x7f00000002c0)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, 0xe8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) close(r6) dup3(r1, r5, 0x0) [ 644.276685] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 644.286901] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 644.304012] binder: 1852:1854 got new transaction with bad transaction stack, transaction 1147 has target 1852:1854 [ 644.325857] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0xaf149f1e4db79565, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x3, 0x1, 0x8, 0x3, 0x2}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipmr_delroute={0x28, 0x19, 0x801, 0x70bd29, 0x25dfdbfd, {0x80, 0x10, 0x0, 0x7fff, 0xfe, 0x6, 0xff, 0xa, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0xffff, 0x6, r2}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:36 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x109382, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x81) syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000080)={[{@nolazytime='nolazytime'}, {@heap='heap'}]}) 15:08:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 644.369008] binder_alloc: binder_alloc_mmap_handler: 1852 20001000-20004000 already mapped failed -16 15:08:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x7, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = fanotify_init(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) 15:08:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000000400", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 644.418514] binder: BINDER_SET_CONTEXT_MGR already set [ 644.437186] binder: 1852:1854 ioctl 40046207 0 returned -16 15:08:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) 15:08:36 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x13f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x1c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r1}, 0x48) [ 644.524144] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 644.536413] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000600)={0xfa24, 0x1, 0x6, 0x98fc, 0x8, [{0xd3, 0x8, 0x7, 0x0, 0x0, 0x404}, {0xe8, 0xffffffff, 0x3f, 0x0, 0x0, 0x2}, {0x6, 0x401, 0x3, 0x0, 0x0, 0x800}, {0x54b, 0x800, 0x100000001, 0x0, 0x0, 0x1}, {0x8, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x4}, {0xffff, 0xffff, 0x5, 0x0, 0x0, 0xc}, {0x4, 0x600, 0x3, 0x0, 0x0, 0x800}, {0x6, 0x1, 0x7, 0x0, 0x0, 0x202}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) fstat(r1, &(0x7f0000000080)) [ 644.577263] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) r2 = eventfd(0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x2, r2}) ftruncate(r0, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)=""/64, &(0x7f00000001c0)=0x40) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 644.629457] binder: 1906:1908 got new transaction with bad transaction stack, transaction 1151 has target 1906:1908 15:08:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:37 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0xc, 0x20000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x30000, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE(r0, 0x40084503, &(0x7f0000002ffc)) 15:08:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:37 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x81, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="0001705f66696c657300") bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) [ 644.701539] binder_alloc: binder_alloc_mmap_handler: 1906 20001000-20004000 already mapped failed -16 [ 644.721936] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x4080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/133) pause() ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)) [ 644.770066] binder: BINDER_SET_CONTEXT_MGR already set [ 644.775784] binder_transaction: 19 callbacks suppressed [ 644.775805] binder: 1906:1916 transaction failed 29189/-3, size 0-0 line 2970 [ 644.794577] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x8, &(0x7f0000000280)="709daf81ef6111416a0f53b8796c2f6788ab76b550e0f0a2dccfe11e85df91a15d02e8bd9cb8e03f4aa4cb6de7c56bfa0b8c29085a8ce16db0393605c05028a900d78b8da46b74f3857d8188c689cd5edef5fe11284a08cd0ae9986d01e945f026f81c651780c0eaee23814ec191bcb76f232e6e93308e43c95a6b4432e11244878dea4508b17cf061078878") setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000180)="e0a3831df1154b069290afd92448664e093c80d6b486ed3d9a570a5a", 0x1c, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x1}, 0x18) [ 644.825481] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 644.839636] binder: 1906:1936 transaction failed 29189/-3, size 0-0 line 2970 [ 644.839694] binder: 1906:1908 ioctl 40046207 0 returned -16 15:08:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000000ff00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:37 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @remote}}}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xaf, "08a8e2e017acae39a8e349718daa7ca94c142589ac593f2bb4bee0b8adab9de8b42b5a726cbef768b49369add7a398d39e7f3f67f61434c5398d6cab605f7fbe4e76a3891e0171ba37bd2b343b47ea2481854acad805242c2d88677254d90fe3394b20475306598460ae23188eeff9b9583f402b26912e8a309a4120cc7177888bc75765cf76474daa5ece8f1c6523e693a23d380f1f3fad94a86c6fa26eaec729962c251001e4ad75b9d58e07ae9d"}, &(0x7f0000000000)=0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x8000}}, 0x9, 0x39b9, 0x4f2a6ce0, 0x5, 0x4}, &(0x7f0000000040)=0x98) 15:08:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000000)="0a0775b005e381e54fc073144039cd1e0fb56477734f1d760e0134c08d37cbcac5eb3c92bb881a97504e0a9ffe2e933098cc2a676ec7e74df13af19bbb3d3eb0eedf78cd223878d4fe8af9ef279b3a37bc88a68099a5f6f72a8b729f1246a67e8a9d4c3b15176fd64d3682fd4b780cfc4b878a8aa3e3d97430ec942abbb8c122c4ab0942fc8867798d706675dca4088fc867016dd9749f38423e684231d2bfb86bdb62fe3e974675d436f9ab1d878c21ab141882d49feae87df221109c226fb792534046199dafd7dcf57b89b3096dda4a9a", 0x9a) 15:08:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v`\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 644.918411] binder_send_failed_reply: 1 callbacks suppressed [ 644.918420] binder: send failed reply for transaction 1151, target dead [ 644.968207] binder: undelivered TRANSACTION_ERROR: 29189 15:08:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18}, 0x18) 15:08:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 645.030288] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.042128] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) fchmod(r0, 0x2) [ 645.072250] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:37 executing program 5: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffe1, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x0, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket$inet(0x2, 0x7, 0x75b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x400, @dev={0xfe, 0x80, [], 0x1a}, 0x3}}, 0x5, 0x9b5}, &(0x7f00000004c0)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x7}}}, 0x84) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000000, 0x800) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, [0x0, 0xd19, 0x8, 0xffffffff, 0x7ff, 0x199, 0x2, 0x2c]}) 15:08:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000007fffffe00", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 645.161856] binder: 1964:1965 got new transaction with bad transaction stack, transaction 1156 has target 1964:1965 [ 645.172668] binder: 1964:1965 transaction failed 29201/-71, size 0-0 line 2882 15:08:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='vmnet0trusted\x00', 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 645.243142] binder: BINDER_SET_CONTEXT_MGR already set [ 645.252031] binder: 1964:1977 transaction failed 29189/-3, size 0-0 line 2970 [ 645.277854] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.290666] binder: 1964:1965 ioctl 40046207 0 returned -16 [ 645.297208] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.301033] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 645.301042] binder_alloc: 1964: binder_alloc_buf, no vma [ 645.317087] binder: 1964:1984 transaction failed 29189/-3, size 0-0 line 2970 [ 645.329223] binder: send failed reply for transaction 1156, target dead 15:08:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 645.339004] binder: undelivered TRANSACTION_ERROR: 29189 [ 645.354275] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000100", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 645.499214] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.520303] binder: 1995:1997 got new transaction with bad transaction stack, transaction 1161 has target 1995:1997 [ 645.531123] binder: 1995:1997 transaction failed 29201/-71, size 0-0 line 2882 [ 645.556425] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.558688] binder: BINDER_SET_CONTEXT_MGR already set [ 645.572502] binder_alloc: 1995: binder_alloc_buf, no vma [ 645.578172] binder: 1995:2002 transaction failed 29189/-3, size 0-0 line 2970 [ 645.629845] binder_alloc: 1995: binder_alloc_buf, no vma [ 645.635480] binder: 1995:2005 transaction failed 29189/-3, size 0-0 line 2970 [ 645.669101] binder: 1995:1997 ioctl 40046207 0 returned -16 [ 645.676975] binder: send failed reply for transaction 1161, target dead [ 645.689314] binder: undelivered TRANSACTION_ERROR: 29189 15:08:38 executing program 2: symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file1\x00') pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = getpid() ptrace$getsig(0x4202, r2, 0xfffffffffffffffa, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b700984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x901}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="aa000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) chown(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x40100) accept$alg(r3, 0x0, 0x0) 15:08:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e6174000000000000000000000500", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f00000003c0)=0x1, 0xfffffffffffffdfb) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000400), r3, 0x8c}}, 0x18) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000200)={0x18, 0x0, 0x2}, 0xbb) getrandom(&(0x7f0000000240)=""/134, 0x86, 0x2) 15:08:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x1ff, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 15:08:38 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e617400000000000000000000000000000300", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000254, 0x0) accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x100010}, 0xc) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001380)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140)={0x3, "b942d1"}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x4e22, @rand_addr=0x1}}) 15:08:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 645.774422] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.803631] QAT: Invalid ioctl [ 645.809066] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 15:08:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="34ed5387220fc165512bd32ec70b43f464d410b2dccdaa5e62a7218d3aac51c42ad576d5e4a99744bcce04fedb59fc37", 0x30}, {&(0x7f0000000080)="72888a8138c85fb98a60732167ac8d50ce64f66ecfc1a61a7bde6f3999095852a3da0d4535f103fb5d57c67ac857d25c7447c0", 0x33}, {&(0x7f0000000140)="4ba8389b73b3d91b7aac31c012b316027145d1ad2cbb5e227807a3772243a4b6e1a482ac8bfbef857e9db4f9575ba4241f8eeff05dcb635a5726a9b3a22da207690a8fafbbadcb0e6f525d8c0264aa6d351ec969941f4f99961cdc61b78967eb8467c807c39e8b0dad696d6dba7692edb0d3e5e51f6788e63df2de6ea378059222", 0x81}], 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x1000, "d9e34ab1ae81617897d152b864577f0a7b43e6ff1250a7aadbb31dd8c136db670dafea05d13ec200748f26c286623f33d397adfff8f0f6156c674952c7758f41212d8811a25fb1019466d2e7bad138d7a09fc7771007f152798f1d086cdffd9cf6bc45f239e2b4d5a4bb5fcbeeb3f9f3b829830db58d3cca0bdf201b48f63cea718455901c1d14db118396fb7b585f3bbb5cc37d380396eb5ca285d621543fdbd9a3b582cae5809145ba1482844c7a9badc11dbaf858f1a04580d258a34065e2c705f1dd7d1af1a02ef011f23f9a310baa66bd29f1dfc292e7c419d16f40c67528fd406eed7c422c2446063db0c4878dc732ef7d709afda961dea1a7c9c977f37f2847c2f180fcd34692f447f3cb8727c0399c8c830efa6893b7057cae8e0d565198995464a64463b5e6f86b0bcf02356765f5ba34915a9499d81a659f5640170b73e365496eefa2eb8e11ccadf8a97c94a84f98d308b0dcd5c22edd2aae360ce8537b95216e69987406c9c95a3109d212cba1ef8a7e9e82d9a297b8c825ff29272ab20d8eee559b84953f933dafa3c93a40e94cfeecdebaf58d6106351462b78d5e36d0c36ef59ae6b9f94c50e9ac11374eea76260367cc397e5587365e67f547de81306d0f5a63e5162dff130262ddea6a7c132021d1d345b09d9ded2f20b0a85f6014849604e221d6b5779cd29b1d9cd2b1e29b9084ab36b3f5c2ea7cd3f6df24bff1e21a0832c72b4836c719630d105c89fe4c586c803a0f99b8e67ed835902ea7570215fbab3c789d25e436754a4930063ccd693866b3f0890ae4a64a9677b4af767b000eb3a4e329831d48485767b712b916820a8989f86d42f689c28360df59fd1a348148ad277b9235aab9b150ce528ee5c918444c92df8b0036981782fdd1722d4c7e131200651d1b0859d2c1d42aabfe8403c203cde80608cdf1c4f6c3518cabafed7221c8741bd86dec035755d646d8b4c16e2904c2662b4d85a2ce7c402459dad80b879849443b3051201ecbeb37bdaada6542053175f54fedd46240fa993035fde356dcac18f54d6adb0c6cdd98171b816184a7add7ccdbad74c052547bc81c22c9654b36790e651780b7fddfb749d3ba4db39a83eb772cfc2a12013907183ef99a714b01d9521889839b4d579937c5a7e26f56490c65aaac9d48899ef4b810965dacb92d3acf6b3312c866311f1179a96f91468bf24d943cc87fae7904391355501c7d3f600e7eb083bcfc6cdc0b149d1400b3a4292142000a4ae923b7342a2ccd2b44feeb5a036b007d78b8060487e018eb2c6604745c1f6546a4397419ee27ee50149996ffb149866c465b24945c8bc2354fa69fca0e7ad556d2eaf8b5424d3575f2cd1c973520986e6f6bcaa2f75db2ae1e51116a3a59784bd1d97a2513455efb81986e25991928144b8cf9850feff270b8e3e22d5804f839433da0060db5681a7ef3fdc078ede5c2abc87a7f2fe85b47bbd36cd7765a5f5f392d4cc7a336a063e19997eed90ae6958f145a28ea113f4b0ee8ef0872c832e3fc62dc2f3ba7c9b925cee6df00c74870f96c3a853cbccd11a27b18b6a26113368758133a19ab719ad97c520cb0a24c2408acc65da5939060b63626dfe6b341b264546ef207bfd98d9dd8885f968d4a3b5126f1216d91dfbeb44fe291a499e3b42def3306133a85fc15b0834dbcb3861c595d50f72377b1e6be568f1fc134aa65c643755816a439e9b1e2dc4983c0cba3a860d0c1ce8799c8557dce52304da2953fe29817210b6fb2143c6d19c40d1b4d767cd7ff28d5482be388a13b175d0feb65d738a9738211bbe5d3bb4f1a5b5c4e0f891555c77cde6cdde41f4b461bbb6103cf2255573b70f491000e9c2997792a4a70ebf7a10978a695578fe7dbae6d269028458f25ce681cf827de3d734dd49fc09479f7b19c2b7066fc9bc18d75889ac5753556a7062119471c8a7ecd231910153fa1e7f5675e0b1ec5f37f08dbb54d5d0fc504574005db6290883e696a4f8f09fd8b349aea2f30d6a93d330b34d5d4d946df02b7ca3e99ebee1e4dc5b76249e64c00adaf82cccb8707fd1889853335965d97634d74942f261f650dd045f1a6d1a34f8af52aa4ec8eda041e4a8e0bb5c76095faed9bb2dec640d8d1be30ca1a4d45e71ff839f79c1819b0c9382953bf87ea96c52617265dc47a8753859dca55478a6c953436b76062859dcacaefb12e38083f57a2fdf1d13af97c556bde892bcdce7219b209ea8e45a26a49f6a1e24b03c595fe3cff04fa3f047c280003c2b9b389ae547f183e20ffda5536416c8718dc619b87ad19b7aa6364bc14af7237336340f4653e034eddecb4f301d82c82533e6206451d95cb3fa4b5b4cd89ef714462b838b015968b14c45198fb069c4d4bf1e62dc7db63a354febd893efa54a5cf4013cc1cbe85dce01504a5c1afd9ede9a1fa871a58201da647d913aebad5a93ce25cbb3df7ddd44b654cff4cc011f756fa4095564acfb742c4163a9bac94c95ddbb981038ccd59672da9d27c6ba1e5f709814bfa5a7d350c4c9b666d7dbf46ad1dd7e1ba3dd7fee5b4539949872f039099bde382396e2068433ecf208a95935a8f09c90dde3bc6464f084caca20e74c80e65e5932522bcfecbb2bc2e5611ef58c8dbc4bed4852ae883e04094850fef2891ec3222d790d424f3bb2a6f929eba97a1f1b663038c85948e83af032f6bd43b0385954ca0aef7dfddfb511d985257cdc32959a84f963c6096349c8f7bf715016da7475e7e7eb3843ba28e0c48db3b0edf6bdede6307d30a51997e16b383ef6a4475697322df9e24fc9f8272e5c9ea032943e17c81b72c3b6b3b581c8a6f23074ba760127efcb936dbed8b68b60fa0015386742f417aff8eec024946cf8268a2a3babb38ceca6745564bf69834cdebcc440a2efa7d2648bd134ab4f0f2b0f4dc0bb43b2f2ed206250519616a8e79d6d434e948d9adde5aae43475d19af964a5aba2404b7a8911a8c8727d90add6d29c20df585ddcd1cbfd4187c7cf558aad176435ea1ead6fbe2ef620b33c632506537b3fd8167588ef136aa9185f45f43ccf39fe0495961f55ebf8e0bd81be2b896a109759f48568b3d3c82474448bf7b9d5b92592896a853917b64135c9d933eb0c98a1cfcc777bd9eb25e91d9d078cff3176f7bf28bf71bb1376f0dad2e88ebb652aa39dba87771bd8bd8f0a15b9f671c28663089ff124df7d1f12008e20bfbb485bf845876a80a107d8874e89104045b91e7804d5092e4cffe4b7540449a7551a9b66fd679beaaaa7c49fb0da67121b78cc6cb24871b9bcc909627f96ec69cecd639c6f2330c031d6c710465227c86cfd115c94093a865201fc57ee209ae78f326143b28908402f8473659a445acc364334459f0df5b03280c707ee9f9b49e57ee4e2518dfc2d4e19742fc55bbf635e0fef49680bbd578f7357579b21089f29d5cfc68ed2894273cadc8dab77b2a5681a506ef09c46b128a09ef3e769b59aed465365618fd1bd23c145ba5a8e2ac826641b6bd3ed3584ce1926d88006b6e3367950925dff5187db040ba1e11dd995c26b9d840857b576e519a862a0d39adf735e052c0d8d8954ead8e058eaf84da21fc212c07e3d6f45c8e4c201780316d40123afcc55fb05866ef2098ca8bf4c78adf961f1fe3f9595ccea71ccc6ef26f5b25e0d0a748a63f47d738ccef4483dee9a3387e9ad8702fc53af859fd6d1c321c87235789f9810da8f30d210ec4b28b171a97e0cf74f65aec484f932cf1d912978fa93d73546e05a4c13c57246fdca9a97b62a38a5447b1c9f9e7b0a466e435cc0a14e73d6f2e9930273b7dd29261a6d44d5781001f96b9aeb4c3d5a1e595e853198f9b8cccd7e12ae6a2856b34ce462b2517c4d841eef9fec19e208e6bda3211b9193f3724966249828b24f37d5fae3b260676527e40eb763d3e4b933af39630fe302f7889db0795abd3e2cb72ccb44b52c73a7a56802c27ca12a1622b43c28aea873d29ce5b93930eecddf9e8f901605781b6ef5156cc0a9d5e2e45f914df7edd8acffac85a6b16e7a797bd270e5a8c838c1059a75bf43618c858d4d24f7e926e63bdd611817a4043c36d428e72208dae6fa4a4da8c65dca73f8262535f27ddc0d007b74832a00568924aa0d363fbc924557562fb6f0ad2345764509335789680b42896bd614acf356bec15c6e36a059e1fde27d01893ba4fecb95fdc41d99afa6193a991a499b2f6ea1d7ae691584d875de88c6b28db093756216f64e96c9d19733ddcb704c3da95049b754a610f1310aeb0c0f2f90f597ff805d60307514c97226e647a136827240519030f644a17d5051f393df4ee919e9a125967cc7b88b1891d52787253693b25b74a44d8c529cca0447bfc27a775267c75de65572d68f660a695e569d47c4b587d3f2392710638b5ca55761fc9bcb16ed1a5f6d5058f6dd64ce9323caaa2c41e560859ac707bb49b6ba0ac06dd088d63daee74fcb232c8ab35035532f255fd3f0a0e561be90773e0f0eab1a18e6fac845eb99343be20aaf5fdbe093ab7e10a0147a8d4711e1cceff4f0106ed2685c88f685931f8fff228f5a8d7a8ddc087c871fb7d126858f432db30079feb90e10189170f53f929e8f7c5d13dfa71cc9c468e7b904b0e92e700bdfd912369cdbdc146a902597f2d1928f8eb1fee8c2a3794fcca9738aadb9fa418238efa34c21cebfaa7fe99f8b863a77091ec111e1fd43324064627adf7a0a075615f41717115075bb4222477ea7f430bd869125f702a014a6ff23d1493536f6cb225d6d0df11bb97ecb733b9c36f36682e53317db4748f94394471ab215756a750a36a5f6474b46680824b1b375b02f1c53afc4099ecf56b5cc3e7755d0ab37e9a865a213d90b32b850322359ac69243dab8451cb87616434286c7edd042acbb4ea519fe70d0a963d61af852038d808bd56083812d694835d2f7cc5285ae61cd9a83640eba68c74ad34edd3a4519c53992793940f0f8744c2aea724ec34e3d6c27ccac054401f4aade0ec5c3a5139c2953baf26e380328ae5c6fe5c384cc39071fbb37824779234e5ca6d91145d60037c2b43294e6b80608748e90f2453fc190fcfd14ec28562b54936a2f944a1113dd521963054c071aa3d1fe84348afa2df3cccb6322b9f022062172f98f602a76ded02d393ef70417d49bfc1c7dd0987455a26b481f0e530fa2eda010ec34d2e174fac915bec89f9a6cb0c45a104503fc476dc261a4b5c0686a49c11a15de536a5a147ff02e9e88e9316aa895943bd27c5d9951d80ed86ae4e7e8395ccc7c3d18f9a581e1c4a034ee006b2fc669ceb729eb2c8266608abbcc232346f47f844d5a96d1efb55664b7a7d158296ac741b9f9b524441ac8af9c7dd205bd2e316f6d433b2a310664e64e023b53b27fe4df7312ec2a5aa819f3009291078e67e5b5adc2e2dfc899f8090fea1ecb6e0f310677b1303f62a0c376e8421d18c887bada3d0493cdf76ee0896ee4a6e4de79c27c4ace116f758230c20e4dc3a52a7eb24eb3f21913bb588d594eeced9e591dd52e05439a6ccb61fb5ae2febfd334f4d4e178090641b38a67f4427715e9154e088dd44843d33c3a87d4d0fb4e8fd53c4490880fd5b08021d2ceb60ad75d87d5ad684dbf1d80ea50d040591fd6e99d615904713babb1cacf8c8268fe1e2b5ae47d24d3e5699c0fe04539559b6e82b64bfdc4d1a9ee2629c3004c7f2629e60bbc518938ccf41d2b11f2e718e32dd47b5f048ed4fdd46e6960d33ec5e0bf59ccabfe731c28"}, &(0x7f0000001240)=0x1008) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001280)={r2, 0x401, 0x7f, 0x80, 0x10000, 0x5}, &(0x7f00000012c0)=0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 645.843476] binder: 2024:2027 got new transaction with bad transaction stack, transaction 1166 has target 2024:2027 [ 645.854254] binder: 2024:2027 transaction failed 29201/-71, size 0-0 line 2882 [ 645.861970] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 645.879315] binder_alloc_mmap_handler: 2 callbacks suppressed [ 645.879333] binder_alloc: binder_alloc_mmap_handler: 2024 20001000-20004000 already mapped failed -16 15:08:38 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) 15:08:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001540)=@nat={"6e61740000000000000000000000000600", 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 645.987530] binder: BINDER_SET_CONTEXT_MGR already set [ 646.008643] binder: 2024:2027 ioctl 40046207 0 returned -16 [ 646.022345] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) socketpair(0x9, 0x4, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f00000008c0), &(0x7f0000000100)}, 0x20) [ 646.047646] binder_alloc: 2024: binder_alloc_buf, no vma [ 646.053234] binder: 2024:2046 transaction failed 29189/-3, size 0-0 line 2970 [ 646.079166] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 646.087474] binder_alloc: 2024: binder_alloc_buf, no vma 15:08:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) set_tid_address(&(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x25c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) [ 646.109287] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 646.131235] binder: send failed reply for transaction 1166, target dead [ 646.140363] kernel msg: ebtables bug: please report to author: Total nentries is wrong 15:08:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='vmnet0trusted\x00', 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 15:08:38 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\v\x00', 0x19, 0x2, 0x138, [0x20000740, 0x0, 0x0, 0x20000770, 0x200007a0], 0x0, &(0x7f0000000180), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x18, 0x88fd, "6263737ff554b39ec4f8a600", 'dummy0\x00', 'teql0\x00', 'team_slave_0\x00', @empty, [], @random="471c15a6b40e", [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1b0) [ 646.178052] binder: undelivered TRANSACTION_ERROR: 29189 15:08:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)}}}], 0xfffffffffffffda5, 0x0, &(0x7f0000000300)}) [ 646.361856] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 646.374549] binder: 2069:2070 got new transaction with bad transaction stack, transaction 1171 has target 2069:2070 [ 646.391322] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 646.395607] binder_alloc: binder_alloc_mmap_handler: 2069 20001000-20004000 already mapped failed -16 [ 646.410708] binder: BINDER_SET_CONTEXT_MGR already set [ 646.416285] binder: 2069:2070 ioctl 40046207 0 returned -16 [ 646.422993] binder_alloc: 2069: binder_alloc_buf, no vma [ 646.429959] binder: send failed reply for transaction 1171, target dead [ 799.597127] INFO: task syz-executor2:2032 blocked for more than 140 seconds. [ 799.604547] Not tainted 4.19.0-rc2+ #220 [ 799.609194] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.617353] syz-executor2 D25408 2032 4675 0x00000004 [ 799.623088] Call Trace: [ 799.625973] __schedule+0x87c/0x1df0 [ 799.629772] ? __sched_text_start+0x8/0x8 [ 799.633963] ? graph_lock+0x170/0x170 [ 799.638008] ? print_usage_bug+0xc0/0xc0 [ 799.642116] ? zap_class+0x740/0x740 [ 799.645899] ? find_held_lock+0x36/0x1c0 [ 799.650191] schedule+0xfb/0x450 [ 799.653662] ? __schedule+0x1df0/0x1df0 [ 799.657699] ? lockdep_hardirqs_on+0x421/0x5c0 [ 799.662515] ? trace_hardirqs_on+0xbd/0x2c0 [ 799.667066] ? kasan_check_read+0x11/0x20 [ 799.671403] ? __rwsem_down_write_failed_common+0x62b/0x1650 [ 799.677264] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 799.682674] ? kasan_check_write+0x14/0x20 [ 799.686983] ? do_raw_spin_lock+0xc1/0x200 [ 799.691416] __rwsem_down_write_failed_common+0x98b/0x1650 [ 799.697121] ? rwsem_spin_on_owner+0xa40/0xa40 [ 799.701888] ? lock_downgrade+0x8f0/0x8f0 [ 799.706220] ? mark_held_locks+0x160/0x160 [ 799.710761] ? is_bpf_text_address+0xd7/0x170 [ 799.715334] ? __lock_acquire+0x7fc/0x5020 [ 799.719909] ? __save_stack_trace+0x8d/0xf0 [ 799.724298] ? mark_held_locks+0x160/0x160 [ 799.728756] ? save_stack+0xa9/0xd0 [ 799.732447] ? save_stack+0x43/0xd0 [ 799.736245] ? __kasan_slab_free+0x11a/0x170 [ 799.741052] ? kasan_slab_free+0xe/0x10 [ 799.745222] ? kmem_cache_free+0x86/0x280 [ 799.749517] ? putname+0xf2/0x130 [ 799.753015] ? filename_lookup+0x397/0x510 [ 799.757305] ? graph_lock+0x170/0x170 [ 799.761149] ? do_syscall_64+0x1b9/0x820 [ 799.765446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.770859] ? trace_hardirqs_off+0xb8/0x2b0 [ 799.775480] ? kasan_check_read+0x11/0x20 [ 799.779708] ? do_raw_spin_unlock+0xa7/0x2f0 [ 799.784193] ? trace_hardirqs_on+0x2c0/0x2c0 [ 799.788683] ? lock_acquire+0x1e4/0x4f0 [ 799.792911] ? chown_common+0x3a9/0x730 [ 799.796959] ? kmem_cache_free+0xa0/0x280 [ 799.801591] ? lock_release+0x9f0/0x9f0 [ 799.805664] ? check_same_owner+0x340/0x340 [ 799.810059] rwsem_down_write_failed+0xe/0x10 [ 799.814811] ? rwsem_down_write_failed+0xe/0x10 [ 799.819533] call_rwsem_down_write_failed+0x17/0x30 [ 799.824792] down_write+0xaa/0x130 [ 799.828382] ? chown_common+0x3a9/0x730 [ 799.832415] ? down_read+0x1d0/0x1d0 [ 799.836179] ? graph_lock+0x170/0x170 [ 799.840197] chown_common+0x3a9/0x730 [ 799.844055] ? chmod_common+0x590/0x590 [ 799.848090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 799.853696] ? __mnt_want_write+0x2f9/0x3e0 [ 799.858088] ? rcu_read_lock_sched_held+0x108/0x120 [ 799.863149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 799.868768] ? __sb_start_write+0x17f/0x300 [ 799.873140] do_fchownat+0x16e/0x250 [ 799.876911] ? __ia32_sys_chmod+0x80/0x80 [ 799.881099] ? __ia32_sys_mknod+0xb0/0xb0 [ 799.885454] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 799.890621] __x64_sys_chown+0x7b/0xc0 [ 799.894603] do_syscall_64+0x1b9/0x820 [ 799.898542] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 799.904154] ? syscall_return_slowpath+0x5e0/0x5e0 [ 799.909294] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 799.914375] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 799.919856] ? recalc_sigpending_tsk+0x180/0x180 [ 799.924977] ? kasan_check_write+0x14/0x20 [ 799.929269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 799.934172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.939786] RIP: 0033:0x457099 [ 799.943065] Code: 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 48 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 <8b> 4c 24 48 48 8b 54 24 38 4c 8b 54 24 18 e9 ee fe ff ff 48 89 74 [ 799.962499] RSP: 002b:00007f1104afec78 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 799.970445] RAX: ffffffffffffffda RBX: 00007f1104aff6d4 RCX: 0000000000457099 [ 799.977888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200004c0 [ 799.985543] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 799.993023] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 800.000793] R13: 00000000004cb800 R14: 00000000004c7c84 R15: 0000000000000001 [ 800.008459] INFO: task syz-executor2:2076 blocked for more than 140 seconds. [ 800.015857] Not tainted 4.19.0-rc2+ #220 [ 800.020505] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.029142] syz-executor2 D23760 2076 4675 0x00000004 [ 800.034857] Call Trace: [ 800.037535] __schedule+0x87c/0x1df0 [ 800.041622] ? __lock_acquire+0x7fc/0x5020 [ 800.045981] ? __sched_text_start+0x8/0x8 [ 800.050200] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 800.055539] ? graph_lock+0x170/0x170 [ 800.059410] ? print_usage_bug+0xc0/0xc0 [ 800.063795] ? print_usage_bug+0xc0/0xc0 [ 800.067949] schedule+0xfb/0x450 [ 800.071400] ? __schedule+0x1df0/0x1df0 [ 800.075443] ? lockdep_hardirqs_on+0x421/0x5c0 [ 800.080104] ? trace_hardirqs_on+0xbd/0x2c0 [ 800.084490] ? kasan_check_read+0x11/0x20 [ 800.088766] ? __rwsem_down_write_failed_common+0x62b/0x1650 [ 800.094634] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 800.099986] ? kasan_check_write+0x14/0x20 [ 800.104447] ? do_raw_spin_lock+0xc1/0x200 [ 800.108898] __rwsem_down_write_failed_common+0x98b/0x1650 [ 800.114790] ? rwsem_spin_on_owner+0xa40/0xa40 [ 800.119471] ? mark_held_locks+0x160/0x160 [ 800.123784] ? mark_held_locks+0x160/0x160 [ 800.128282] ? free_unref_page+0x6bf/0x930 [ 800.132589] ? free_unref_page+0x6bf/0x930 [ 800.137047] ? lockdep_hardirqs_on+0x421/0x5c0 [ 800.141757] ? trace_hardirqs_on+0xbd/0x2c0 [ 800.146167] ? __free_pages+0x10a/0x190 [ 800.150400] ? perf_trace_lock+0xde/0x920 [ 800.154782] ? zap_class+0x740/0x740 [ 800.158565] ? zap_class+0x740/0x740 [ 800.162363] ? mark_free_pages+0x3b0/0x3b0 [ 800.166693] ? graph_lock+0x170/0x170 [ 800.170782] ? graph_lock+0x170/0x170 [ 800.174768] ? lock_downgrade+0x8f0/0x8f0 [ 800.179000] ? lock_acquire+0x1e4/0x4f0 [ 800.183054] ? lock_mount+0x8c/0x2e0 [ 800.186849] ? lock_release+0x9f0/0x9f0 [ 800.190906] ? check_same_owner+0x340/0x340 [ 800.195314] rwsem_down_write_failed+0xe/0x10 [ 800.200169] ? rwsem_down_write_failed+0xe/0x10 [ 800.205119] call_rwsem_down_write_failed+0x17/0x30 [ 800.210367] down_write+0xaa/0x130 [ 800.213981] ? lock_mount+0x8c/0x2e0 [ 800.217873] ? down_read+0x1d0/0x1d0 [ 800.221788] ? _raw_spin_unlock+0x22/0x30 [ 800.226026] lock_mount+0x8c/0x2e0 [ 800.229770] ? may_umount+0xb0/0xb0 [ 800.233481] do_add_mount+0x27/0x370 [ 800.237261] do_mount+0x193f/0x30e0 [ 800.241101] ? kmem_cache_alloc_trace+0x275/0x730 [ 800.246299] ? copy_mount_string+0x40/0x40 [ 800.250629] ? copy_mount_options+0x5f/0x380 [ 800.255373] ? rcu_read_lock_sched_held+0x108/0x120 [ 800.260474] ? kmem_cache_alloc_trace+0x324/0x730 [ 800.265396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 800.271587] ? _copy_from_user+0xdf/0x150 [ 800.276048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 800.281813] ? copy_mount_options+0x285/0x380 [ 800.286774] ksys_mount+0x12d/0x140 [ 800.290487] __x64_sys_mount+0xbe/0x150 [ 800.294539] do_syscall_64+0x1b9/0x820 [ 800.298507] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 800.304066] ? syscall_return_slowpath+0x5e0/0x5e0 [ 800.309254] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 800.314528] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 800.319947] ? recalc_sigpending_tsk+0x180/0x180 [ 800.324782] ? kasan_check_write+0x14/0x20 [ 800.329104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 800.334160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.339428] RIP: 0033:0x457099 [ 800.342817] Code: 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 48 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 <8b> 4c 24 48 48 8b 54 24 38 4c 8b 54 24 18 e9 ee fe ff ff 48 89 74 [ 800.362089] RSP: 002b:00007f1104addc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 800.370016] RAX: ffffffffffffffda RBX: 00007f1104ade6d4 RCX: 0000000000457099 [ 800.377743] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 800.385228] RBP: 00000000009301e0 R08: 0000000020000840 R09: 0000000000000000 [ 800.392671] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 800.399995] R13: 00000000004d2ec8 R14: 00000000004c7f7e R15: 0000000000000002 [ 800.407341] [ 800.407341] Showing all locks held in the system: [ 800.413748] 1 lock held by khungtaskd/792: [ 800.418173] #0: 0000000092cce89b (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 800.427101] 1 lock held by rsyslogd/4534: [ 800.431492] 2 locks held by getty/4625: [ 800.435691] #0: 0000000000db2c97 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.444048] #1: 00000000b9459d3d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.453160] 2 locks held by getty/4626: [ 800.457172] #0: 000000002f47daa6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.465482] #1: 000000002faad37f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.474416] 2 locks held by getty/4627: [ 800.478446] #0: 000000008808003a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.487223] #1: 00000000dfb797dc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.496523] 2 locks held by getty/4628: [ 800.500538] #0: 000000007e538dea (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.508990] #1: 000000006a31e9bd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.518062] 2 locks held by getty/4629: [ 800.522112] #0: 000000006335ac0e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.530416] #1: 00000000ff0cd9c5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.539620] 2 locks held by getty/4630: [ 800.543754] #0: 00000000e011afdc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.552320] #1: 00000000de5743a4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.561368] 2 locks held by getty/4631: [ 800.565607] #0: 00000000f696d06b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 800.575730] #1: 0000000030c6b1b6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 800.586744] 2 locks held by syz-executor2/2026: [ 800.591450] #0: 000000000f7abbdc (sb_writers#14){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 800.599498] #1: 00000000b2fcf90d (&sb->s_type->i_mutex_key#19){++++}, at: chown_common+0x3a9/0x730 [ 800.609237] 2 locks held by syz-executor2/2032: [ 800.613961] #0: 000000000f7abbdc (sb_writers#14){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 800.622431] #1: 00000000b2fcf90d (&sb->s_type->i_mutex_key#19){++++}, at: chown_common+0x3a9/0x730 [ 800.631752] 1 lock held by syz-executor2/2076: [ 800.636371] #0: 00000000b2fcf90d (&sb->s_type->i_mutex_key#19){++++}, at: lock_mount+0x8c/0x2e0 [ 800.645377] [ 800.647194] ============================================= [ 800.647194] [ 800.654274] NMI backtrace for cpu 1 [ 800.657955] CPU: 1 PID: 792 Comm: khungtaskd Not tainted 4.19.0-rc2+ #220 [ 800.664883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.674237] Call Trace: [ 800.677043] dump_stack+0x1c9/0x2b4 [ 800.680864] ? dump_stack_print_info.cold.2+0x52/0x52 [ 800.686063] ? vprintk_default+0x28/0x30 [ 800.690133] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 800.695325] nmi_cpu_backtrace.cold.3+0x48/0x88 [ 800.700172] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 800.704992] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 800.710186] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 800.715633] arch_trigger_cpumask_backtrace+0x14/0x20 [ 800.720861] watchdog+0xb39/0x1040 [ 800.724411] ? reset_hung_task_detector+0xd0/0xd0 [ 800.729261] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 800.734367] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 800.739471] ? lockdep_hardirqs_on+0x421/0x5c0 [ 800.744061] ? trace_hardirqs_on+0xbd/0x2c0 [ 800.748389] ? kasan_check_read+0x11/0x20 [ 800.752541] ? __kthread_parkme+0xd7/0x1b0 [ 800.756907] ? kasan_check_write+0x14/0x20 [ 800.761154] ? do_raw_spin_lock+0xc1/0x200 [ 800.765395] ? __kthread_parkme+0x58/0x1b0 [ 800.769790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 800.775333] ? __kthread_parkme+0x106/0x1b0 [ 800.779797] kthread+0x35a/0x420 [ 800.783173] ? reset_hung_task_detector+0xd0/0xd0 [ 800.788018] ? kthread_bind+0x40/0x40 [ 800.791972] ret_from_fork+0x3a/0x50 [ 800.795964] Sending NMI from CPU 1 to CPUs 0: [ 800.800592] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 800.801512] Kernel panic - not syncing: hung_task: blocked tasks [ 800.814339] CPU: 1 PID: 792 Comm: khungtaskd Not tainted 4.19.0-rc2+ #220 [ 800.821382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.830901] Call Trace: [ 800.833504] dump_stack+0x1c9/0x2b4 [ 800.837145] ? dump_stack_print_info.cold.2+0x52/0x52 [ 800.842483] ? printk_safe_log_store+0x2f0/0x2f0 [ 800.847397] panic+0x238/0x4e7 [ 800.850599] ? add_taint.cold.5+0x16/0x16 [ 800.854891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 800.860687] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 800.866308] ? printk_safe_flush+0xd7/0x130 [ 800.870667] watchdog+0xb4a/0x1040 [ 800.874359] ? reset_hung_task_detector+0xd0/0xd0 [ 800.879345] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 800.884455] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 800.889564] ? lockdep_hardirqs_on+0x421/0x5c0 [ 800.894153] ? trace_hardirqs_on+0xbd/0x2c0 [ 800.898479] ? kasan_check_read+0x11/0x20 [ 800.902632] ? __kthread_parkme+0xd7/0x1b0 [ 800.906900] ? kasan_check_write+0x14/0x20 [ 800.911141] ? do_raw_spin_lock+0xc1/0x200 [ 800.915386] ? __kthread_parkme+0x58/0x1b0 [ 800.919628] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 800.925192] ? __kthread_parkme+0x106/0x1b0 [ 800.929638] kthread+0x35a/0x420 [ 800.933049] ? reset_hung_task_detector+0xd0/0xd0 [ 800.937892] ? kthread_bind+0x40/0x40 [ 800.941709] ret_from_fork+0x3a/0x50 [ 800.946010] Dumping ftrace buffer: [ 800.949559] (ftrace buffer empty) [ 800.953268] Kernel Offset: disabled [ 800.957055] Rebooting in 86400 seconds..