_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4c7) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 700.929111][ C1] net_ratelimit: 17 callbacks suppressed [ 700.929118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 700.934869][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:18:37 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000140)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 701.100388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.106247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.112122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.117893][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:18:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 701.692489][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 701.787039][ T979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 09:18:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:38 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x0) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:38 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)={{0x107, 0xaefc, 0x1, 0x1e1, 0x34b, 0x1d00, 0x383, 0x3}, "309ce18664195a5a8114065906623e5bcad72be651d100decf6b77609ae584e9de1d15eb14eb8ad59768476cdecfb3f2b40c920ebbbdbb9948c78ae33cba0bdb6230e1ad8deffbbfd2e41296aa488e16c56639b9e23ed5515c62a624ecd00a020ed202456e6ebd2d522ab2dc30c0dab188dd675a5366cab7fe5c642bb78cb23133665094b8129bb41c42f67195c7409517983a658e036f07d34a3f3c224bf16f"}, 0xc0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x7ffffffd, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) r4 = accept$netrom(r1, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @remote, @remote, @netrom, @remote, @null, @default, @bcast]}, &(0x7f0000000200)=0x48) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="619a1c738b3b9eb00800c8f6341c1b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) getgroups(0x6, &(0x7f0000000340)=[0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setregid(r7, r8) 09:18:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 701.998653][ T1100] IPVS: ftp: loaded support on port[0] = 21 [ 702.009569][ T1093] IPVS: ftp: loaded support on port[0] = 21 [ 702.058358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 702.064236][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:18:38 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x0, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:38 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') r2 = dup3(r1, r0, 0x80000) socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738bea3b9eb008001bb0fd0e0e"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:38 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 702.119982][ T1105] IPVS: ftp: loaded support on port[0] = 21 09:18:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000150d00760450cf4245af1277c5cf20e6a1c63762c5ca0100000045210000001d28"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x10001, 0x401}, &(0x7f0000000340)=0x8) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000380)={r7, 0x7, 0x0, 0x1, 0x8}, &(0x7f00000003c0)=0x18) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) io_setup(0xce, &(0x7f0000000040)) [ 702.289426][ T1118] IPVS: ftp: loaded support on port[0] = 21 09:18:38 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:38 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:39 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 702.865021][ C0] protocol 88fb is buggy, dev hsr_slave_0 09:18:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:39 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:39 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:39 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 703.536343][ T1467] IPVS: ftp: loaded support on port[0] = 21 09:18:40 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x0, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:18:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:40 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:40 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 703.760603][ T1475] binder: 1474:1475 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 703.790488][ T1478] IPVS: ftp: loaded support on port[0] = 21 09:18:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:40 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 703.834232][ T1486] IPVS: ftp: loaded support on port[0] = 21 [ 703.925588][ T1492] binder: 1491:1492 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:41 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 704.595656][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 704.696507][ T1507] binder: 1504:1507 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:41 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x80006011, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffffcd) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x1, @null, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @default, 0x8001, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 704.774953][ T1509] IPVS: ftp: loaded support on port[0] = 21 [ 704.957412][ T1517] binder: 1516:1517 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:41 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0x0, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:41 executing program 4: socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r0, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 09:18:41 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0xa00) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007141dffdd946f610500020081001f00000503000800080015001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x2) [ 705.187177][ T1638] binder: 1637:1638 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 705.209571][ T1640] IPVS: ftp: loaded support on port[0] = 21 [ 705.229709][ T1645] IPVS: ftp: loaded support on port[0] = 21 09:18:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 705.247809][ T1649] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 705.276974][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 705.342011][ T1654] binder: 1653:1654 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:41 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}}, 0x20) 09:18:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000480)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000004d00)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}, 0xfa, 0x80, 0x100, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000004e80)) r3 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000440)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f0000000000)=""/44, 0x2c}], 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 706.024591][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 706.069297][ T1668] binder: 1665:1668 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 706.102025][ T1634] net_ratelimit: 20 callbacks suppressed 09:18:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 706.102033][ T1634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.130302][ T1670] IPVS: ftp: loaded support on port[0] = 21 [ 706.176815][ T1645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 09:18:42 executing program 4: socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r0, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 706.239260][ T1750] binder: 1737:1750 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 706.253181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.258997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.422967][ T1780] IPVS: ftp: loaded support on port[0] = 21 09:18:42 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0x0, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:42 executing program 1: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000900)=""/4096, 0x1000) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in=@loopback, 0x4e22, 0x401, 0x4e21, 0x5, 0x2, 0x80, 0x20, 0x32, 0x0, r4}, {0xfff, 0x7f, 0x81, 0x6, 0xfff, 0x101, 0x7fff, 0xfffffffffffffffc}, {0x401, 0x101, 0x4, 0xfff}, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x3c}, 0xa, @in=@multicast1, 0x3502, 0x7, 0x2e02d9c42b6e5781, 0x3f, 0x5, 0x401, 0xffffffffffffff63}}, 0xe8) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0xf6c) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 09:18:42 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 706.595723][ T1790] binder: 1783:1790 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 706.644443][ T1788] IPVS: ftp: loaded support on port[0] = 21 [ 706.678543][ T1792] IPVS: ftp: loaded support on port[0] = 21 09:18:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000651000)=""/240, &(0x7f0000000000)=0x4) [ 706.847702][ T1900] binder: 1899:1900 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 706.936489][ T1903] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 707.058246][ T1938] binder: 1937:1938 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 707.066086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.066146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.221200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 707.227016][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 707.382565][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.388413][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:18:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000100)=0x7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0x200000000002) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0xa, 0x7, 0x9, 0x2a, 'syz1\x00', 0x3}, 0x2, 0x422, 0x4, 0x0, 0x3, 0x8001, 'syz1\x00', &(0x7f00000001c0)=['%\x00', '/dev/video35\x00', '/dev/autofs\x00'], 0x1b, [], [0x1e5, 0x5, 0x400000008000000]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}], 0x10) [ 707.499795][ T2012] binder: 2011:2012 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 707.584428][ T2025] IPVS: ftp: loaded support on port[0] = 21 09:18:44 executing program 4: socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r0, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 707.873493][ T2282] IPVS: ftp: loaded support on port[0] = 21 09:18:44 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0x0, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:44 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) [ 708.236885][ T2329] IPVS: ftp: loaded support on port[0] = 21 [ 708.350260][ T2333] IPVS: ftp: loaded support on port[0] = 21 09:18:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) getresgid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) fchownat(r1, &(0x7f0000000480)='./file0\x00', r2, r3, 0x500) getsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000b67000), &(0x7f0000000000)=0x4) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) r9 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x100000000, 0x7, 0x8, 0x100000001, 0x0, 0x6}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0xffffffffffffffff) preadv(r10, &(0x7f00000017c0), 0x1fe, 0x400000000000) open(&(0x7f0000002880)='./file0\x00', 0x0, 0x8f) getpgid(r9) fsetxattr$security_ima(r7, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0247f489f34b40162cec5834c718c0e6c2ff7baceb5ef7fa020033dab1f5d3a7424a0d916a568339ee96d03397bd27b58d44cb8bc6a713fcfd5b59466d461e5920e4031243f2bf8c904efbb8dfba902d434c1e53eb28da4e4d094e8f2f64d350ae7f5a0e1e59a6f0bee78d33a43451af8666f6510f8dfbccaf34f02526914143ab5852c1d7db8ef084c3d89da04eb4f2f595b5a4843e6589f706b4401bb247afe67152cb8d3f5d5b0292045655daae8ff339a224f36ced452060b8c02877f6fe3329e2ac4aaa5d85e870fbcaf1b0c79e0dceb6cb5991a657bc971eeb2aa3bc68c54bb31861f61788a73f6f892ac0ecd3a26f4a576f2d416b028b80a319c6a8ca142e816dfd303fca3b549f0c1eab0b6e3a2a67ecfa8db8ea85848fb03494c793be1703cf8a837ef283e2d98436056a73244ee86bd04fd53dc124325a8315c94c48c0c2efcb19cfbbe1cb63353457ac33541885c51a0f22ce6e23907671f661034871668b4b62004142ed733dc72c9501468cd0775a36399c8f3cced8ea618454417ef9ba057072f1b69c41532a206936a3e4bc8ae755394d2ab3d02b48439a720b6a497886f7322c2f61606c4e22847818a77e67723ab13295a14b3f0f123153fee9108248775e70cd8d13ff9179f88d431d041960550caac1db8cf586e297fb6c686c051dc87ae4e948d7607c0c3931d25585c8d67c80de33f78486c004875ba076dc721eee8da3f31a123abf1c91036cda2bba4420dc4cd04ddbf679133bc8df62095fde89522b34d0cca9f18857c5a043ffcd6be0bdef9f15127bb28058331f68c7f078de"], 0x14, 0x1) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000080)={0x8, 0x1f, 0x2, 0x1}) accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) sendto$packet(r6, &(0x7f0000000100)="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", 0xfd, 0x8000, 0x0, 0x0) writev(r5, &(0x7f0000000700), 0x100000000000000d) sendfile(r0, r5, &(0x7f00000002c0), 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r11, 0x3}}, 0x10) 09:18:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000000000000000"], 0x0, 0x0, 0x0}) 09:18:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 09:18:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 709.089155][ T2663] binder: 2662:2663 ioctl c0306201 0 returned -14 09:18:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 709.252772][ T2666] IPVS: ftp: loaded support on port[0] = 21 [ 709.331065][ T2671] binder: 2669:2671 ioctl c0306201 0 returned -14 09:18:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 09:18:45 executing program 4 (fault-call:18 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 709.647392][ T2762] IPVS: ftp: loaded support on port[0] = 21 09:18:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x3, 0x7) getsockopt$sock_buf(r1, 0x1, 0x28, &(0x7f0000e530e9)=""/16, &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 09:18:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:18:46 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:46 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:46 executing program 1: r0 = socket(0x15, 0x806, 0x1) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") [ 710.108787][ T2994] IPVS: ftp: loaded support on port[0] = 21 09:18:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 710.198947][ T3041] IPVS: ftp: loaded support on port[0] = 21 09:18:46 executing program 1: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x20, 0x600000) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000000)) ftruncate(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000080)) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) 09:18:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x24) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) [ 710.735488][ T2762] FAULT_INJECTION: forcing a failure. [ 710.735488][ T2762] name failslab, interval 1, probability 0, space 0, times 0 [ 710.755802][ T2762] CPU: 1 PID: 2762 Comm: syz-executor.4 Not tainted 5.0.0-next-20190306 #4 [ 710.764419][ T2762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.774472][ T2762] Call Trace: [ 710.777775][ T2762] dump_stack+0x172/0x1f0 [ 710.782132][ T2762] should_fail.cold+0xa/0x15 [ 710.786744][ T2762] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 710.792570][ T2762] ? __should_failslab+0x14/0x190 [ 710.797604][ T2762] __should_failslab+0x121/0x190 [ 710.802557][ T2762] should_failslab+0x9/0x14 [ 710.807078][ T2762] kmem_cache_alloc_node+0x264/0x710 [ 710.812479][ T2762] __alloc_skb+0xd5/0x5e0 [ 710.816823][ T2762] ? skb_trim+0x190/0x190 [ 710.821164][ T2762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.827481][ T2762] ? netlink_autobind.isra.0+0x228/0x310 [ 710.833129][ T2762] netlink_sendmsg+0x97b/0xd70 [ 710.838363][ T2762] ? netlink_unicast+0x720/0x720 [ 710.843345][ T2762] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 710.848904][ T2762] ? apparmor_socket_sendmsg+0x2a/0x30 [ 710.854366][ T2762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.860613][ T2762] ? security_socket_sendmsg+0x93/0xc0 [ 710.866077][ T2762] ? netlink_unicast+0x720/0x720 [ 710.871058][ T2762] sock_sendmsg+0xdd/0x130 [ 710.875486][ T2762] ___sys_sendmsg+0x806/0x930 [ 710.880175][ T2762] ? copy_msghdr_from_user+0x430/0x430 [ 710.885659][ T2762] ? kasan_check_read+0x11/0x20 [ 710.890533][ T2762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 710.895998][ T2762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 710.901462][ T2762] ? lockdep_hardirqs_on+0x418/0x5d0 [ 710.906754][ T2762] ? retint_kernel+0x2d/0x2d [ 710.911349][ T2762] ? trace_hardirqs_on_caller+0x6a/0x220 [ 710.917002][ T2762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 710.922465][ T2762] ? retint_kernel+0x2d/0x2d [ 710.927080][ T2762] __sys_sendmsg+0x105/0x1d0 [ 710.931682][ T2762] ? __ia32_sys_shutdown+0x80/0x80 [ 710.936830][ T2762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 710.942304][ T2762] ? do_syscall_64+0x26/0x610 [ 710.946985][ T2762] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.953056][ T2762] ? do_syscall_64+0x26/0x610 [ 710.957765][ T2762] __x64_sys_sendmsg+0x78/0xb0 [ 710.962566][ T2762] do_syscall_64+0x103/0x610 [ 710.967164][ T2762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.973073][ T2762] RIP: 0033:0x458079 [ 710.976974][ T2762] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 710.996586][ T2762] RSP: 002b:00007f7c99d11c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.004999][ T2762] RAX: ffffffffffffffda RBX: 00007f7c99d11c90 RCX: 0000000000458079 [ 711.012969][ T2762] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 711.020944][ T2762] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.028914][ T2762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c99d126d4 09:18:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:18:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r2, 0x20400000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x2000008f) syz_open_pts(r1, 0x40) [ 711.036896][ T2762] R13: 00000000004c5674 R14: 00000000004d9550 R15: 0000000000000007 [ 711.223705][ T3438] IPVS: ftp: loaded support on port[0] = 21 [ 711.254706][ C0] net_ratelimit: 16 callbacks suppressed [ 711.254714][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.266172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.285263][ T3041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 711.416028][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 711.421896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 711.577355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.583163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.589032][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.594801][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:18:48 executing program 4 (fault-call:18 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) 09:18:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000002480)={&(0x7f0000000080)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/191, 0xbf}, {&(0x7f0000002240)=""/181, 0xb5}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000002300)=""/1, 0x1}], 0x8, &(0x7f00000023c0)=""/134, 0x86}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004500)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000004600)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004640)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x425b, 0xa, 0xa0, 0x20, 0x3f, r1, r2}, {0xe2, 0x401, 0x8, 0xfffffffffffffff8, 0x1ff, 0x2b4addb4, 0x2, 0x6}, {0x5e20, 0xffffffffffff8001, 0x400000, 0x7}, 0x5, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x34ff, 0x7, 0x2, 0x0, 0x8001, 0x2, 0xfffffffffffffffa}}, 0xe8) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2cf) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x109000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, r3, 0x0) poll(&(0x7f00000024c0)=[{}], 0x1, 0x0) 09:18:48 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:48 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) [ 711.876172][ T3604] IPVS: ftp: loaded support on port[0] = 21 09:18:48 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 711.935968][ T3646] IPVS: ftp: loaded support on port[0] = 21 09:18:48 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 712.053177][ T3723] IPVS: ftp: loaded support on port[0] = 21 09:18:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) 09:18:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:48 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 712.308422][ T3770] IPVS: ftp: loaded support on port[0] = 21 09:18:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 712.545433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 712.945436][ T3646] FAULT_INJECTION: forcing a failure. [ 712.945436][ T3646] name failslab, interval 1, probability 0, space 0, times 0 [ 713.033059][ T3646] CPU: 0 PID: 3646 Comm: syz-executor.4 Not tainted 5.0.0-next-20190306 #4 [ 713.041670][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.051726][ T3646] Call Trace: [ 713.055066][ T3646] dump_stack+0x172/0x1f0 [ 713.059503][ T3646] should_fail.cold+0xa/0x15 [ 713.064109][ T3646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 713.069932][ T3646] ? ___might_sleep+0x163/0x280 [ 713.074789][ T3646] __should_failslab+0x121/0x190 [ 713.079734][ T3646] should_failslab+0x9/0x14 [ 713.084270][ T3646] kmem_cache_alloc_node_trace+0x270/0x720 [ 713.090097][ T3646] __kmalloc_node_track_caller+0x3d/0x70 [ 713.095738][ T3646] __kmalloc_reserve.isra.0+0x40/0xf0 [ 713.101122][ T3646] __alloc_skb+0x10b/0x5e0 [ 713.105546][ T3646] ? skb_trim+0x190/0x190 [ 713.109883][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 713.116131][ T3646] ? netlink_autobind.isra.0+0x228/0x310 [ 713.121775][ T3646] netlink_sendmsg+0x97b/0xd70 [ 713.126550][ T3646] ? netlink_unicast+0x720/0x720 [ 713.131496][ T3646] ? __sanitizer_cov_trace_const_cmp2+0x20/0x20 [ 713.137745][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 713.143990][ T3646] ? security_socket_sendmsg+0x93/0xc0 [ 713.149457][ T3646] ? netlink_unicast+0x720/0x720 [ 713.154399][ T3646] sock_sendmsg+0xdd/0x130 [ 713.158820][ T3646] ___sys_sendmsg+0x806/0x930 [ 713.163506][ T3646] ? copy_msghdr_from_user+0x430/0x430 [ 713.168982][ T3646] ? kasan_check_read+0x11/0x20 [ 713.173847][ T3646] ? __fget+0x381/0x550 [ 713.178022][ T3646] ? ksys_dup3+0x3e0/0x3e0 [ 713.182446][ T3646] ? lock_downgrade+0x880/0x880 [ 713.187311][ T3646] ? __fget_light+0x1a9/0x230 [ 713.191994][ T3646] ? __fdget+0x1b/0x20 [ 713.196067][ T3646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 713.202315][ T3646] __sys_sendmsg+0x105/0x1d0 [ 713.206912][ T3646] ? __ia32_sys_shutdown+0x80/0x80 [ 713.212045][ T3646] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 713.217507][ T3646] ? do_syscall_64+0x26/0x610 [ 713.222191][ T3646] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 713.228268][ T3646] ? do_syscall_64+0x26/0x610 [ 713.232957][ T3646] __x64_sys_sendmsg+0x78/0xb0 [ 713.237728][ T3646] do_syscall_64+0x103/0x610 [ 713.242332][ T3646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 713.248240][ T3646] RIP: 0033:0x458079 [ 713.252143][ T3646] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 713.271750][ T3646] RSP: 002b:00007f7c99d11c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.280172][ T3646] RAX: ffffffffffffffda RBX: 00007f7c99d11c90 RCX: 0000000000458079 [ 713.288155][ T3646] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 713.296130][ T3646] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.304105][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c99d126d4 [ 713.312079][ T3646] R13: 00000000004c5674 R14: 00000000004d9550 R15: 0000000000000007 09:18:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:49 executing program 1: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 09:18:49 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:49 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 713.691241][ T4056] IPVS: ftp: loaded support on port[0] = 21 [ 713.730424][ T4063] IPVS: ftp: loaded support on port[0] = 21 09:18:50 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)='\x00', 0x1) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x0, 0x9}}, 0x28) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000040)) 09:18:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 09:18:50 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 713.852564][ T4074] IPVS: ftp: loaded support on port[0] = 21 [ 713.915052][ T4081] IPVS: ftp: loaded support on port[0] = 21 09:18:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044000000000076304400000"], 0x0, 0x0, 0x0}) 09:18:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000002) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) modify_ldt$read(0x0, &(0x7f0000000140)=""/180, 0xb4) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:18:50 executing program 1: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=@sha1={0x1, "23fc9cf27707d2249bdb902722a10be33990ae9e"}, 0x15, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000500)='security.evm\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000580)='security.evm\x00'}, 0x30) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000680)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/rt_cache\x00') socket$caif_stream(0x25, 0x1, 0x2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x0, @broadcast, 'ip6_vti0\x00'}}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x8000) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r3, 0x0) ioctl$int_out(r3, 0x5462, &(0x7f0000000300)) getresgid(0x0, 0x0, &(0x7f0000001540)) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1d) r4 = accept(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$rds(r4, 0x0, 0x0) 09:18:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:51 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:51 executing program 1: keyctl$set_reqkey_keyring(0x5, 0x5) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) r0 = open(0x0, 0x0, 0x19c) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x10) open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x3f, 0x3744, 0x800000000000149}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f00000001c0)="af3481c0dfd4c7d86e53b260381ba391a4edc2442b0bdfedf40a3c2ee698aa70fc93f40d10a57f97c89bdeb0bc5fa358ee61415764138e40fbe3ad4c1ccd86cdbc91e5b161bc9251cd788ba15348c8cf73bd32fd53df95fec2e7ef40a3f723f6b637901d1415773b788edd959b9eff246a6a", 0x72) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FICLONE(r1, 0x40049409, r0) r3 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x3, 0x3, 0x7fff, 0x1, 0x7}}) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0) recvfrom$inet(r3, &(0x7f00000002c0)=""/204, 0xcc, 0x10100, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) sendfile(r2, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 09:18:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044000000000076304400000"], 0x0, 0x0, 0x0}) 09:18:51 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb0"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044000000000076304400000"], 0x0, 0x0, 0x0}) [ 715.284834][ T4611] IPVS: ftp: loaded support on port[0] = 21 [ 715.293267][ T4615] IPVS: ftp: loaded support on port[0] = 21 [ 715.302635][ T4603] IPVS: ftp: loaded support on port[0] = 21 09:18:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb0"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 715.463865][ T4658] IPVS: ftp: loaded support on port[0] = 21 09:18:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0xf, 0x3}, 0x14) 09:18:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x15, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4000"], 0x0, 0x0, 0x0}) [ 715.769932][ T4876] binder: 4840:4876 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:18:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x77, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x5, 0x1ff) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 09:18:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000"], 0x0, 0x0, 0x0}) [ 716.364843][ T5141] IPVS: ftp: loaded support on port[0] = 21 09:18:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000"], 0x0, 0x0, 0x0}) 09:18:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x3, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c}, 0x24) listen(r1, 0x9) listen(r1, 0x0) listen(r0, 0x5) 09:18:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 716.732496][ T5253] IPVS: ftp: loaded support on port[0] = 21 [ 716.740245][ C1] net_ratelimit: 20 callbacks suppressed [ 716.740253][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.751712][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:18:53 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000"], 0x0, 0x0, 0x0}) 09:18:53 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:53 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="020000000007ab5328d488ba55d75a141787465257007a80ae2b7ab058afaa070504be31f891ac98a33a8da851eea2e78846811dabf15d62b395025f3d3a8dcb82e5fd6a09050079965c9a0e16c13e392231731b1638528f19292760e06778432800000000000000008ca2fbcb690f81a47afa68a89fe19eb8fea267f7b7191a9fed49b3996111c5b8b851f6ccb747db7c66fb16d38c606108ef72376fb92ae6ab2edd7cc7"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) fanotify_mark(r1, 0x20, 0x23, r1, &(0x7f0000000180)='./file0\x00') r3 = syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x4, 0x80) r4 = dup2(r0, r2) poll(&(0x7f0000000480)=[{r1, 0x8043}, {r4, 0x2}, {r3, 0x1000}], 0x3, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000440)=0x6) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="fd5b803eb2a5d57f9255bf6df1812d4d1e0000008000000000be6f9fe5788b998d3f53ded7dd2b6d9754e067a74ae29643fe20f1c253936e8ebed0fa48214a88b7c163628ae7f2edef074e1be94cd24f33a51408ea6883421415516cb00bb2186dd52dc58ed47b842b403ca31b766b6adfd08e00bc3709b371afd71bdf0720becffdc7020d308cd18c84dca8a4399620a21dd7c664ad71a8b861365e03db367b2a011fca8e0531c990518271e020885fcf80ac2fbc9a8391ddabde1d1b276bae7da1278bf86d6b3d06e9eab3bded09ad203e7d2e89aea0daf7cd9daa7fa0"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 09:18:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb0"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e63"], 0x0, 0x0, 0x0}) [ 716.962515][ T5362] IPVS: ftp: loaded support on port[0] = 21 [ 717.005747][ T5364] IPVS: ftp: loaded support on port[0] = 21 [ 717.102526][ T5375] IPVS: ftp: loaded support on port[0] = 21 09:18:53 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xfffffffffffffffc}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x5}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@pppoe={0x18, 0x0, {0x3, @remote, 'vlan0\x00'}}, {&(0x7f0000000200)=""/234, 0xea}, &(0x7f0000000300), 0x4c}, 0xa0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x8000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffd07) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x5}, 0x8) 09:18:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e63"], 0x0, 0x0, 0x0}) [ 717.404319][ T5583] binder: 5582:5583 unknown command 25358 [ 717.426505][ T5583] binder: 5582:5583 ioctl c0306201 20000680 returned -22 09:18:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e63"], 0x0, 0x0, 0x0}) [ 717.547010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.552861][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:18:53 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x4000000000000000, 0x0, @ioapic={0x1000, 0x5, 0x9, 0x200, 0x0, [{0x6, 0x84a, 0x4, [], 0x70dc}, {0x6, 0x5, 0x4, [], 0xf91}, {0x9, 0x0, 0x2, [], 0xfa9}, {0x7b44ea01, 0x7, 0x9, [], 0x22}, {0x3, 0x4, 0x8, [], 0x8}, {0x5, 0x5, 0xfffffffffffff000, [], 0x3ff}, {0xffffffff, 0x6, 0x401, [], 0xfffffffffffffff7}, {0x8, 0xe28b, 0x0, [], 0x4}, {0x2, 0x1da, 0x3, [], 0x1}, {0xff, 0x1, 0x3, [], 0xffff}, {0x7, 0x2, 0x10001, [], 0x28}, {0x0, 0xfff, 0x40000000000000, [], 0x4}, {0xd1f, 0x101, 0x7fffffff, [], 0x7}, {0x20, 0x1, 0x7}, {0xae, 0x1, 0x7, [], 0x3}, {0x8, 0x6, 0x0, [], 0x1}, {0x7fffffff, 0x5, 0x4, [], 0xfffffffffffffffb}, {0x100000000, 0xfffffffffffffffd, 0x7, [], 0x9}, {0x7, 0x81, 0xb8, [], 0x8}, {0x0, 0x80000000, 0x80000000, [], 0x1}, {0x4, 0xd5d5, 0x1, [], 0x4}, {0xf7, 0x5, 0x7}, {0x5, 0x8, 0xfffffffffffffffb, [], 0xff}, {0x1, 0x3, 0x5, [], 0x5}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)) [ 717.686123][ T5688] binder: 5687:5688 unknown command 25358 [ 717.698280][ T5688] binder: 5687:5688 ioctl c0306201 20000680 returned -22 [ 717.708278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 717.714167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 717.741555][ T5691] IPVS: ftp: loaded support on port[0] = 21 [ 717.869642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.875509][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 717.881404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.887179][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:18:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:18:54 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000849078ac141400ac1414bb0e00907800000000000000000000000000000000c696c780d49e38224cd098ee2a2e64619e582f206e14b5fc5a3508b28b2e8c3acee3294cd2740e4c5aa127515a2968cec44b48eefde9b2f0b11f9ed92e05a5ad62dcdf6ffa6a749df05a6a9d2494dee01a53f18956"], &(0x7f0000000080)={0x0, 0x4, [0x30, 0x58]}) [ 718.335914][ T5806] binder: 5802:5806 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 718.362928][ T5808] IPVS: ftp: loaded support on port[0] = 21 09:18:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:54 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x13, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c"], 0x0, 0x0, 0x0}) 09:18:54 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:54 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000040), 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x5}, 0x10) close(0xffffffffffffffff) [ 718.521936][ T5814] IPVS: ftp: loaded support on port[0] = 21 09:18:54 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:54 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) pause() poll(&(0x7f0000000540)=[{r0}], 0x1, 0x0) [ 718.661624][ T5896] IPVS: ftp: loaded support on port[0] = 21 09:18:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x13, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c"], 0x0, 0x0, 0x0}) 09:18:55 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 718.907061][ T6078] binder: 6072:6078 unknown command 811790 [ 718.925817][ T6078] binder: 6072:6078 ioctl c0306201 20000680 returned -22 [ 719.266199][ T6146] IPVS: ftp: loaded support on port[0] = 21 09:18:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f00000001c0)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0xfffffffffffffffd, [], 0x0, 0x5}, 0x48) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000180)={0x46}) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x0, 0x2, @ipv4={[], [], @multicast1}, 0x1000000000}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x7, @remote, 0x5}], 0xac) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x3c, 0x0, @in6={0xa, 0x4e21, 0x0, @empty, 0x6}}}, 0x90) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000280)='\x15\x16\a\xc2\xcd+\x04^\xc5>\xe7x\xc0\xe5\xc6\xa0\xc9\xd4x\xd0\x90V\xa1\x87\xc3\x8f\xa9\xd8\xf7kA\xf4pX\x1c\xf52d{K\xb7xO\xd6|:\xc3\xbd\x89\x8eS\"\x8d\x1f\x04\xacL\xabP\xeb\xf0\xeemPOTUSA\xd3\x94\xab9\xc6\xc6\xaf\xef\xf9p\xc8\x13\xe7\xb0\x14\x91\x12\x15z\xbb\xf2gb\xad\xa0\x15\x8e\x88\xc1-\x1d(q\xcb\xa6\x14\xf9.\xc1\x9e\x9c\xed\x88@2\xaa.\x187\x93\x9d\xa9\xcdf\xedR\xf7)e\xc1\x92\x9a$\xf8\xdc\rq\xab\xbe\xe9\x1d\xa0\x9a\x9e\xa6\xc4\xf3\xb59\xe5\rI\xd42\x1e\x1b\'\xac\xe1\xe8t\xc2\xaa\x02\xfe\xcfI\xd5\xa3\x15\xa0\x9e\x1b{I\xb0Yj,\xaa!p!p\xe6\xa6{\xf9']) 09:18:55 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x13, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c"], 0x0, 0x0, 0x0}) 09:18:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:55 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 719.677766][ T6157] binder: 6155:6157 unknown command 811790 [ 719.683612][ T6157] binder: 6155:6157 ioctl c0306201 20000680 returned -22 [ 719.714145][ T6167] IPVS: ftp: loaded support on port[0] = 21 [ 719.724464][ T6163] IPVS: ftp: loaded support on port[0] = 21 [ 719.738686][ T6160] IPVS: ftp: loaded support on port[0] = 21 [ 719.746482][ T6162] IPVS: ftp: loaded support on port[0] = 21 09:18:56 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:18:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/dev\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mprotect(&(0x7f0000107000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x2, {{0xa, 0x4e23, 0xfffffffffffff788, @dev={0xfe, 0x80, [], 0x2a}, 0x4}}, {{0xa, 0x4e22, 0x8001, @loopback, 0x7}}}, 0x108) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) dup2(r2, r3) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000000)=0x1) shmat(0x0, &(0x7f0000107000/0x4000)=nil, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x2, 0x4f}) [ 720.135699][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:18:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:18:56 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000173, 0x0, 0xfffffffffffffd3b}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11}, 0x208) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000480)=[0x0, 0x0, 0xee00]) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x7, r3}, {0x2, 0x5, r4}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x5, r6}], {0x10, 0x4}, {0x20, 0x5}}, 0x4c, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='wlan0\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="1c20c8b8e04792494c9fc32b8bad45a5", 0x6c1) 09:18:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1) fcntl$getflags(r0, 0x40b) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffc) r2 = dup2(r1, r0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000100)={0x2, 0x9, [{0x6, 0x0, 0x9}, {0x1, 0x0, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80000000000001) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f9f62526b9d21f8d4104630440000000000763044000004f346ea746"], 0x0, 0x0, 0x0}) 09:18:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002580), 0x1000) read$FUSE(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xffffffffffffff79) r2 = gettid() tkill(r2, 0x1000000000013) 09:18:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 720.990339][ T6980] IPVS: ftp: loaded support on port[0] = 21 [ 721.728662][ T7007] IPVS: ftp: loaded support on port[0] = 21 [ 721.903438][ C1] net_ratelimit: 15 callbacks suppressed [ 721.903448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 721.914927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 722.064725][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 722.070922][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 722.077343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 722.083557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 723.042515][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 723.048321][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:18:59 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000080)={0xe, 0x1, 0x869d, 0x6, 0x64, "003969a0f178fdbf6c3e0e5c65774060a47eb25f1df9707a4a3b19b668702138879f4fe3dcf6122beaf21e7e0ee17dce6b652999fa68abca90b5bea68266a0fcf5248e32822952a5c1f36ce3eed0037eeac770ab0fa2665a2a31c7cc71879cfaeff1a64b"}, 0x70) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x40000000, 0x5, 0x15}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:18:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0xffff) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0xfdef}], 0x1) 09:18:59 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:18:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 723.223492][ T7019] IPVS: ftp: loaded support on port[0] = 21 [ 723.235840][ T7016] IPVS: ftp: loaded support on port[0] = 21 [ 723.237486][ T7017] IPVS: ftp: loaded support on port[0] = 21 09:18:59 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:18:59 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f0000000000)) [ 723.494818][ T7235] IPVS: ftp: loaded support on port[0] = 21 09:19:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 723.839252][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 723.845045][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:00 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file1\x00') getdents64(r0, &(0x7f0000000240)=""/178, 0x1d) fchown(r0, 0x0, 0x0) 09:19:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304425813d026dee455250d0080020e630c29"], 0x0, 0x0, 0x0}) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 724.250741][ T7449] IPVS: ftp: loaded support on port[0] = 21 09:19:00 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$unix(r1, &(0x7f0000005080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@cred={0x20}, @cred={0x20}], 0x40}], 0x1, 0x0) 09:19:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1000) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044000000000076304400000f1d90e630c40"], 0x0, 0x0, 0x0}) [ 724.498661][ T7825] binder: 7824:7825 DecRefs 0 refcount change on invalid ref -638517248 ret -22 09:19:00 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003ec0)=@broute={'broute\x00', 0x20, 0x2, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200030c0], 0x0, 0x0, &(0x7f00000030c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, 'lapb0\x00', 'rose0\x00', 'ip_vti0\x00', 'caif0\x00', @link_local, [], @link_local, [], 0x70, 0xc0, 0xf0}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}]}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffdffffffffc}]}, 0x1f8) 09:19:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1a, 0xc, "4f566bc6254f8027a68843d4868df8caf3c9fd0ac134a41c561bf4d6516922895e139d559d59305cfb3863e95c4f4f0676e3f0fe03fb26bbc5897ee8d433d960", "2c1483434e859aefeecf39bebb8015899bed01b5c2cd00470299aa9c78acb43e", [0x5, 0x4]}) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044000cc698613630440000000000e630c40858580c2b0ac20116992ce49c7cb1bb868075ab0f6f0beb3bef4a2ef072d61c87a4c97328fcb689cd32471502264abbb79b88b6b1e8c0297e22aef6f858a78d7a2c2b9dfea2c4ec81cee999d0927ba465c41cbe7ad3e037b11b0ce0000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 724.782025][ T8029] binder: 8028:8029 IncRefs 0 refcount change on invalid ref -2039886848 ret -22 [ 724.791708][ T8029] binder: 8028:8029 unknown command 1074029331 [ 724.798274][ T8029] binder: 8028:8029 ioctl c0306201 20000680 returned -22 [ 727.227260][ C1] net_ratelimit: 16 callbacks suppressed [ 727.227269][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.232981][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 728.034058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.039868][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 728.195332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 728.201136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 728.356706][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.362516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 728.368382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.374159][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:06 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 730.169434][ T8033] IPVS: ftp: loaded support on port[0] = 21 09:19:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 730.535330][ T8038] IPVS: ftp: loaded support on port[0] = 21 09:19:06 executing program 1: syz_open_dev$usb(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) io_setup(0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) 09:19:06 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x81, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000040)) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04630440000000000735320f2903125ce1630c40"], 0x0, 0x0, 0x0}) [ 730.750519][ T8092] IPVS: ftp: loaded support on port[0] = 21 09:19:06 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x200000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xa97a, 0x5, 0x7ff0000, 0x2da, 0x15, 0x100000000, 0xa6, 0xffffffffffff0001, 0x4000000000, 0x2, 0x9, 0x7}) 09:19:06 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:07 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:07 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 730.924768][ T8236] IPVS: ftp: loaded support on port[0] = 21 09:19:07 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:07 executing program 1: [ 731.136987][ T8380] IPVS: ftp: loaded support on port[0] = 21 09:19:07 executing program 1: 09:19:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:07 executing program 1: [ 731.543460][ T8496] binder: 8495:8496 ioctl 8912 4 returned -22 [ 731.581146][ T8496] binder: 8495:8496 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 731.617591][ T8499] IPVS: ftp: loaded support on port[0] = 21 09:19:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:08 executing program 1: 09:19:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) signalfd4(r3, &(0x7f0000000000), 0x8, 0x80000) [ 731.904435][ T8686] binder: 8684:8686 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 731.926523][ T8686] binder: 8684:8686 ioctl c0106426 20000080 returned -22 [ 731.963250][ T8724] IPVS: ftp: loaded support on port[0] = 21 [ 732.390162][ C1] net_ratelimit: 14 callbacks suppressed [ 732.390171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 732.401663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 732.551541][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.557323][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 732.563175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.568943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 733.519534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 733.525330][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 734.326355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.332153][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:11 executing program 1: 09:19:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:11 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 734.960208][ T8838] binder: 8837:8838 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 735.008759][ T8841] IPVS: ftp: loaded support on port[0] = 21 09:19:11 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:11 executing program 1: [ 735.442237][ T8850] IPVS: ftp: loaded support on port[0] = 21 [ 735.449746][ T8851] IPVS: ftp: loaded support on port[0] = 21 09:19:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000000) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080)=0x7ff, &(0x7f0000000100)=0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000001700)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000000100000a40f7de344cb937b4e5e83480823f2dc131a12acbe20f4fc0731ccd573d485612bd61737f60f5690d41bd075a67b16cfee601c3424e90ee6d58b47aa4a24ba82872175aeee2cf67293f8e755c1637ffbe611db9832a84e6d27a05a8e3c88907da8a52c8981508bb54cfd87b6ab5aee219ede261a8b4c2d1b4e860fdfb0587c3e826e054c579149a2bfa6eadb8b910bca24ff400c254e9d2258729d56a9498f9f5fb5cc3c163d6a56c5e94dbfa56d94a2e37989d5bb8492c35a6ff02465e52876e655d79df8e7cefd87e3752e3a0960393a858f899d2f557a272e2a031d532252808b0c5fcf43a8a8917f9f32acc44a2114791f67364d0133e7f363d9684e5a1dc4bf5c915b33a6c0f547cb292b58fce8d5d83054d4b6ffa35fa27ad15a536627a0cd9148b8a98ad23e803c0a412bab43081a5c7ab43cbeda4a9dd29bbf05a9dd7bcfda51c5ce40baa99472049109da3a23b5465b18da3ec163d81fe7d641799707baeff978e183ee3e9f5c1d26164d09178cae84c2b65f4e7462cb59879119812954c24a4af72b9bc1cb7a857443a9698c7b2f151ac7e747ea5c6185daac3309ef7955322c11ddbc1660152b41e7c74747f0e86a28711e5784643a54394b582786f7896619ecd0fd006846d89e82bd9e8953d7aff179c401aaa4184de81cdc8498d88c876d3994473afdc0685f29fabaaad151ef12596f6f595bda5671cb1b62d22b28c3b228c0a81add9e7301580609e1dec8161fc0090556c91a7152175f1aeb6ef0412ac923596e0a80150742d282bc1239f8abd71737fe069436357d1c41bc301f6a781e832220d167d16aa20e731dd36491ca4cebec43933112327bbc7e4aa0998a26ac558c20e720270bc91d8db21967ad1a6dde8a200b74cff2ab7878e02ec4a5931946346a44d872d59e6008e24589e63459dd01270976c5a92ec5308a012a1d4210397b40d1b122e85aa81a1acb1287db7a7f055c71ef52b3d1656fec747a69bbb3266b540c1be5ae276df706ac1115b346d61f840f47f7311bc03f0d8f9f2f403a1c84a7947fa4dff3e60084d9e5b1d50a5becbad8536ab2eec95a6f760d672c7daf3558a71b7fc4066dffdc5b00e34845ec1b170b0203582aceec5eb97bc0feeebd90e8ccf8547ab3519aa07bf88d707f434b87990d9e692994530ec872083c5480a9b69d3941fa809e31bbdc9855b779526a1683aacf1fc5c0d2337964bfc5700de0340ebd5d6a2f6391577bf46e40264fb42f9bb97b7b72f0bd5b43621f57a4401c0b5d15b5fa9dee80923ca978e152f490d13ce098777e7bdbd7bc974eb574138796990e08ce8368e9e6d05d43f781d29d5460b9876462f1afd40ac48b695e69bda4b88e156800db7dfc9bf83d201b029bcd2066a276c7a9974bc9f75c0cdfe298eafe94bc3ada844dbb3ca4b9f6288206e0091a5a5113fdd67ad90c11c3b3c6724ccf0395517936104a57e135d84bd4349a92fc54cb1c2ef4f765c21a9e1842ed835ee3a18516c9574036686d3ac2ef67340119e0705738e9722d0365c705c67d4848016cc763e33f245fb88462abc3da0491f4ab0c16e3715ce39f4a7e78226d48b4f7ac2726cea2b1fb90837fcf7564aa4e7f1074ca494f0047bc1f37647fbebeafb0c1be4ef5add0943b0ef76edb3e239f934b3217deaab0b2a7219664751562390e4a3a86f298af3b4e619aa061571bc7ac41838a02b389805b83ef4c0df2857588c55182f0a4c93bb8def947e889c8188880c0e079bbacc0408c57664f6cdfa6923b40d7d08bddd5b02bb5eae009a261c43dea000b0f4fe659e7c930a4c3d7922c02b4f92d18a28d61e78b42b823e33b21b766b7e92285c5c19ce9ffb62941b577ab7b391435a1097a76617537c6fccb5615bc4656d6e6df65a9a8564697fcb4a6f9d45758bcc357ded97022f180569cb2b45b91be53b632c6e40112e01b821f11b8b27a16bfcc5dc6e8906b9339784ab750d6f6132d5b2dbb8e713c5f5e30a2a2fac3c564e9cbf8d52d9f7ab00757cc4d1aeb52a10375429d7762771892dc5de18ecbd148998649075e9be8cf8b990d092e10fb59251213fb14d1a8819565d9241770e71c592e7eee9caa3e013c8d3ef1033741404be72c5b0f833964f4e7ddce821eae610cf8553921de4bf720a9bf3e0ababcb3a748742365a0c97176a3b06993c153e9f1dfac2951689bcdf923911a9165a6a902226718ca46f4005cdc715189b84234e6be7e02e1b7eb9a8449a858ed7325d060fe98658755440d22c5918790ef419311128b995cd22a5c27a1160ef70cd12ed295cf68a28c37943e505931042e91a108aa97679f30d6477bad7e73dcd5e06e0d248f786501d25816985bec3d669f4e5363c39af55061a4945f4a821351fbafd717ce5e9c3266f8f94f5939157ecf92c6632ec7002325521c23d009eda5af42a57d269386d7bd56184090b93154de9d0a21a2977be3470c2be3e5e999e1b9361ca0eb9e25002afcbfec3effaf522dee11e0233a527e5e7788937a290199fd5912be9f77cf865360595ab70a7990ac5562e396d6be0501208d3e50f2ec1dc30673723b30189d768e526fab566b13564b733eda4612122f7ec87464f2116a31fde1a6fe0a5a4706577a2adce399c543b1ad35aec41b71364eb08389ce71b0fb50e2f76c73628c77ed34bacd19c3f13ae9d060f6b7f4e5445a787a711198bb18b427ce6b34509fe6ff88302429ef15ea150f169f06d9da399955e1ee70a983bd763532c86d424c97f8a0490543566aaab7722ef5a7cfbf24e74f95020d94a63c2248f82a12c9120440d53c3489bb67bb6e0f03440f23f26af7ce62f8e19027670bf838dd3008b842a53ccd86dfac5e46a3021576183da0b132548c3a58ea02f43064537d9b9cca96f053e67409f4d2e297e05bc6fe12b856dff96763e61a74ead26775deaba86687978666636762d33a1c35f260d7da569eb31c9160af8ead54a1329f99eac94b772365a642e711c0cb3df636df20e9a53e27003968e79d5578eaf922581364e5e3adf161ec1d90c47aed308e20bddbfe5a7011c6d45e7e6a9b3d0b3779c1fde8e6a137e9cbfbc9daf0fe72a5d04cec3c3a6b493089129c15e64a14a87c265b1ee85b5fe6697f60ea17ce88c1cb243f6da8bf99b658fd5027997c4c4297983406546337a8c6063b254844cce060c9439f597fee53b0115f9cd5c8939f7ba910f64a808f2a4f36483076bb6ebcd3d2816a5cd70587509931a70e1dbad074134ba399aa82adc54fd6b994ba94921b7ebec21db31424ef62aea415881407ef4dd5d00e6e208a21943bf812f4f30a0c598eef72b37a6b4ffc491c0a56bd209086d704535e9f5b910f01bb9c658255daec6827c300b7e0cf43810e19ddfc96adafa73d069882b844e1784aabdace90f81619660570eb4253d93a53cbed5f6bbe395b518daddfbc1c4072d4b50f7be67d8bd42c67af159cdcdc65fad8d1a471b02a94f393b495261422d7dfc6947fc36c9897916c99dfe9b5da105b3bf9c6f5342eb1b65bdd7967cf1cef8a1169dd43f98c7e7961ccdda8ba5ec153da6f123814b1692a9fe2b0127d9f274ab2e5de32a555844a90a0627e9bf8b905a6abed3729151f1962fc200acba604db5e804cb07843d2708ae93f84bb59f613dbddb3bea5e490c202f2ef48aeabc96a12258b5816123f40c7ddd1186bb1bca3040b2dd03b1512d195af80014afb5b90c00c6c3439cd278936a8eadab37b12f5ec00b900f076b6ff1817e62ce9c41663a5fa39c295c068fd1dff00e69e5f56621c1250ac3ba07ca1fd8bd64fa9b5ad757000e0bf439890fa04a93e406baaedc676e8af15d046d74c50cc555883ed9d3138ce07849199d0d31b93eefe0db2784fcac0b6d8d7d17d7a3f5dfacb06459f8a496c88e7b20f2d0b276ca34ec64e868ac71ca15605f675641a98b6a9a38339b2524c15e38401eda395e81339251ab40d94c68d5b5801736da5ef86cbfdfbe2d1d42f6cb95c6983c7d9fcb279081bce9d58abc2e449ac4926d3c191068af77f3e57a8bd1488e884ea42f046a05a0e489f32a5c5060227098ac15707204eb4e2335e72c700a3bc7f6ea89a36d09a7ca369ad7adde0478571c133b856b0298a35a7b08093d47eaf39d3b22c3bd68e98682cecba0128106a90776b3d89217bda576857101d5c06ca90ef5478f7264bf3d1b7cb2d2170451b9de459a404cf506c65892bf93e8901396e9a4c07ac259c05fcb70e3465b53438d7d66c9d4c32e085fd232a9850afeef13783eb2aa04da540996a78a8d747200e61bab80729c08f38233c9943031ee1da23dc1330359286097e1183f6bdc50e19f480572a0f275bfcfa7ba21489faf3ef93df0685d83ca60d571ecb9a24a0e80d1fdea553648295f7a6df0635efbc70c725aaf2b16a4c654c4a59ae6ae0d2c5f11223ccf203c3408159fa8511d76a5c8671992a23d5a21808b989de4caaf116c2d6e26ac9a502779e5802eafa2b552319f5fbaa723c11091f9e1184633e39b90e723bc5a275ea8258037b517712183b4fab58543c01f5d3377d5c7384e15872189b259ed5794222a78392c438615a3e6da4d38c447eb84b6262518ae4f92f00b83886b1323396eab369a1b147f7fa759c35f4d66c83eb9136e719357a458c506b92350fc17a490352b6096b58671be0b0086664f747946a7cff99254959d465b82673a96988b980233ab6df8b7b4f5fdfec0f1446291cdad34cc53b58ec61cb706ad23d0151de824597a08a5381d7b01619464b48a12ad01c826efca78bf4b2e62b3f43a85a0ecf9efe9ca5c34e65d3b395a80cdf2b29def58fedc0136d306ccff41788b1efd29dfbda8db84b06065a998aafdf1d43ad1d453cb0aeaddf75026d40c9bd3c79c708885ef6ba4278c6223df9b42c0c42cff9caf83521167e144044d96caf5b5da4a9b66adbce3a848415f28744c0d5a614bec511310ca118a8e0b02ed78ce2f4a843810a12d21eb977de398beab3ed09c22f53df555bb37007650614a1315f8efec5e99e3f2a53d74c56e05be7ad06e7c63cd50981368cc9ad367d94610a69c79701d0062b9263d25a0dd452727b558e25be7cda49eb4441b08736b559ad617809a1d7f6765d8c08db5203f455fddd4ff61f1bb00f49629ba2e511d1d24d74083063f3581cb200c66dced6c23f70793be0174daf829363895d7fc834edd31b078626d87031024a0d601fffaefa9c61ed96e0f519a528ddebee1479773002449fd8a5c42442e69d69503c2718337a2888df1353e20c609a143eb83560c5a630cf825152c47d47f881da9bb2de049085fd75ad633f4928792c9b47ecd5f20e65d81db317c8fc2b38f7f03cc2d6acd84ac9f3fdc8e1928e76105772865075518d28d78b1a32ce31cc6eccab57105e68de87556236424512c30bac4965f106fabc27480a6dc067ceb998e7081ada5121a5892112fa6322910f8c92d213465b04a5afec79d8271d8c91e33fb74dbd2a8bc6304c0a3f89f02cf1a3185847e439031777275248d5241b68b07d7b53ee7835ca950873ad628d7e650bd42c26f54a6ba8f932bb0452048f0e0fb2e93c6cd74933fc37e15a729eab8aefabd9d18ad2ecfcee3f6fdb7796a3f9aab59c042dc0c279a46e6ff4283321ea72921c3668675cdbd536577d12f088d0af00e8f14ddd6da5d259ae78e1408591b428eeaa8fc966b57f589b7087f0f8942e7f8634d29bb40f5113f662efc876aa0badf9aa029f6914c390fc8626d74dd0eed67aaf7f05a25dd0f7d1551368ef474b82"], &(0x7f0000000040)=0x1024) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x100000001) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x8, 0xa7, 0x401, {r4, r5+10000000}, 0x1, 0x2}) 09:19:12 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @bcast, 0x0, [@rose, @default, @bcast, @default, @rose, @default]}, 0x40) bind$rose(r0, 0x0, 0x0) 09:19:12 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 736.021348][ T8968] binder: 8964:8968 ioctl 8912 100000000 returned -22 [ 736.037327][ T8970] IPVS: ftp: loaded support on port[0] = 21 [ 736.038932][ T8968] binder: 8964:8968 unknown command 1073701636 [ 736.061791][ T8968] binder: 8964:8968 ioctl c0306201 20000680 returned -22 09:19:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(r1) [ 736.095833][ T9013] IPVS: ftp: loaded support on port[0] = 21 09:19:12 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000)="3782d5d2634d44e521b1e061f2f8", 0xe, r0}, 0x68) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) 09:19:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000380)=[{r1, 0x4001}], 0x1, 0x1) [ 736.403991][ T9214] IPVS: ftp: loaded support on port[0] = 21 [ 736.430318][ T9344] IPVS: ftp: loaded support on port[0] = 21 09:19:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x400032, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x80047437, &(0x7f0000000040)) 09:19:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) r3 = getpgid(0xffffffffffffffff) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000180)={0xfffffffffffffffb, 0x7, 0x1a, "fa462693eb04073b89c281f0be36c9398c4e9be849e70cac41b41cca3ce341b766543af08c262c1255613f9c880e5209ab238f2010f38f3a798d4a09", 0xf, "0a79285c7d0c74aeb0f618556b2cd213070cf84a7e8bb6f6b64563a97ddb9f50eb12e216c8f747f09e2c34aea7f090820f9f89260bcaa340f58235f0", 0x8}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x3, r3}) uselib(&(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xb4, 0xf70, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={r5, 0xc0, "6f7b42671f1de0eda91c21a6309153881e11efc8f421b640f104e8e8cd1edc8c7dea7e2cdccb2a649e226411b8d0ad8834e98ceb5e216053507f750dff17a949c6ee953f9ee2dee60e25285a60b9063dce36bf37f31e211e7364dadb81eb09c7234e8e2e9a8e9fb78b30956a199b72302a8f780f40cf08734e3dd5b6ee4e4297066ceb4a59d92a150490e33456f2c33e290c8f3f26372ce35bf567afe51718596a6ebbe6ca7dae95cfab2dbdb8c46d57a669e0e508aa232cc4fda38fbf24b5ae"}, &(0x7f0000000240)=0xc8) [ 736.899053][ T9630] binder: 9619:9630 ioctl 408c563e 20000180 returned -22 [ 736.961098][ T9630] binder: 9619:9630 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x80, 0x0, 0x9}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 737.433956][ T9730] IPVS: ftp: loaded support on port[0] = 21 09:19:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x400, {{0x2, 0x4e22, @local}}}, 0x88) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x40, 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101180, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 737.578760][ T9835] kvm: pic: non byte read [ 737.592713][ T9837] IPVS: ftp: loaded support on port[0] = 21 [ 737.609066][ T9835] kvm: pic: non byte read [ 737.631174][ T9835] kvm: pic: single mode not supported [ 737.644168][ T9835] kvm: pic: non byte read [ 737.668522][ T9835] kvm: pic: non byte read [ 737.691839][ T9835] kvm: pic: non byte read 09:19:13 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:13 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100c2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xdc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x346d4a5f2c85d42f, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x9, 0x800) [ 737.714328][ C1] net_ratelimit: 16 callbacks suppressed [ 737.714337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 737.725784][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 737.744382][ T9835] kvm: pic: level sensitive irq not supported [ 737.757310][ T9835] kvm: pic: non byte read [ 737.768833][ T9835] kvm: pic: single mode not supported [ 737.768841][ T9835] kvm: pic: level sensitive irq not supported 09:19:13 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 737.822957][ T9945] IPVS: ftp: loaded support on port[0] = 21 [ 737.876184][ T9973] binder: 9946:9973 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 737.895382][ T9973] binder: 9946:9973 unknown command 0 [ 737.919534][ T9973] binder: 9946:9973 ioctl c0306201 200000c0 returned -22 [ 737.966872][T10053] IPVS: ftp: loaded support on port[0] = 21 [ 738.521142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.527021][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.682341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 738.688214][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 738.843744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.849576][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.855437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.861210][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x507, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:17 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}) ioctl$void(r0, 0x5451) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0xffff) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0xfdef}], 0x1) 09:19:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:17 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 741.117018][T10270] IPVS: ftp: loaded support on port[0] = 21 [ 741.119192][T10274] IPVS: ftp: loaded support on port[0] = 21 09:19:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:17 executing program 1: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0x98}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x80000001, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r3, 0x6, 0x6, 0x6}, 0x10) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xe, 0x0, 0x7fff, 0x650, 0x5, "2d0961b4b3"}, 0x11) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125d, &(0x7f0000000000)) [ 741.180501][T10279] IPVS: ftp: loaded support on port[0] = 21 09:19:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x801) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304ff75613fb31c8f9193f891505311e313b3"], 0x36a, 0x0, 0x0}) [ 741.358528][T10288] IPVS: ftp: loaded support on port[0] = 21 09:19:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}, {@rq={'rq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0xfb}}, {@sq={'sq', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0xe3b}}, {@rq={'rq', 0x3d, 0xffffffff}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:17 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x86000, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x81, 0x0) 09:19:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x401) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000004c0)={{0x0, 0x7, 0xcc3, 0x0, 'syz0\x00', 0x1}, 0x2, 0x8, 0x5, r3, 0x3, 0x8, 'syz0\x00', &(0x7f0000000080)=['pids', 'cgroup2\x00', 'pids'], 0x10, [], [0xfffffffffffffffb, 0x3, 0x2, 0x7ff]}) r4 = openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0xf5, 0x0, [0x1, 0x8604, 0xa56d, 0x80000001]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0xa) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@loopback, 0x7, 0x2, 0x3, 0x2, 0xa58d, 0x3}, 0x20) 09:19:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000001707630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x60ae00, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000340)=0x4) close(r1) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x79}]}, 0xfdef) 09:19:18 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:18 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 742.770019][T10925] binder: 10921:10925 IncRefs 0 refcount change on invalid ref 385875968 ret -22 [ 742.805518][T10925] binder: 10921:10925 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 742.820660][T10925] binder: 10921:10925 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 742.829602][T10926] IPVS: ftp: loaded support on port[0] = 21 [ 742.830065][T10929] IPVS: ftp: loaded support on port[0] = 21 [ 742.841802][T10931] IPVS: ftp: loaded support on port[0] = 21 [ 742.863315][T10934] IPVS: ftp: loaded support on port[0] = 21 09:19:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x3) [ 742.877136][ C1] net_ratelimit: 14 callbacks suppressed [ 742.877145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 742.888626][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 742.993417][T11047] binder: 11046:11047 ioctl 4c07 0 returned -22 [ 743.038583][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 743.044377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 743.050254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 743.056034][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x7fffffff, 0x1, 0x6, 0x5}, {0x1ff, 0x7, 0x81, 0x4}, {0x0, 0x3f, 0x1, 0x40}, {0x0, 0x0, 0x408, 0x31}, {0x80, 0x10, 0x12, 0xfa}]}) write(r0, &(0x7f0000000100)="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", 0xfc) 09:19:19 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4078732feab5d037e626107171b34e175e7fca5a0c57ab3e312506f908f8465b8bd123aa3c7f8d426fbb57a7d0d38212d0a4c77522d175719c0bc70c99eb66dc41c50a6947a05d5436e454d033518ea1180427b86bbf22567ed85b8d5a307f31344e2b017d9d5ef59236259cfc72c86c0604e85aa46b865d9eb594a630af95295ebfcd"], 0x0, 0x0, 0x0}) 09:19:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x401}, 0x2) 09:19:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101100, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x18, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = syz_open_dev$binder(0x0, 0x0, 0x7ff) r4 = dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40e3b31a9889861c6213d220f407f7f2dc9fe1ab55057c0414cd9d9d616c8f7aa9140cd7638e0be0f67d907d6a3c120a1f0d6d3edae9ab2390d92442614047fe19ddfab7d08c9e93698e76eb3f62d2dc4855b934ab946a5dfb7fcfc8cebb61e0cbb51444df58b56f519b1d6bce9ff6d662a073c18bb594e3cee5ae30690bb827f3a104dd52d9277a8986ef5ce43ccdb1e22d6db1a6b08990e2b1d38948922a433719c230abaadf18d9ca1835818f8e478b1007462fb46449939dd48d8ff74900bf0c27716929a6103c4da1852fff95e56c5c6f6ba6ae9df17346a37ad0b7ce2b86e7676f28"], 0x0, 0x0, 0x0}) 09:19:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x89, 0x400) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x210, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfffffffffffffffa, 0x1, 0x3ee, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xc, @mcast1={0xff, 0x1, [0xc, 0xf0ffff]}}]}}}]}, 0x48}}, 0x0) [ 743.830108][T11441] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 744.006485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 744.012500][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x705, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) fallocate(r2, 0x21, 0x5, 0x7f) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0x1015, 0x1, 0xe22, "d42c36ebb57196029f74bde20b7da9a2", "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"}, 0x1015, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04630440030001040762e7000000"], 0x0, 0x0, 0x0}) 09:19:20 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) 09:19:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:20 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 744.141831][T11615] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 744.181906][T11612] IPVS: ftp: loaded support on port[0] = 21 [ 744.201351][T11620] IPVS: ftp: loaded support on port[0] = 21 [ 744.203544][T11616] binder: 11610:11616 IncRefs 0 refcount change on invalid ref 67174403 ret -22 [ 744.213102][T11621] IPVS: ftp: loaded support on port[0] = 21 [ 744.234852][T11616] binder: 11610:11616 unknown command 15163911 09:19:20 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 744.261872][T11616] binder: 11610:11616 ioctl c0306201 20000680 returned -22 09:19:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x3, "1a643c94d3bcaa57b604fae7d74b63fba47f040450a751584b6ef7f283424889"}) keyctl$session_to_parent(0x12) 09:19:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) r3 = fcntl$getown(r2, 0x9) syz_open_procfs(r3, &(0x7f0000000000)='net/ip_vs_stats\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:20 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:20 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='tls\x00', 0xfffffffffffffe73) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x322, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) unshare(0x8000400) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {0x8, 0x0, r2}, {0x8, 0x2, r2}, {}], {0x10, 0x2}}, 0x44, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247fb43a085cbcb5d3f1f18f6556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9ebfc15733674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd200000000"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000004c0)="1356cf5b7f18c0bc3ea00a1158887ae1def895d5bf7f2c40dd57ae7d174493361d9809c28b74a4f738e2802ec6b7ae73ad8f672dda6841bb2e9fb86b7362345125d7deccb16eef400ce3c5ec546b", 0x4e) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x200800, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f00000003c0)={0x2, 0x5, 0x5, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='nfs\x00', 0x0, &(0x7f0000000a00)='\x8f\x97\xbaR\xa3=E\xdd:\x00\x90w6\x99\xb2\x92<\xc4!O\x97\x85m\xfd{\xa8\x84$\x84\xc8\xb3\xbb\xc2\xe9;#)\rU\xa0\xda\xba\x95\x12\xf08\xb4\xd4>U\x9a\x88\xb6\xb2\xef\v\xe1~\xb7\x92\xa6\xb4e\xeb\xdd\x92\xcf\xe6n\x17\xf1\xfc?Y\xa9\xf7)%\x86)\xd6\xd8\xfc\x97\xaa8$`p*K\xfb\xd2\x88s\xebV\xa9\xcf\xc5\x86\xfb\x95\xe4\xda\x9e\xc9`\xfbfG\xfd\x84K\x95)\xa7\n\xfd@C\xf7\xe4\x8a\x89\xd0\xb9\x81C\xfa\x11\x04-\xb8\x1e=\x9aq&R\xd4\xca\x86.Oxy\x0f\xb6\x81\x9c\xcc') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0000000001baa2a4462b413b27485258dfa9e2c5be87261e6a9d8f7a3933b7b5613aca94e34e55be04fa0a0f711076e562d96ce3"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x10) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) readlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000840)=""/68, 0x44) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8}, 0x10) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x7, 0x200000000000, 0x9, 0x300000000000000}) 09:19:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000b16b916365aa176300000000926f"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1f, 0x4d, 0x10bb973c, 0x6}) [ 744.668952][T11928] IPVS: ftp: loaded support on port[0] = 21 [ 744.796622][T11958] binder: 11956:11958 IncRefs 0 refcount change on invalid ref 1806761984 ret -22 [ 744.813246][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.819033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.852864][T11958] binder: 11956:11958 unknown command -1436195951 [ 744.881712][T11958] binder: 11956:11958 ioctl c0306201 20000680 returned -22 09:19:21 executing program 1: mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = inotify_init() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0x8) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x400001) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x80, 0x800) ioctl$TIOCCBRK(r1, 0x5428) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@dellink={0x64, 0x11, 0x310, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x20, 0x50}, [@IFLA_GROUP={0x8, 0x1b, 0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x3}, @IFLA_LINK={0x8, 0x5, 0x7}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_PHYS_PORT_ID={0x14, 0x22, "c16e642357736b87cca91a8073d4"}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) [ 745.318254][T12246] IPVS: ftp: loaded support on port[0] = 21 09:19:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f00000006c0)="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"}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:21 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockname(r1, &(0x7f00000000c0)=@l2, &(0x7f0000000180)=0x80) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x28) io_setup(0x8000000000000002, &(0x7f0000000480)=0x0) close(r0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)={0x1d004, 0x1f004, 0x9, 0x9, 0x400}) io_submit(r3, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)='U', 0x1}]) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x141000, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x6) 09:19:21 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 745.573416][T12375] binder: 12368:12375 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000002c0)="2c25928959e3917c", 0x8, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000000180)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000000)=""/181, 0xb5, 0x1, 0x1, 0x6, 0x7fff, 0x5}, 0x120) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 745.662127][T12454] IPVS: ftp: loaded support on port[0] = 21 [ 745.700068][T12476] IPVS: ftp: loaded support on port[0] = 21 [ 745.736431][T12481] IPVS: ftp: loaded support on port[0] = 21 [ 745.759144][T12486] binder: 12484:12486 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:21 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x609, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x8}}}, 0x24}}, 0x0) 09:19:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r2, r3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x110, r6, 0x700, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffff4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff23}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9d}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x79e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff7f}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:22 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x1, [@loopback]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 09:19:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c401802fd8a68f66ec0f0d794eee045461789d75f1a79e13b2bc78dc5d951303ccb396ed8f3725071692434f8476958f2ab45c2bb52f1931d5d9ae49691a69122158b4b13991cf7d25b6de1c73b1ddbc63d9ed69416d4685680"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) [ 746.285819][T12699] IPVS: ftp: loaded support on port[0] = 21 [ 746.311089][T12739] binder: 12703:12739 BC_REQUEST_DEATH_NOTIFICATION invalid ref -1963130344 [ 746.356830][T12739] binder: 12703:12739 ioctl 2405 3 returned -22 09:19:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 746.546320][T12809] binder: 12808:12809 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 746.688552][T12810] IPVS: ftp: loaded support on port[0] = 21 09:19:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:22 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x80) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 09:19:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000006630440080000000e630c40"], 0x0, 0x0, 0x0}) [ 746.893700][T12918] binder: 12915:12918 Release 1 refcount change on invalid ref 8 ret -22 09:19:23 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 09:19:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 747.087749][T13026] binder: 13025:13026 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x3, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="d3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x7ffe) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) ioctl$BLKFRASET(r5, 0x1264, &(0x7f00000000c0)=0x400) [ 747.164304][T13032] IPVS: ftp: loaded support on port[0] = 21 [ 747.181268][T13031] IPVS: ftp: loaded support on port[0] = 21 09:19:23 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb0"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:23 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 747.440141][T13144] binder: 13143:13144 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:23 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0xff, 0x0, 0x0, 0xfffffffffffffacf}, 0x195) sendmmsg(r0, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c00)=@pppol2tpv3={0x1e, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x2df, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001240)='/dev/input/mouse#\x00', 0xd5, 0x40000) mq_notify(r1, &(0x7f0000001300)={0x0, 0x21, 0x2, @thr={&(0x7f0000001280), &(0x7f00000012c0)="feb92616200591e45806d9cd21e7fd5dea67cd879e1e4235ec62ad1d3d8aa90871e91fb5613c9e0a421437"}}) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_dev$vcsn(&(0x7f0000001380)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x0, 0x86) io_submit(r2, 0x2, &(0x7f0000001200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000040)="9b773ae4412e8b856288c717943a49b7027f17f4941eb3120bd7cf14c44949a38a04aa9dbd6e7af1de6713d91ea6e935a7b3c1f8b5c433c3205910272f334a6122d7c5c26fcaf349415609bf6ee80dca53db16548a9f1f5f9fddb263cec02281d60aed5a42", 0x65, 0x9, 0x0, 0x2, r3}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0xf, 0x8001, r0, &(0x7f0000000180)="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", 0x1000, 0x49, 0x0, 0x0, r4}]) [ 747.502290][T13147] IPVS: ftp: loaded support on port[0] = 21 [ 747.522175][T13150] IPVS: ftp: loaded support on port[0] = 21 09:19:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x3) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x80045438, &(0x7f0000000080)) [ 747.840491][T13359] binder: 13358:13359 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x0, 0x401, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:24 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40002, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xffffff81, 0x8, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, [], 0x20}, 0x9}}, 0x800, 0x22, 0x6, 0x2}, &(0x7f0000000200)=0x98) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') [ 748.113379][T13450] binder: 13448:13450 ioctl 8912 8000000802 returned -22 [ 748.144554][T13450] binder: 13448:13450 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 748.201348][ C1] net_ratelimit: 16 callbacks suppressed [ 748.201356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 748.212852][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @rand_addr="c1089a3a3a559bbe301611fa63527c60", 0x4}, 0x1c) 09:19:24 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xd8, "aefc1b8a9e65fd20d022ec1722f8631355500127f8790bf14e510978dfc987719ceb4ca8ab497750b3928a08358ae6bb98653d7c861cf25c459cb70bc7d9cacbb59d4dd42fa9bfe462fd23c93b19b267a5e57b6fa14f693c7af1d1f7ae0fc270258a1b41650c778091c14038274bed489547f7dad0e5184a9950fd6c3d54a0e6edd64a9eea8327cd551f8d6955a7fdb0ae2051308d177971a32aee8e46f7cdf22dc8b8171eb29db9c47573603a472b0884b9425c3e79b37d6dc389dd15e697544ea16af3d37bf94558914e6c694724c3b1ceb933e9c55cb9"}, &(0x7f0000000140)=0xe0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x10, 0x524a, 0x1, 0x9, 0x5, 0x2, 0x100000000, 0x9, r1}, &(0x7f00000001c0)=0x20) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={r3}) rt_sigaction(0x1a, &(0x7f0000000300)={&(0x7f0000000280)="c4e3256c850d000000006466450f79de4180fe07c10108c4627d59fe672645de99dfdd0000508fa97882738f0fdd6700c462790fd5", {0x1}, 0x1, &(0x7f00000002c0)="6767f2446fc482f91d3a2645d0736c66450f38415932c4625193bc4400000000c482b59defc441c01444df00c4039d0dec0f36f343ddcfc481bb7cc9"}, 0x0, 0x8, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfc57, 0x3ff, 0x8000, 0xfff, 0x6, 0xffffffffffff4dd3, 0x1, 0x8, 0x9, 0xa7, 0x9, 0x1ff, 0x2, 0x7], 0x6000, 0x10}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x7e6, 0x101, 0x209, 0x3, 0x7, 0x2, 0x1, 0x40, r2}, &(0x7f0000000480)=0x20) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000004c0)={0x7, 0x1, 0x1, 0x7, 0x4}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000500)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000005c0)=0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000640)={r5, 0x8}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000680)={0x1, 's'}, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000006c0)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000700)={0x2, 0x577, 0x8, 0x7, 0x1, 0x3}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000740)={0x0, 0x0, [], @bt={0x1, 0x1ff, 0x9, 0x7, 0x2, 0x800, 0x11, 0x8}}) restart_syscall() ioctl$VT_DISALLOCATE(r0, 0x5608) truncate(&(0x7f0000000800)='./file0\x00', 0xdcb6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)={r1, 0x37, "e795d8f763df44f24a2ee4f67456c92b1508a26577f43291fc84b5dc96c0f22dab0c6340f33d3e0e82f238158da2c90df0df6ff01366bc"}, &(0x7f0000000880)=0x3f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="a9c3558a4d931088304c8d54c65ad1279d3ec71916d4ebdfc44613116f3eaab605513c86d1a3b0aaa1a05e1b8114758e13f84aaed246b9bbb6ee83dea3c00628a26e5353dc6c175d620a829e55d1c5cadd192547a48e3a0836c7874054036db764174b940ba2eb50c2cf7b2e0bb970a0b0b4b248ea9bd7d70f8e8b2f800080e8c2a7c1edffc92882e7fd73925864237b77ba4eb19eebef12fdb770f2518b6b7b9b491ffb37ff7fcb4987276e44a2f7c76c586ac9fc7be96c9bc4e5f1507fe4afd9cb0e023bc56e090a872d739c21b31c67a92ad9673c6b65", 0xd8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000a80)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000ac0)={r2, 0xc5, "cc3802aa2189888d215b4ca3e01a844961aaa489c53b86337abf42a7128066eea024276b015fa2132e7531008442c378cfe0bc289d1ada390547946df1523f4981c038f2f951cdeef468bcdb74f64df9e98cda5d12b99eec0494d6c92750e654cdbf33c9e72620b70604f99f91131f1c9d587b91368c1f3c1eb85920c35085314c4574ba7f7e1190ef058b77ac4d48ecf904985171afd5ea84d73605119b8b45cab0adc54e574535565866e0bfb94a53a1f8f9f78706b16d49aa53f88e16737007d3f231c9"}, &(0x7f0000000bc0)=0xcd) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) accept$unix(r0, 0x0, &(0x7f0000000c80)) ftruncate(r0, 0x100000001) syz_open_dev$amidi(&(0x7f0000000cc0)='/dev/amidi#\x00', 0xffff, 0x400400) 09:19:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:24 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb0"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 748.743991][T13784] binder: 13780:13784 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 748.799767][T13816] IPVS: ftp: loaded support on port[0] = 21 09:19:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:24 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:24 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0xfffffffffffffff9, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000140), 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000006c0)=""/148, 0x94}], 0x1, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') ioctl$PPPIOCCONNECT(r4, 0x4004743a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000003c0)=0x200, 0x4) fadvise64(0xffffffffffffffff, 0x0, 0x10000, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) connect$netlink(r4, &(0x7f0000000600), 0xfffffffffffffe72) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20040500}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0d0002000a000000b51ea54abfc150ee004fd6a15e8ef9ff0f0004000a40"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x200400c1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) recvfrom(r5, &(0x7f0000000480)=""/155, 0x9b, 0x2000, &(0x7f0000000540)=@in6={0xa, 0x4e22, 0x5, @local, 0x5}, 0x80) fchmod(r6, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, [0x3, 0x0, 0x1, 0x2]}) io_setup(0x7, &(0x7f0000000680)=0x0) io_destroy(r7) bind$rds(r4, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfff, 0x81, 0x3, 0x0}, &(0x7f00000005c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000640)={r8, 0x8}, 0x8) [ 748.951085][T13895] IPVS: ftp: loaded support on port[0] = 21 [ 749.005939][T13901] IPVS: ftp: loaded support on port[0] = 21 [ 749.012059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 749.012112][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 749.042422][T13904] IPVS: ftp: loaded support on port[0] = 21 [ 749.169367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 749.175195][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4018e8f10d092c2495eaf1b176241e68a61251cec713a1cafe976618b26f73c4de3b3135fc7f086ab6a7c6314ff698da2bbc2523ff8424b93b9e883c5fe3ed46503c05da87ee23dc096c3001ed2a98a116d25c3ea67cd876e276a97cbca398aff441ef68bd772d9ad1c26df642dd51d672a5702365b434040a131b93a67c9f47f0034c1dbc06523b9fbf10e32f23720620ba3954a97c6707bd68e0b7732b6f249fdb4fdbc7b9217717aaf93a58662dbfb0f02f66bd1b29c0e54cf5a4eae8f1f9eb23c9d0ebc09c9c72709c68e5fa49f7ef84f90f5d4561c0158cb68f65557230c88a12"], 0x0, 0x0, 0x0}) [ 749.341122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 749.347070][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 749.352959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 749.358736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 749.406165][T14118] binder: 14117:14118 BC_REQUEST_DEATH_NOTIFICATION invalid ref 233957400 09:19:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x7c, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @release={0x40046306, 0x4}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x28, 0x40, &(0x7f0000000040)=[@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x2, 0x2b}], &(0x7f0000000080)=[0x0, 0x38, 0x0, 0x30, 0x20, 0x20, 0x20, 0x20]}}, @clear_death={0x400c630f, 0x4, 0x3}, @acquire_done={0x40106309, r4, 0x4}], 0xc9, 0x0, &(0x7f0000000200)="6edcc8493a33bd85f8a9a61dfde327224728b8b1cbe97eee0e58b8faecd1d7713a95eeb6e3ec56ed5ae7b93e2fc5790aac9ea074c199c09aa76e4e9649ab1cad81eae613b0c136215720ee2992ff33dc67e71e7899a8bf802a8b1ce4ff6c776f1f592c43dbcbdd6ef0cbf8d89206ed5ae8de52eda2785223d7b5b6e9eb7805c68a7bd3f60abb11b44d91f8f8b3862577df534635c7257eb48a8e995982ab93a2c918d7631e4db2f15e0d6f68b95c437337b7d57fb6362a5a8e2e2d961d0e5ca9fa51cb06a315e3a380"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 749.643888][T14121] binder: 14120:14121 Release 1 refcount change on invalid ref 1 ret -22 09:19:25 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000340), 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xb74, @dev={0xfe, 0x80, [], 0x20}, 0x3abc8769}}, 0x24) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000200)={0x7, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) [ 749.706440][T14121] binder: 14120:14121 Release 1 refcount change on invalid ref 4 ret -22 [ 749.789142][T14121] binder: 14120:14121 ERROR: BC_REGISTER_LOOPER called without request [ 749.817267][T14121] binder: 14120:14121 got transaction to invalid handle [ 749.841744][T14121] binder: 14120:14121 transaction failed 29201/-22, size 40-64 line 2994 09:19:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:26 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r1, 0x0, 0xc478, 0x5) fallocate(r1, 0x0, 0x0, 0x4005ef0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x6a, 0x71, 0x10000003, {{0x80000008}, 0x4}}, 0xff9c) fallocate(r1, 0x3, 0x0, 0x8001) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18}, 0xff9c) fallocate(r0, 0x3, 0x0, 0x8001) 09:19:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 750.256534][T14440] binder: 14437:14440 ioctl 80044327 20000000 returned -22 [ 750.306981][T14440] binder: 14437:14440 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 750.327382][T14453] IPVS: ftp: loaded support on port[0] = 21 09:19:26 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:26 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb0"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:19:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463040000000007630440000000000e230c40"], 0x0, 0x0, 0x0}) [ 750.507206][T14547] IPVS: ftp: loaded support on port[0] = 21 [ 750.589817][T14552] IPVS: ftp: loaded support on port[0] = 21 [ 750.607986][T14566] IPVS: ftp: loaded support on port[0] = 21 09:19:26 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x5) [ 750.655276][T14611] binder: 14587:14611 unknown command 287492 [ 750.701009][T14611] binder: 14587:14611 ioctl c0306201 20000680 returned -22 09:19:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000007630440000000000e630c400000000000"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={r4, 0x66, "5764f1cf6177a9756f202fd6de1fa15d79520f1cbe4943e00db0293ee864c4e6dd57adc18a3508bb00dca55ded346afa8acad487f6e6fae0eb4f9257431875f79a48e4ad94fbaa65b2c78587ebf3ccfa432b0cf5b8bddefb9245d0d04bd9c541220e9852525c"}, &(0x7f0000000100)=0x6e) [ 750.979989][T14672] binder: 14671:14672 unknown command 117440512 [ 751.004156][T14672] binder: 14671:14672 ioctl c0306201 20000680 returned -22 09:19:27 executing program 5: accept4(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r1, 0x8}, &(0x7f0000000240)=0x8) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000000)=0x6) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 751.280357][T14778] binder: 14777:14778 ioctl 40044591 20000000 returned -22 [ 751.303112][T14778] binder: 14777:14778 ioctl 4b63 20000040 returned -22 [ 751.332530][T14778] binder: 14777:14778 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f0000000100), &(0x7f0000000500), &(0x7f0000000540)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x5, &(0x7f0000000280)=[{&(0x7f0000000180)="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", 0xfa, 0x1}, {&(0x7f0000000080)="9bf485d09c3790", 0x7, 0x8000}, {&(0x7f0000000340)="6dd70fd4b7fe01436eabb04db9941b52ed434495b1abe9f62df37a47adbb28bf048816c48b389510432b4823eeac8ae3466a09d7f7daafd334faa8370547212f92ae0944f18d563cda56df66003496074341eeacc39283684adf366eb51173403dff3de0c4973a2b57ab0a19b6bf751125e2e9f672125942d351f44948116fe7cee2850e1d349393eec7f8c262", 0x8d, 0x5}, {&(0x7f00000000c0)="945b0d36c30c6447a394685e4499d16ecea955cb77b89752e864a4b979e5", 0x1e, 0x7f}, {&(0x7f0000000400)="c9f6a17f992c6c37f33fc5d517571b4685a9e73ce2b155223726f6037bd58ebe18efeab686a12df5802bd9a7365bfb9bf47d3db5598a1c23e7038647f2e45738d1337e3c39bd79294b469989c8f7125279b1d19ff9e37c966a886cf2c29cadfff5d1db2258247a558312977414e3a2eae715c4653b666833c4463dcaed5cc5a4909acfd09f14d0d17a42233f702b3ceba80800122f258f02e9f88209a3e0b7a7ba240faea2940373e25f8f65e7b563f6d488186b02053683d35ff138e56ad64b30813f00a7d67bf1bdd3bea7a45ceb8cc0aa39db071fc71313d2bdc812b78146fe", 0xe1, 0xa3f}], 0x80, &(0x7f0000000700)={[{@usrquota='usrquota'}, {@discard_size={'discard', 0x3d, 0x5}}, {@discard='discard'}, {@errors_continue='errors=continue'}, {@noquota='noquota'}, {@nodiscard='nodiscard'}, {@usrquota='usrquota'}, {@uid={'uid', 0x3d, r4}}], [{@fowner_eq={'fowner', 0x3d, r5}}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$'}}, {@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 751.585051][T14965] JFS: discard option not supported on device [ 751.608688][T14915] IPVS: ftp: loaded support on port[0] = 21 09:19:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb0"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 751.637380][T14965] JFS: discard option not supported on device [ 751.658987][T14965] jfs: Unrecognized mount option "fowner=00000000000000000000" or missing value 09:19:27 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 751.762371][T15039] IPVS: ftp: loaded support on port[0] = 21 09:19:27 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 09:19:27 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 751.969959][T15103] IPVS: ftp: loaded support on port[0] = 21 [ 752.003433][T15107] binder: 15105:15107 ioctl 8912 80000000 returned -22 [ 752.028866][T15107] binder: 15105:15107 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 752.042491][T15108] IPVS: ftp: loaded support on port[0] = 21 [ 752.060248][T15107] binder: 15105:15107 ioctl 2284 0 returned -22 09:19:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044074bfe52ccd0000000e630c400000000400000000000000611785cccc405be0d50000"], 0x0, 0x0, 0x0}) [ 752.352094][T15214] binder: 15213:15214 IncRefs 0 refcount change on invalid ref 753254260 ret -22 [ 752.384935][T15214] binder: 15213:15214 unknown command 205 [ 752.414519][T15214] binder: 15213:15214 ioctl c0306201 20000680 returned -22 [ 753.364399][ C1] net_ratelimit: 14 callbacks suppressed [ 753.364408][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 753.375952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 753.525578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.531390][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 753.537264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.543020][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 754.493580][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 754.499389][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb0"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8080) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000006c0)={"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"}) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044000000000076300000000000000050c40"], 0x0, 0x0, 0x0}) 09:19:30 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:30 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:30 executing program 1: socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0x5}}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x0, 0x203}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="01800080000000f90000aaaeffff440d00559a71ad00000090787f000001000000000007b151b814a72220ebbf598e00002ccbaaeaf09fffba1a19c33144380c36fa4957b0ce290fd2969ad31d3327aa21f7d2e6efe1d15d27052c0b5009bc5f2800ec000000000000"], 0x0) recvmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 754.865561][T15330] binder: 15322:15330 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 754.882934][T15329] IPVS: ftp: loaded support on port[0] = 21 [ 754.898185][T15323] IPVS: ftp: loaded support on port[0] = 21 [ 754.908872][T15331] IPVS: ftp: loaded support on port[0] = 21 [ 754.914922][T15330] binder: 15322:15330 unknown command 25351 [ 754.922296][T15333] IPVS: ftp: loaded support on port[0] = 21 [ 754.937335][T15330] binder: 15322:15330 ioctl c0306201 20000680 returned -22 09:19:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/ip6_tables_matches\x00') r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04631740000000000740000000000e630c409e1022c9fc2513ff33188c62e052cc79a574115c0275015d7c034eece0b53f0d000850afbbab65568e47eeb6e0cd362b06f33fa19942964bd7a242ba02ead351e64468d691f8990509eebaf564dec5d76bb741c6fe3dd899bb4884ca31ebf02ddc745e4b04329b0624738e1c2543dbcc35cb7ef4ed9a288ba20a516dc7328ed6a9420b9da66f13cb86c082593d46a59dab1fcf9fec2d"], 0x0, 0x0, 0x0}) 09:19:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x1c}}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x2, 0x1, [0x1f]}, &(0x7f0000000140)=0xa) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), 0x4) [ 755.300391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.306186][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = open(&(0x7f0000000480)='./file1\x00', 0x0, 0x80) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x7, 0x0, 0x82, &(0x7f0000ff5000/0x6000)=nil, 0x100000001}) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r7 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000540)=0x8, 0xffffff3b) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r4, r4, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) signalfd4(r6, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x2000, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x200, 0x0) r9 = socket(0x0, 0x7, 0x0) ioctl(r9, 0x890f, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) [ 755.569187][T15656] binder: 15654:15656 ioctl 8912 9 returned -22 [ 755.582973][T15656] binder: 15654:15656 unknown command 25348 [ 755.631115][T15656] binder: 15654:15656 ioctl c0306201 20000680 returned -22 09:19:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0xfffffffffffffd64) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vxcan\x02\x00', 0x131) r1 = dup2(r0, r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can_delroute={0x14}, 0x14}}, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0x0, 0x4, {{0x0, 0x3, 0x8, 0x4, 0x100000000, 0xffffffffffffff01, {0x5, 0x3, 0x10001, 0x6, 0x0, 0x2, 0x8, 0x400, 0x2, 0x0, 0x80000000, r2, r3, 0xfffffffffffff474, 0xfffffffffffffff8}}, {0x0, 0x7}}}, 0xa0) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14) 09:19:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4064570adc5b11deaa6a7dd0875afdeff449abb8574d6a41dbb724a537035c9fbbe1ef95b04d6b83170bb7e1340d29b4496a35b459856b7259ead978cc31685936b32cc4e7ffefb56822724fb40a4c5945e82cc00c9835110e3c1b554135eca36fa264bd58b9c3f106208e76d2"], 0x0, 0x0, 0x0}) 09:19:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 755.967095][T15865] binder: 15864:15865 BC_REQUEST_DEATH_NOTIFICATION invalid ref -603302044 [ 756.070288][T15893] IPVS: ftp: loaded support on port[0] = 21 09:19:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb0"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:32 executing program 1: r0 = socket$isdn(0x22, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x42, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0x2, 0x100}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'rose0\x00'}, 0x18) close(r0) write$FUSE_STATFS(r1, &(0x7f0000000180)={0x60, 0xfffffffffffffff5, 0x5, {{0x4, 0x2, 0x80, 0x8, 0x7, 0x7ff, 0x100000000}}}, 0x60) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x100, 0x2, 0x8001, 0x0, 0x9, 0x3, 0x6, 0x0, 0x182, 0x40, 0x2f0, 0x101, 0x40, 0x38, 0x2, 0x5, 0x100, 0x7}, [{0x5, 0x7, 0x2, 0xfffffffffffffffd, 0x81, 0x4, 0x8037, 0x4}], "736f0a2d5a91b1f7b89dd68988a15ba952049611bb8ec53dfecdeaf0ad302f81d404aa434799a94dcb860a1f9e0dca46f9cc417557e0f428ab118aa9a1e5df9420fcf3da9a4e3b5b392f858064dde15072a5bff1310fc2474de886e70971a5f08f5df9ea7a3f6374fcbd1bcad1e69233ffaf74d048de74f1c2b9bcf0e73acf36fe059ce335b5cc97a30000c90195c15a3c2e77290539b03de7f9877d", [[], [], [], [], [], [], []]}, 0x814) rmdir(&(0x7f0000000140)='./file0\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0x1d0, 0x1d0, 0x1d0, 0x110, 0x0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x1, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7fff, 0x3}}}, {{@ip={@remote, @multicast2, 0xffffffff, 0xffffff00, 'bridge_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6e, 0x0, 0x3}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x4, 0x10, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) setrlimit(0x0, &(0x7f00000000c0)={0x6, 0x3}) 09:19:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0463044000bfff374ffd00000800002d520040000006000e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 09:19:32 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:32 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 756.347166][T15977] binder: 15976:15977 IncRefs 0 refcount change on invalid ref 939507456 ret -22 [ 756.385296][T15977] binder: 15976:15977 unknown command 64847 [ 756.413575][T15977] binder: 15976:15977 ioctl c0306201 20000680 returned -22 [ 756.417252][T15993] IPVS: ftp: loaded support on port[0] = 21 09:19:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400100, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0104000000e08f661241c6000000200024001000010869703665727370616e0000000c00020008000200300000006fb02a27ceeab51045858f8c509bcb220293187e3d10b99077e0b729935efaad8b5213be3896f8639a61c96ab74b0bdc202de12e4906701e"], 0x3}, 0x1, 0x0, 0x0, 0x1ffffffe}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) [ 756.454994][T16067] IPVS: ftp: loaded support on port[0] = 21 09:19:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000180)={'ip6tnl0\x00', 0x1, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c4040647dd40f4df87537d58d5a0b05d8efbd6ce8dc1403cdd3f83fdb7b40f75a939761c23d623c942f2e3dc51c0bd125fef8b06526a57a0c4e"], 0x0, 0x0, 0x0}) [ 756.633564][T16194] IPVS: ftp: loaded support on port[0] = 21 [ 756.728101][T16264] binder: 16243:16264 ioctl 400454cc 0 returned -22 [ 756.766456][T16264] binder: 16243:16264 ioctl 89e1 20000180 returned -22 09:19:32 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffff1924, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) sendfile(r1, r2, 0x0, 0x16300) [ 756.929063][ T27] audit: type=1800 audit(1552727972.859:181): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17318 res=0 09:19:32 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x24081, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x400000000000) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$tipc(0x1e, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000000a39eaca2346408887c1846b361bb9995339c61f3ea89000e630c4000000000000000"], 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) [ 757.071935][ T27] audit: type=1804 audit(1552727972.879:182): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir345632221/syzkaller.7mWCtQ/836/file0" dev="sda1" ino=17318 res=1 [ 757.141688][T16405] IPVS: ftp: loaded support on port[0] = 21 [ 757.226305][ T27] audit: type=1800 audit(1552727972.889:183): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17318 res=0 [ 757.324016][T16470] binder: 16409:16470 IncRefs 0 refcount change on invalid ref -1560281088 ret -22 09:19:33 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffff1924, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x16300) [ 757.370332][ T27] audit: type=1804 audit(1552727973.186:184): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir345632221/syzkaller.7mWCtQ/836/file0" dev="sda1" ino=17318 res=1 [ 757.406953][T16470] binder: 16409:16470 unknown command 883076254 [ 757.444294][T16470] binder: 16409:16470 ioctl c0306201 20000680 returned -22 [ 757.485598][ T27] audit: type=1800 audit(1552727973.186:185): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17318 res=0 [ 757.630745][ T27] audit: type=1800 audit(1552727973.474:186): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17318 res=0 [ 757.794157][ T27] audit: type=1804 audit(1552727973.484:187): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir345632221/syzkaller.7mWCtQ/837/file0" dev="sda1" ino=17318 res=1 [ 757.949977][ T27] audit: type=1800 audit(1552727973.484:188): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17318 res=0 [ 758.688406][ C1] net_ratelimit: 16 callbacks suppressed [ 758.688415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 758.699892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 759.495125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 759.500906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 759.656408][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 759.662226][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 759.817881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 759.823714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 759.829543][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 759.835323][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:35 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x27}, r4}, 0x14) 09:19:35 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x1, 0x2) bind$netrom(r0, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) lgetxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x0, 0xcb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x6, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48, 0x7}, 0x0) 09:19:35 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 760.049172][T16720] rdma_op 00000000e7ed2188 conn xmit_rdma (null) [ 760.053365][T16727] IPVS: ftp: loaded support on port[0] = 21 [ 760.063867][T16725] binder: 16724:16725 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 760.075907][T16722] IPVS: ftp: loaded support on port[0] = 21 [ 760.077254][T16731] IPVS: ftp: loaded support on port[0] = 21 [ 760.089083][T16735] IPVS: ftp: loaded support on port[0] = 21 09:19:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04630000000007630440000000000e630c400000"], 0x0, 0x0, 0x0}) 09:19:36 executing program 1: socketpair$unix(0x1, 0x1000000007, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 09:19:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffdd9, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff92bf02e9181a978d0ddf72a9542e88729baac02e1f774334ff4bc08e100b89240b17b8624e5ac5bfae4d4b8e1c36b559f5e050a737d44cb7b4dfee05b83d4ea6fad6a23ee56c5864ab83a972d952727849881b51689a12fc563eb062cd64443d1e9ccb5d867aa883e0a6d56c76cabd78f24ef68d6714797dfc9b9a1afd83aeb1b3d6a7f343bf90fbe0f3bb2e68be3dbbec39920b2aa48fcf76b7049253a4905c3ff07196c14b31a1685676c82a29f371aa9d9d696f4b2a6860f56a2c21f01647a40aca62c8962f2b607ceb1998ccc5acea8fdcdafbe72d648ab8424f84977fb493de00edfc69e1e3d69806d266ef928274fdf47424998c"], 0xfffffdf4, 0x0, 0x0}) 09:19:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1414aaac141458fb00000006000000e0000001ac1414aae0000001ac141411ac1e00017f000001"], 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 760.526663][T17049] binder: 17048:17049 ioctl 127e 20000000 returned -22 09:19:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x401, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x0) [ 760.802928][T17255] binder: 17254:17255 ioctl 40044900 5 returned -22 [ 761.044013][T17458] IPVS: ftp: loaded support on port[0] = 21 09:19:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:37 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:37 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:37 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="9b"], 0x1) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0'}, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) shutdown(r1, 0x1) [ 761.225854][T17568] binder: 17567:17568 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 761.319290][T17569] IPVS: ftp: loaded support on port[0] = 21 [ 761.336936][T17575] IPVS: ftp: loaded support on port[0] = 21 [ 761.355787][T17587] IPVS: ftp: loaded support on port[0] = 21 09:19:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x2c, 0x3, r5, 0x3}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)="505d156ebf233d944b414e0a6d33", 0xe}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000340)="bca69470f4492a3053c2aa82951fd589be4795cc934a67e66b71ace794694f03d8a1a4bed39e02e4e10de5ee0ed530bee9f029cb72cb495f9ed368df5eb4d79bd567a6cef37355a281e20cabe4d107e377437b54473a991677cc1e9845ea8926dadcf8d692ce8af3f45e7cba92aa9e9a41330131052d320f64c00612cd87390088db5479f6ecc97403da938bf68875f8ce4aacc1927cc88019d1ac7f38079e51a24bac884a607a37dadbefaf44ab", 0xae}, {&(0x7f0000000400)="02d5c1084bd4702693112d0ed717c72e4d61cbdbfb84257a7977da7b646432397162c7c023e2280166bbbc5cd664a086ea8602dc63fa8b2da8a7d581fb40", 0x3e}, {&(0x7f0000000440)}, {&(0x7f0000000480)="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", 0xfa}], 0x6, 0x0, 0x0, 0x4}, 0x80c0) r6 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r6, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$ppp(r2, &(0x7f00000007c0)="11141ac9d6eaa52221deb69ef5adf1bcfba0f876eab9a17b606a86ecef68998444651522ba386651805610b1a2b706659e6b9ea21dd37da8af2f4a64d54486de9daa2ed85a8d3c097e441ff8732f95b71deefd631664047d730ea3a037ab453e88a0d6900aacf382c31584b830e5dd4101053dfaff0ca09459f3b12d9dc0a1d3e52cb7e38cbea504fa0797ec496e6cc7d0b14b2a5357bc7601717f5f25f7d2da6959d6195b7b1ee4baa29d30f38c6afadcd53decb43b2be06923400111681abc4009c92ed40c", 0xc6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000040)=""/153, &(0x7f0000000440)=0x99) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c4000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000006c0)=""/212) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r2, 0x7, 0x1}, 0x14) [ 761.381784][T17646] IPVS: ftp: loaded support on port[0] = 21 09:19:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6000000000000000, 0x101000) write$P9_RREMOVE(r1, &(0x7f0000000140)={0x7, 0x7b, 0x2}, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x403f8fc79d56e94e, &(0x7f0000000000)="be2c2862889939ecbc416c2c0670498be0a9c726aff05c1840ea55e44351b1aaaa4ae4f7a6c703f35bcb7399b470eac3aa41729381ec248c055a", 0x3a) [ 761.506298][T17778] binder: 17762:17778 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 761.535265][T17778] binder: 17762:17778 unknown command 0 [ 761.563313][T17778] binder: 17762:17778 ioctl c0306201 20000680 returned -22 09:19:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) kexec_load(0xacf, 0x5, &(0x7f0000000340)=[{&(0x7f0000000000)="7b9cd5a2cdb0812abfda9b10b78797831240c1e947e4e0e060d03b2f89de3fe579046c0738ddece3f9f58c36d3bd63a9692840ecda453a6e0e186ca89cca58819ba0d557ea5d0f03380e0a5cfc64dcef96e36ea794cd2cc4af3983388606ef2da0a8a3535ae4fa27efc6ad55db7c3aabfe5b3ad38b061973fb024f1f588ad61ebe7208898fec78516f78ce718d94c047b9699c4572c57affe7b08b623c57bfd32d226f2b4b1c6274327629e33e6ccd061c2536e0dd5a6721b0a05612c00c2a3a0251fb0f3543fb26605fd1d01cf32f453a025db1ef2ad02e1856d6270c3750f030572ec6faf358c009b5b2475e0bf8b7bac9290f16c453", 0xf7, 0x0, 0xfff}, {&(0x7f0000000100)="c441278a2189561e945c117b4c1ab08f6d95536987cac36bfd3167695a0b9a675b3904fb688c2e0954b0dd9adfe53c63fe", 0x31, 0xfffffffffffffff8, 0x9}, {&(0x7f00000006c0)="8cd8e026a958422cb74aea7d7ec509dca2aadc90f67025d1ea16901c45e3401c6492649205fa99240605a107df6daf21dfa4db4352c20c7ec4e9bd4491de786b27864351182d8ec4d839c47aabb5d45d68b57b4be81949e563881208f42bcea55804dff709df150a6ac3c98ed816e4dfc42631b0bbcd13d494fd61e61bfd5181fa7b66bcf8124f88fae44eca8b6f59fac52ba4ec60e923c47536d499663de9db3a08f62eb37004a960821b8efa6675e88714a43bf45dfd03b5bee8f365ec68e767e9b1e9aa7f36a9a68de53263f2572a37371af895f273b575e1129596cd91db7111836ad7ee2a82e245e24fb7d404994e980461370e42e81cc859eabed31e9bf04d571f3eb8a563b15f435e95763a36c2b37820467d9da95c83360474fa61de7e705a5ebab64bc0e2a19e289f57240105ac76447366cbd45490e3e1ed59711b291781c8274bb799b597a621edfb06b85802cc7ec02646fb6d75041cfc4756aab452128b4e212754425fedeff78a0e3c4dedd20bbbb9189842f1cab8bb78bf87321f0b2cd8ab94c1296f7a9b9219588c5485828030f3159fa7536e25e949e1618454171d3ed062f23602ca94e11fa68520adcd702d9b20900b9dd9da622889e413d23107b026d426e7f32bb5fa82119fc74544180a5a208cbb669a106d664452396d7a161ef551448591d541dad1d0ee8d613c5398ef4400aaee7d3340e82b3360488b5d2240c3f42f7bd352a1799d47ab0612ab9e04d274a4e0c82f1ed26402e5f377b947d19f27007a179316f0477b8e0edef0b2243d15844d9ecf8f09b2309c6c07af486fce57025de493be873856578d1630a35d290a5ea9a876d0dc269390392875d70353fd4558f283e10523f95491e208fb74f2126bd37b32d337a673ceb180d70655dd1f9de3f9a9256a999e2c0e635defe42a58aae7b40b790a85801298d79aaebeb8edd96cce1adbbda74917009f003787b5c57a490abebfafc5ff89ffa4d75042a58b54d42bb1f046084e0b4583ecd4c3fa682448d946b34b030c1b2e013c2b5ae31b700a312580c761097dde59dbff41bac67a592b3b7fc3ac0bf7848ff0c49d98a583c57d7799b5d0b347058480bb1f4479b3176e393f0a6104305cf0bc2bd4ae78018a132b2275fd9b3900eb0cabbb861409120fae61a7cbb98d1179b5dedca6205b669d56a494a200c8a1ce3fbd8a57eb1f5c47a367dc2329a4afac55e949c1db69a2083dec0a13e94608596ff374acaf807c5d677e43e3a269aff09dbf4734d5b309fb1b8af739ac1f45f5f43ed12a31af81c4e6039786c3b6add68ba9a67ddfef5008a20780c3de82df1797c1f4ba2663de88ca6131675b9b298bee215fdcf82468380148ceec12ed5b0b609068dbe77d1e8ce72aafce3b6e16715b98688424d89fe36b600bd858919dae313040f98a6fdf2f1a6f6129e55d95fc97ab6234f0c844ee0c5b2548ccb8c5f5bd8be52ea4425ca0dfa02399e486780c34a690462b6cdecd69bb51aa28497575fa164b616adf9b9b809266c73708b3160a02fcff0ba5de54ea7f3196591aca6512a523dc510fd899dd3ed0c7034953fef17f817f8666f3afe91c0424cf2fb65a4b5abbbd65bc31d12610500df9dcbdc2a140929bac29980f7357c6be71b1489fa2c1fc5db92252d98b243c27d51927f43e630d292d8f9414836e3beede50ccde7ae8d3b0dc8997c7d87f2d135317aa55ee9a14f1ff7e55616acf852bbced7d328762147147cba09a0c39ef41bbc36e3312b56e8879cb76c8b152c34dfa49d2746040c2c12f0b8caa5d76e68cebf068375cf0e82ed2f73df90ad816ab40e5fd96331f6127ae39d203aebb2025d2cc5c9c4500307183786e0e9026a971a52a0a65e0f8a1f86a73462480b5bf5dc5574bb1a055f967d17410c01b47f36f4515628e164cbcc37a65d11ad3ae2b3c8dddaaba2aaf3ec85f168c5033920f840f08cdd3ba10c4fa329ed52ceff37d09552b2073851f0933bef0cf5df39b0dec46f9c8c96d5cc7a7a4bf3946701b237f4b832afd7d7e681cb81fc0a97e1fc73cef76e866b2c8baf8488ad6387c609164928dfd21c7c3a9af1a7f91d5b4e393175a5c7019486347c3717cdbbce0adb228956bdd1af1ce96e92551c6bb2403739b6100b96272e3e0a038fb8f5ccb49d88703a7205d1e07bea1b07f132eb1dd39c40eca0800f950aa0f91b17f075b3c4072476971ebb792fc594c1672d44b7ca833132ed7bd2daedc17eea105553840f4e4e0bc9c65fd497dc5d00957b2858c8d17ee62057de2e14f84d6b1a42b307d70d9cddb12fa3a7880ad8bbf53dd75f9f6f8f552d267450fdee20bbcb66cf1572cf40b8814017a4a56f067106b3ee8409ea653caa11a89d18173135a8b4fef5a6244f5fa10d3cc6a5bd34c831424c5a2b17c9916e93ca3a05bb92c91b99de74ee7ca854375d9e63347415e3c39bf548184609449e7487c83800e6b4b51b7e505f08cf4171e115adbfef4ed098b4f14a66c24d9dd0a7fdced2b500c772b51e0602b48b588f5f7c57f0c0d2fcc0f13ca0637b6d7d0859a45f2b89b2a4847ecaddff18ddbb81ff69b0d41aa8de712ead7e167fc60c49bf84dcc034424edb17e0e3abe63f68162ea739b3655e3646ab7a7fc8eee2db231fda6c00bacd15db4b4286b187808579a616dcb0f227b13abaf034728b0bfcb71451a9ba02ee75ec20299961fc9c452ef17687581615b7acb47929ac9d21e15eef5fa1b43c164ae35ebf4a79d63fe9e7c4270833853e8231ba697e2caa85a5889261f892dd6381e9de8d2f1df3f5a44d013ece169bbcfb8e2ec30f7d3f7d3531730e9aa2e7adf346828b3d28ada8cb4bc6d6885b73ffe3aa84552f2f13786bce18c6d2182a3b4274ffc6a3725b8a804da88fe440ae46fcc21a971a79c1abf9deea7c08077559805058c735c6bca44d5f24d5deea1d31bbb1dfbd040f74cea4cd26859e3d1b32668a4f3988909fc673ddf8dc6e4b52895eba8d58281d61f64b0e3d4cd533b6f5072c13500808492964e0f4f046462bc2ce48b669262302643105893b217daa1d3fb1b07ec43b96f1a30b629d816f4ec4559330e7e41c932f79c0f1cc6448d6f0360cf0488867ea98eba7bec3f77e114cbbb60ba7781bf8cc6031c5e23bf080f048d4f4b2408bc98846c52c39f9f36b9968cfb12e2c9e9d5912cab1523cbc475788524d3435debde7fe855917b409b968a4a7251695179dea42ecf463ee9f8ca998a8a989fb537e731978faef6c9f5cf27c84b159f1bb4bfce91417e295afd3675286a08f75872225e3576d5db08c1d691d1c5590df8bdff142b1d6ed0defd0c1e6c730200c1cdeb64085d2d4358d7bfbcb2b8b89a05aee3d972bdbb7bf134c2a0c13c8935adca8ba859a7a853da616a3c60868b3c37365b631ce85541bd008d0473d0394684ef0bde6207f3a1f4c26788e6e5f2e854401a34b62904f5dc5b19d9f6d841483da5c0b35a8682b7fc9a70d46d1777001675ac5cbfb721ac4a23b271807089268ffac8e46165892933e18423af3d53924db97b63f5b26d5f3fce1d17588e95a90192ae278144138ba42c1fef43cdb66e0c3009f36ede4fadbe01ff44bf3667f906b5777c21703fca773ce1eeb430227a6a5e923fbabeaf3724a02dedc4b01e067f5b0e049ea52e609316cdef58159a00ca4f4675756560800982a10afafa782c98d24ab4d19986f3871dfc47c7b2c5f5f2f854a84695cb4fc6fc8be60caf22f0c0bd56e8b4fbbc0086d5a48ec16aae31d2c88a2896016829cb2ff97041edf9e8a7017b3055694644e3901b48226fa0793dd0d958b1cb61d673a7e8d02cd97e7cf150a7571443efe9ab05f10482cc5ac31f5d0970962e54d6f36cebe395a317f785a90cfb6c0fbb860f065097fce603eb57b53ed83cf418a104d4b47f3fb629974cbcd3ac191f8a83532c14774b660dd672348a4b369d0a5818133080bf48553dedb6bec36f5a1dc68fd2cdbba57aade9b8937c7b997f94ffd286416e3dff542a3702e2fe917e5d4e6ddd36b9e9d793e7f054ec3bb0b4c8f924098e53132b59f8eba9cf2eca07e0a01b9f0dec7d4b64caa67677788317d770ec52b686d25f517b2dda2aeb38f48b954496235432224e3ea4808ce829332517febd4bcdf8ca6206a3f526bf9f6cdc70eba1c0cb359bfbf2a5a716a74ec43a2541f0af87bc257062472935e2b5de0fb9ae32649a88e573832ad52a1a15d0bfe11e6da5b2410b02088daa0562183f822e375da84c6921df4f2ee00c28e4c15179869c0bc467352d88db6394a0e030960c636b5d9a65319f7dd766f18ad51e1467df6d050a508daf4a7b32e8e4d2b95507f289e89e9737496cb299127e7a900768ea41434d2c2ea13ce38077dde122a9c7e056aaf1ab9191a1e3b265d8b1fedd9d1c8bf48f477e8095799f7b6d7fc43f6d2644f9d220ca9a6628f59d3d0d1ab59fa21be4cd22e4446a7f1ef398e8c3e24eaccd406ab7f4dabcd9bf19e4a9e72baf367184e8055029ce99b3842b8d5793b82dcbaca3e293ca2d56ea6b9c2500ece6f38cacbac6adc793c4ef5ce740d4b7c2423e377639821b635a9bd17b77812dd5b63a18704aabd5334180bddf16d2d045b7c2fc671cef3cd4d018d39c6380694d5e31cde93963098751a91162922a053409a1e52d3308af6b59b5bb456c410709b34c3c8a74e4ae90ce7fbe06cec508c06cd07188d7ab50cea785a27f13278f4873dd6d7d41af2fce15be947e8e3617166f3ad840342f1af9f22159b4d2f9c3ad9c95d6e9a8d528de5eb75f7ff73c8231c9300340f65455f3c904ebb20b8a1c588156c4b81a7507871ce7b90c972be044716fd68948cfcdfdfefc998c177cc2b4d5ee3c7e6a0b1e11bebcbeab630735998c6c2b6dc09837192386ee34df5650b7c1bc1ec0cf3c8bb6d6251936a406a1078600782a062a786e0a3c68e0ff1745a414f9c40ad58bfd483d8486096f0317716cda8e4b9299e97ab3ce68e7133be9ce020390f5317ff6e0caf7d7730840f154ef1ffc03843456af2f67516026cd504724b829a153a36af6948e9771247bfbb63c17e6c56fe867d866f99ad4d68da6262d1182b293d9b3de79ace7babf9555c7a61b29d79f21fe5eae22e77940dfb09db27afe407561b7f55c86c239e469052719f9303c1b4752ff445041349d0ba3629ece3b54cda69fd125b2e8bd6b60920ee169f55cf063e1ba202e66339c9e93ca86b4bc02b7e90cb17e76d97bafc144a30b80dfe80ffcad02c423946faa40a4522481fc72ec402db1b99ff46ef81fc377fcba8e3e8a69a2b4ac7363265059a543226acd9b0f4b95f88cfdd451a3e166f27255647bfeb048d707566930f09ab34de3f0c2949bbc67832d38f9f63ea6f3179aaea77288fcad4ccb3593fd73f426e4e09cdac2b14cc81b9f8b4e9134de8f93855c2f63236e06c59265090ff25251b1f055883170451ba95923d9b0a6a7d25ee92a799fa2d0ae84f64c484b3b28e3b4f87405633aa8a85007c0857aa34614ba3f97a8314925cd11aa17cc2f7bec72b9735584a420c9d8217e02570ffaa6cc0f32105612ff1d754656c831fce4faa805ec4ee6370b1f31f779b5adf46ab3b503055ff4f032d1e2fed3d82aac74736ee038e26987bd37da0cb923a38bab2d726d8228c1f2c74133f7b6a451fff9147744cdc173a9b392f0be9b6580fa51309e16b3f9f3166add4993f4268aeccd66963ce0aed3ce871dc10693c601cd37263340ba0e5d832dd3d58b091c6cd94c8f5eb4d3b86f76ae14b38472e46b38", 0x1000, 0x7, 0x8}, {&(0x7f0000000180)="d257076b4da87a82a48c496605ef21b6444a186e79120ac3bd8c7fa01bca5abfcf77c20aeceb9076d461791fab1f98b1787bcebf518b2c7cd3d3f5778a979058d8b75820ab47f48d39736838fcd5b41b619f4188f1aa76a2afd05a1bf38c87a23e1a18d72d9ca0ccfa20b4c2eaecb3fceef33e83f0913ac24e21152586580a7de019602eedd41b51677e039f6a52e9c73f8596120f157a9a88da691e84ce10371f5dfa5840974e8f103cbe7c8e99661259a99f62bd5f8b2358ad", 0xba, 0xe6e, 0x8}, {&(0x7f0000000240), 0x0, 0xde9, 0xfffffffffffffffa}], 0x1e0000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000240)={{0x8, 0x5}, 'port0\x00', 0x4, 0x100000, 0x0, 0x0, 0x2, 0x3, 0x6, 0x0, 0x4, 0x7}) 09:19:37 executing program 1: mkdir(&(0x7f0000000080)='./file1\x00', 0x100000000000000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$9p_xen(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x10500, 0x0) openat(r0, &(0x7f0000000200)='./file1\x00', 0x20a000, 0x70) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 09:19:37 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000080), 0xffffffffffffff29) 09:19:38 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xec7, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) close(r1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10004, 0xeefffdef) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) close(0xffffffffffffffff) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@ethernet={0x0, @local}, 0x9a, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/183, 0x26}, {&(0x7f0000000440)=""/53, 0x35}], 0x2, &(0x7f0000000340)=""/143, 0x334}, 0x40000000) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) 09:19:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xfffffffffffffec7, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="146304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) [ 763.851224][ C1] net_ratelimit: 14 callbacks suppressed [ 763.851243][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 763.856996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 764.012626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 764.018481][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 764.024362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 764.030131][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 764.980632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 764.986428][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 765.787338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.793136][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:42 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 766.801368][T18524] IPVS: ftp: loaded support on port[0] = 21 09:19:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:43 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$alg(r0, &(0x7f0000000380)=""/163, 0xffffffffffffffae) getpeername$netrom(r0, &(0x7f0000000100)={{}, [@bcast, @netrom, @remote, @default, @null, @rose, @bcast, @null]}, &(0x7f0000000180)=0xfffffe38) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a31cea634288a1e8658e2447b47d93eec1755104acf2cf9189b99504ad5"], 0x12) write$FUSE_STATFS(r3, &(0x7f0000000000)={0x60}, 0x60) 09:19:43 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffffa, 0xc0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) r4 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x41, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000082000e630c40"], 0x0, 0x0, 0x0}) 09:19:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 767.450869][T18634] IPVS: ftp: loaded support on port[0] = 21 [ 767.458106][T18631] IPVS: ftp: loaded support on port[0] = 21 09:19:43 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:43 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = add_key(&(0x7f0000000080)='encr\xf2\bted\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x87, 0xfffffffffffffff8) r1 = add_key(&(0x7f0000000380)='encrypted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000440)="af11407dd6189b02cf35d8c6a3fb8fce436c395e6ced39f604", 0x19, r0) keyctl$chown(0x4, r1, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000700)=0x80, 0x4) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) writev(r2, &(0x7f00000018c0), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0xffffffffffffffda, 0x0, {0xca16}}, 0x18) getpid() [ 767.610027][T18691] IPVS: ftp: loaded support on port[0] = 21 09:19:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x7fff, 0x8}) r3 = dup2(r1, r0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:43 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x4208, r0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000540)="803f8e15d67d000019000300e60100006cff9900000000000020000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x10000, 0x0) sched_getscheduler(r0) [ 768.004431][T18959] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 09:19:43 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x3) r0 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044077bc5d000000000000000000947cc9f27f9bbc5b50576119c816d4f84ed4b8eac4938de81859913103ffd05393cf0c7b142020c4c63522638607b9b412a47455e7f878a8bd000000004b43602f434573fd6d13b2c1fb8d15eb9548c2af39b110f187d912dec14a21c7c12248f837230b9dab819ab3df4270039e060068f9529ac6f0e44ccef9e2a6f4b35d7e7605000000a1c9a5cb2d817acd1a5234011fa626f689ca1e21b5f3858a43f7eb46409776b7156704242ab317442181a1fc67b4ba488f5bfda0c7c93654969b943ce7e695d94214df4b03dec0eb5fec85bb482c6cd5d9779fc28c2ed4c7fcf2b87067626274aaab0cb92773d9012e57df82a23b01750522615df377dfbb780f953629deae670426e04b000000000000000000000000ca483957669b38dd3064e4a2703419d7692e49538f86c04501c9bdb4f4b2b48e390dbad212b6784cbe3f3f17c45482"], 0x0, 0x0, 0x0}) [ 768.048653][T18959] EXT4-fs (loop1): Invalid log block size: 8192 [ 768.100916][T18962] IPVS: ftp: loaded support on port[0] = 21 09:19:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f00000002c0)='IPVS\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r3, &(0x7f0000000340)='sched\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe4, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5adf}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x2d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003580)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) [ 768.161501][T19064] binder: 19033:19064 ioctl 6609 0 returned -22 [ 769.175451][ C1] net_ratelimit: 16 callbacks suppressed [ 769.175460][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 769.186968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 769.982165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 769.988013][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 770.143451][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 770.149280][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 770.304853][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 770.310696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 770.316584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 770.322346][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:46 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0463044000000000466804400000000006630c40"], 0x0, 0x0, 0x0}) 09:19:46 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000173, 0x0, 0xfffffffffffffd3b}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11}, 0x208) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='wlan0\x00') syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x5, 0x800, 0x8001}, &(0x7f0000000100)=0x10) 09:19:46 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 770.535826][T19295] binder: 19287:19295 unknown command 1074030662 [ 770.541070][T19292] IPVS: ftp: loaded support on port[0] = 21 [ 770.542462][T19285] IPVS: ftp: loaded support on port[0] = 21 [ 770.556537][T19288] IPVS: ftp: loaded support on port[0] = 21 [ 770.582315][T19337] IPVS: ftp: loaded support on port[0] = 21 [ 770.600058][T19295] binder: 19287:19295 ioctl c0306201 20000680 returned -22 09:19:46 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x1000}, 0x18) 09:19:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 09:19:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000500)=r3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="3283d1d54230eba4e8dfb2538cc4c7f6", 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000480)={r5, r6}) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r4, 0x3}}, 0x18) 09:19:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2400) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000002) fcntl$notify(r2, 0x402, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x172, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x480, &(0x7f0000017000/0x1000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 771.231592][T19683] binder: 19653:19683 ioctl 8912 2400 returned -22 [ 771.263222][T19683] binder: 19653:19683 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'teql0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newtclass={0xa4, 0x28, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, r2, {0xffe0}, {0xd}, {0x2, 0xf}}, [@TCA_RATE={0x8, 0x5, {0xca15, 0x4}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x44, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x13, 0xaba}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x0, 0x200}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x2, 0x3f}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x8, 0x9}}]}}, @TCA_RATE={0x8, 0x5, {0x3, 0x2}}, @TCA_RATE={0x8, 0x5, {0x345, 0x8}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x10, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24000810) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$smack_current(r4, &(0x7f0000000000)='wlan1\x00', 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000280)={0x3, 0xffffffffffffffff, 0x27b5, 0x6, 0xbf}) write$P9_RMKNOD(r4, &(0x7f00000002c0)={0x14, 0x13, 0x2, {0x8, 0x2, 0x2}}, 0x14) [ 771.548431][T19979] binder: 19947:19979 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 771.573267][T19979] binder: 19947:19979 ioctl 801c581f 20000280 returned -22 09:19:47 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0x0, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$getenv(0x4201, r0, 0x516670d5, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0xff03) 09:19:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 771.868277][T20043] binder: 20041:20043 ioctl 8912 400200 returned -22 [ 771.894546][T20043] binder: 20041:20043 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:47 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:47 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 771.941100][T20046] IPVS: ftp: loaded support on port[0] = 21 [ 771.983347][T20070] IPVS: ftp: loaded support on port[0] = 21 [ 772.051277][T20077] IPVS: ftp: loaded support on port[0] = 21 09:19:47 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:47 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:48 executing program 1: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000044000)) syz_execute_func(&(0x7f0000000000)="3642926433ef93f6c89c7bd667f2440f34a2ebf717c4dc7518ffc4e24d3ef9d6722b691f1f63ad489e66460fd9cc000000615167660fda9803000000aec4817911350e000000fdc422c5aa717ae5db6726660fdd6244a77e") timer_delete(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=0xffffffffffffff9c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000000c0)=""/169) 09:19:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x301000) fcntl$setpipe(r4, 0x407, 0xffffffffffffffff) [ 772.284551][T20266] IPVS: ftp: loaded support on port[0] = 21 [ 772.429706][T20274] binder: 20273:20274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000000, @mcast2, 0xff}, r3}}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 772.659187][T20278] binder: 20277:20278 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x8080, 0x5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 772.819782][T20281] binder: 20280:20281 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 772.994509][T20177] cgroup: fork rejected by pids controller in /syz4 09:19:49 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0x0, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffbfe) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x5070000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000780)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000007c0)={r4, 0x7}, 0x8) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x400401}, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r0}) r5 = getpgrp(0x0) setxattr$security_smack_entry(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64\x00', &(0x7f0000000940)='team0\x00', 0x6, 0x1) ioprio_set$pid(0x1, r5, 0xc3) fallocate(r1, 0x20000000200004, 0x1, 0xffffffdffffffc00) r6 = socket$inet6(0xa, 0x3, 0x7) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0x3e, 0x400, 0x70bd2b, 0x0, {0x20}}, 0x14}}, 0xa1a80ebfc9a59709) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000a00)={{0x77359400}, {r8, r9/1000+10000}}, 0x0) getpeername$inet(r0, &(0x7f0000000840)={0x2, 0x0, @multicast1}, &(0x7f0000000880)=0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@remote={0xfe, 0x80, [0x0, 0x2a8, 0x0, 0x0, 0x8000a0ffffffff, 0x16f, 0x0, 0x0, 0x14]}, 0x8, r7}) signalfd4(r6, &(0x7f0000000280)={0xffffffffffffffc0}, 0x8, 0x80804) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000640)={{0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast2}, 0xfffffffffffffff9}, {0xa, 0x4e23, 0x96, @remote, 0xffffffffffffff17}, 0x8, [0x4f0, 0xfc, 0x3, 0x5, 0x10001, 0xfff, 0x2, 0x81bb]}, 0x5c) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000800)={0x9, 0x3}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 09:19:49 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 773.395492][T20494] IPVS: ftp: loaded support on port[0] = 21 [ 773.432928][T20501] binder: 20499:20501 ioctl 8912 2 returned -22 09:19:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 773.562178][T20525] IPVS: ftp: loaded support on port[0] = 21 09:19:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000180)="548f14987a555109075236277fc6de694a86ae10b88fae926812dc4586f3fa87bcc5a8265187db6410ebec090f983d4fdd95adfcbf1210a875cd94b0357bb0efa244b3f1970dff06a0a320beb1917c012796cd77f30154ce76214932dafc8cf902fabbe9d1a92e9e218eb86498abba634eba33607a584c2e16a2a8e7c8ac89d9e655b5386f62997de8121d0fecab7c0726dcde03687f0c0b64c87d7336577bf796506d25c68bf1cfec7e1e16238abf437cc09964b19e1c802a182ab624aec3e5eecc4940fb415e6542f6a7477648b2a4db9c546d07a86e17", 0xd8) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:49 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 773.747292][T20680] IPVS: ftp: loaded support on port[0] = 21 [ 773.768834][T20727] binder: 20701:20727 ioctl 8912 400200 returned -22 [ 773.770599][T20719] IPVS: ftp: loaded support on port[0] = 21 09:19:49 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000006d77c83ab6fccc9af40000000000f1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000001b200000000000004000000000000000"], 0x3, 0x0, &(0x7f0000000440)="2c5bb5"}) [ 773.801108][T20727] binder: 20701:20727 ioctl c0145608 20000000 returned -22 [ 773.874292][T20727] binder: 20701:20727 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 773.893373][T20731] binder: BINDER_SET_CONTEXT_MGR already set [ 773.922899][T20731] binder: 20730:20731 ioctl 40046207 0 returned -16 [ 774.338282][ C1] net_ratelimit: 14 callbacks suppressed [ 774.338296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 774.344032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 774.499660][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 774.505521][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 774.511430][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 774.517188][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x209) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:50 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0x0, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, {0x9, 0x0, 0x0, 0x0, 0x0, 0x200000000000}}, 0x207) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xb, &(0x7f0000000080), 0x4) [ 774.628271][T21041] binder: 21038:21041 ioctl 8912 209 returned -22 [ 774.657473][T21041] binder: 21038:21041 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 774.698283][T21057] IPVS: ftp: loaded support on port[0] = 21 09:19:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = syz_open_procfs(0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz'}, &(0x7f0000000540)="625f9ff9bcd0c81d1d1e9034ed4f854b8b60c4e509c92f27f5dc5ba8215b4018d6c09442e8f4e4a20e9ad4a5b52432f9fe500c26aaa92f4683bee0531bb27afa2783afa2bf9a75d1724e2803a7d0a1f3d12b8eb8fccbd2e1099392069cd3c45c88e4e14c2ff1687914f923b2bc2a78f0ae5e2ac7dfeb8b757c1e9fabe3ecd7cf2040154a1ed4708b680c1a078d9f9ef406c894a0bad57cf330a7e43e070a21db9524c1b6100ff7bb883ad1d871dd3c8cb3e4863a5e4d3879260683775ce1ab6643b7b42558653c9f4f1ffd52527dd284cfac9363", 0xd4, 0xfffffffffffffffb) add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="a4548d481ef025cd528caaac714456205461da49f6e5b95fea1052e830cd6aeb4d1a00955068683e3c1a830d11238a0c6c6c9e037fb7a9", 0x37, 0x0) add_key(&(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="64de722a130235e7464ba99c7cb8b48ff9b2ca0feb609a0d2859", 0x1a, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)='bpf\x00', 0x1000, &(0x7f0000000880)={[{@mode={'mode', 0x3d, 0x7fffffff}}], [{@dont_measure='dont_measure'}, {@pcr={'pcr', 0x3d, 0x3c}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'id_legacy\x00'}}, {@subj_user={'subj_user', 0x3d, 'syz'}}, {@seclabel='seclabel'}, {@obj_type={'obj_type', 0x3d, 'keyring\x00'}}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) rt_sigprocmask(0x2, &(0x7f0000000040)={0x5}, &(0x7f0000000080), 0x8) futimesat(r1, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={{}, {0x0, 0x7530}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, 0x0) creat(0x0, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fremovexattr(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="73797374657376707070307da5c962c80000005b0870fee6629f8e43a71d8697fe68bd5d3a5d1924eb1985b8756dab50d9143b49ffff08bab7127aa3cc3d6c42b13058f5861b6a24399e4ca589adfc3082c03e5b735c080000800000000000f80a784f11"]) [ 774.877491][T21231] IPVS: ftp: loaded support on port[0] = 21 09:19:50 executing program 5: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:50 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463cacaf204400000000007630440000000000e630c40e65fbfc30efb4aa6b1a69d282bb4d713f52a01a5a0ae873d62fb11bc246b2a9f3d4d73d2893c3f3e59da9b03e5ceb0cab918e3161254f4376808ade3eb62ea749529c25c768194f1e3a66fc6a148d382c7aca2037744bb7c80cc2e1c364cc7adee1cdc9678979200a38b9dfaa74a2ee786fa77817fc004f14c077f6ff3a84505f09447323d0e0592c85ef2546400bd2a5a861ec45d50d40145ed7ed41f729f47df6db3151d65127721f4"], 0x0, 0x0, 0x0}) 09:19:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 775.449883][T21468] binder: 21463:21468 unknown command -892706044 [ 775.477753][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 775.483537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 775.493284][T21466] IPVS: ftp: loaded support on port[0] = 21 [ 775.500649][T21468] binder: 21463:21468 ioctl c0306201 20000680 returned -22 [ 775.562801][T21472] IPVS: ftp: loaded support on port[0] = 21 09:19:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000080)='syz', 0x3) 09:19:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x125, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4, {0x0, 0xf0}}]}, 0x1c}}, 0x0) [ 775.760364][T21479] binder: 21477:21479 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) 09:19:51 executing program 1: clone(0xa00000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0/../file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="81bbf7cba89d3aca6444800b15da81626b8a947116c295ad56b6c6563e070bf05ad639053447d523556214650c0c6faebd68f50b83590a94858f11538af8552d7e38701f7bcc40e664d7bd898ccc71fc51427afacebdf80000000000000000715de7eb431421b28a5dc8691a1cd84b6d777488b54b603fc49eb5a153ecff801176dd3f0c0602d8320003a5e572215c28213b89ac803139309672a5745dd925de0396e5e3633e75736324ff6a88dc914836477a3ba075d738822e525b171f4ff5fb887103b4748c19a84a02a4334c6b26b248ea4a6efb0959c405a059d89ab08d6fde1b478614b7d6c37d"], &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4c000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x9c90) creat(&(0x7f0000000080)='./file0/../file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="754563c0238482c7cb0000000b1082ba886346edcf4eaded016ea671e000800000000000006e0ea8bcb60815bfe80010ba54ee6e0ecdb562923fab28e2efda876c3bd3db09cfc8d760838b5fe24e64ec9fadf60d15ddc12a61c41153613a48aeb250fb41fe58482f0e0237b80f80eb417db9f478d0a3e5011bd3245348c3f377b1f06224cd15f737817c80233fe6977d8d8689435da91aa1df062c000000000000020910b41cb42897216fdb92cb4678dab531cf8273e76d18217cb9ca370c23f999ed5bd57ba73b7806afa4f1c355751ae9a138edf8efeccc"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r0}}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000004d80)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000240)={0x4, 0x1, 0x40}) 09:19:52 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x0, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) getegid() [ 776.274371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 776.280188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 776.314948][T21792] binder: 21791:21792 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 776.323391][T21792] binder: 21791:21792 DecRefs 0 refcount change on invalid ref 0 ret -22 09:19:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:52 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb6c532aaab9b6ba0630f11c15b164a12d3e48f3fd00"}, 0x60) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x104) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x1) [ 776.405533][T21792] binder: 21791:21792 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:52 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x0, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 776.545405][T21899] IPVS: ftp: loaded support on port[0] = 21 09:19:52 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0xa0000010}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2f, 'io'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x2d, 'pids'}, {0x2b, 'pids'}, {0x2d, 'memory'}]}, 0x22) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xfddc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x2b6, 0x0, 0x0}) 09:19:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:52 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffff8, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) r1 = accept(0xffffffffffffff9c, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000340)=0x80) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) getpgid(r2) getpgrp(0x0) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x100008}, 0xc) syz_open_procfs(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004ca000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000002000000000000000000000008d4e762505c0"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() socket$netlink(0x10, 0x3, 0xe) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) ptrace$setopts(0x4206, r6, 0x0, 0x0) 09:19:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 776.872007][T22014] binder: 22013:22014 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 776.907407][T22014] binder: 22013:22014 unknown command 0 09:19:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 776.924294][T22040] IPVS: ftp: loaded support on port[0] = 21 [ 776.941706][T22014] binder: 22013:22014 ioctl c0306201 20000680 returned -22 [ 776.953763][T22045] IPVS: ftp: loaded support on port[0] = 21 09:19:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x501080) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xd24, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$smack_current(r4, &(0x7f0000000280)='TIPC\x00', 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c409a0641668c36e7e8136675bc850b2e1f5d7a0c0e08c0823832518c42f58f57cb001f18f623cb76f822e2837c1c4f3e239d415a3e4aa2db296552dc1d5a56f7e7ddc3d42fce8520c58a1690ebf363fe2be905db56ab"], 0x0, 0x0, 0x0}) r6 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000006c0)="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", 0x1000, 0xfffffffffffffffd) keyctl$clear(0x7, r6) 09:19:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x43, "f29100451a0a5bc1a25fcdce959f6f5462caa5c306b02d392f172ccd072132903fa1ee3244bd48322c5bc84ef966e6600a0df118dd9d680656e7580364f2e4b7c7509a"}, &(0x7f0000000200)=0x4b) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x36a, &(0x7f0000004bc0)}, 0x2}], 0x31e9cd3487dc94, 0x20004bc0) 09:19:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, &(0x7f0000000300)) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 777.179778][T22137] binder: 22136:22137 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1715537562 09:19:53 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x404080, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400019294300000007630440971a611de2f8f00f46fc6bd030953f7b98e819711128f75f3ebe37e8bfd96a5d1d1d54ae9b81b6b849750745648b050f93fb009fe318ebd0d97647073afaadcc1c1ae1ec09c31a7825bc836b5b994541119bdbe4b0442f6810348a60612bb25805adb6a7d962db4fa100000000000051b1b1916582b50af3a5f12bcb7868de1385584c0d5ae4ddb7beff46a2c9bd2eca6ee8b1017d6e2cd0029eebcda40143eaf4fed96100aa7187c79e94f376673dcde953f9cbc4acef42bdf22229bbb75a145969689c8739f21dd05c9c5fc0ab6aafec49000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 777.284673][T22143] IPVS: ftp: loaded support on port[0] = 21 09:19:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000750e21d911bd950aa0f3de20408991f15de2d184c0ff7ee72df44282383bcf23b884ddaae590d11a2b9337b262c8da514e05a95ee729233d16ca8b5a4c96172381045d69994feb2168e42044cbdbca801d93a23222e185e0a76f4a8a7616ed646dcc1929e88f040fd8e2fc02e0db2ea1a551329ee50b4c252a78697e09"], 0x200600) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000200)="3aad5cd07f680da9798fe33c8ab720b11b7cbc6ff26a9918a1c754e6c734bb328b81b445cf036dbdf8a2837ceb4fa448907b3befc53ea93bf26ab43ac204a378d80b6cbe1083641dc58fda3e59d6a387a2a836c2b1e2febdefe2e207223d77437ea6fff8e56f857b8f8b5199e88ef7637a44f2d5acc7398a484ccd9b6aaa6d7d010e5b88a1bd698d3be809d8e2fe59898f852e3486acb6ab3de2c7e9f9b4ef1767313945d0f5783078c1bedcda8b8f2b7617b366e5326bd94d0212bbd7") setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x3, @empty, 0x1}, {0xa, 0x4e24, 0x9, @rand_addr="e4aac3106669878c8efb93340af0a4d1", 0x100000001}, 0x8000, [0x7f, 0xd1, 0x1, 0x3, 0x6, 0x4, 0x2, 0x1f]}, 0x5c) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da802007a000000, 0x500001c) [ 777.381651][T22250] binder: 22239:22250 IncRefs 0 refcount change on invalid ref 1126766848 ret -22 [ 777.461395][T22250] binder: 22239:22250 unknown command 117440512 [ 777.508665][T22250] binder: 22239:22250 ioctl c0306201 20000680 returned -22 [ 777.527085][ T27] audit: type=1804 audit(1552727993.288:189): pid=22254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir345632221/syzkaller.7mWCtQ/866/memory.events" dev="sda1" ino=17350 res=1 [ 777.629481][ T27] audit: type=1804 audit(1552727993.328:190): pid=22254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir345632221/syzkaller.7mWCtQ/866/memory.events" dev="sda1" ino=17350 res=1 09:19:53 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x0, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:53 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) accept4(r0, 0x0, 0x0, 0x800) [ 778.283549][T22569] IPVS: ftp: loaded support on port[0] = 21 09:19:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0', "4f8745e31b323d2e70583b6c522bef5aa9c2393043dacb76842c33b510486b77165130a3ccf92b540daf321e9c7a372cca0d1abf470c4512c6a0dfc91bc33f0488f54871e5271d45e2a94c2f0ac1d28697e6e9abe5354b5a7a619b41d6cc4ac1ce76b0f5f920"}, 0x6a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x3d1, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:54 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x0, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, &(0x7f0000000300)) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7ff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) [ 778.992302][T22794] binder: 22793:22794 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:19:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40836ef7b75a876c6678ad4d976fa35f27b737a6c844ab4f3452d4524614eb0c9a0ed7ef7b4033fb1bc7576a63ddc54ce25198ffb0d0013439fdb9a133d7bcd0fd037a5f2fde96273dba803da390df3c4f"], 0x0, 0x0, 0x0}) 09:19:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x31, 0x0, 0x0}) [ 779.290958][T22901] binder: 22899:22901 BC_REQUEST_DEATH_NOTIFICATION invalid ref -1208521085 [ 779.398195][T23005] binder: 23000:23005 unknown command 3 [ 779.418456][T23005] binder: 23000:23005 ioctl c0306201 20000680 returned -22 09:19:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$ppp(r2, &(0x7f0000000040)="35a6925c5ab21feca47877dd6461f3ad4856981291cb856913fb5705e127bd29fb941d088008d9c09294b6c8ff1738633e7b1366924fb51d67bbf10794fbfcbf67f4b754fd1f1f77fe387140a77ec34bb851c5cd58a55dd6ff30894be4906a434a67a1c5f9", 0x65) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000007630440010000000e630c408560b411a704dbb43ed687eddd227ad1075ccaba9648966f346b903cbfdb6274dd91857f7d"], 0x0, 0x0, 0x0}) 09:19:55 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb0"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 779.595202][T23114] binder: 23110:23114 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 779.615088][T23114] binder: 23110:23114 BC_REQUEST_DEATH_NOTIFICATION invalid ref 297033861 09:19:55 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x0, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000080)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)={0x401, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x1, 0x2, [{{0xa, 0x8000, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e21, 0x100000000, @empty, 0x8}}]}, 0x190) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0x82ff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) [ 779.662495][ C1] net_ratelimit: 17 callbacks suppressed [ 779.662531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 779.674008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 779.837874][T23122] binder: 23121:23122 ioctl 40047438 20000080 returned -22 [ 780.469196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 780.475068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 780.630494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 780.636323][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 780.791906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 780.797753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 780.803637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 780.809409][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:58 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80000000040, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x4, 0x76) sendfile(r0, r0, &(0x7f0000000000), 0x3ff) 09:19:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, &(0x7f0000000300)) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:19:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x805) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:58 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x0, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:19:58 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb0"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 782.954825][T23333] IPVS: ftp: loaded support on port[0] = 21 [ 782.966689][T23334] binder: 23332:23334 ioctl 2283 20000000 returned -22 [ 782.984291][T23335] IPVS: ftp: loaded support on port[0] = 21 [ 782.986850][T23338] IPVS: ftp: loaded support on port[0] = 21 [ 783.006614][T23339] IPVS: ftp: loaded support on port[0] = 21 09:19:58 executing program 5: pipe(&(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) r4 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r6 = dup2(r5, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:19:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x3c, @loopback, 0x4e20, 0x0, 'fo\x00', 0x4, 0x5, 0x47}, {@remote, 0x4e21, 0x2002, 0x57, 0x4}}, 0x44) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x9) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x68) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$l2tp(0x18, 0x1, 0x1) 09:19:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 783.819314][T23553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:19:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:20:00 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10002, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000040)=0x98e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x30, 0xfffffffffffffffd) [ 784.256979][T24063] binder: 24062:24063 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:20:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:20:00 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2842, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}}) add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="025a8f51bfc3ce1f705a8f4e53467d192d8a82c22af96be2cffe6978ed78a798da804b062387a568f516eaabf274bd3047be058d2bba1f28f1bccd7c678e7a912fc09da035591bf34b48c2b6504e0e35e4123835adf56fe4a9", 0x59, 0xffffffffffffffff) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) [ 784.575377][T24270] binder: 24269:24270 ioctl 8912 100 returned -22 [ 784.587400][T24270] binder: 24269:24270 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 784.825844][ C1] net_ratelimit: 14 callbacks suppressed [ 784.825852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 784.831624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 784.986679][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 784.992563][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 784.998437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 785.004196][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 785.954681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 785.960510][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 786.761403][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 786.767311][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 788.409372][T24477] IPVS: ftp: loaded support on port[0] = 21 09:20:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a15d818eff64846080e14aaa1c8d633d30857feb6d31cdadc0260d133d4b0b2801be2702aab60835a01956af55a94ca863cee24d3295d068412966dccd1e04e3cfc068bb578dc072ed4a0a5b64e1e1d72ba9379805621a31", @ANYRESHEX]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) 09:20:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:20:04 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x0, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:04 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb0"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 788.651879][T24492] binder: 24486:24492 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 09:20:04 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:04 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0xd}, @random="52cff2c5bec5", [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x2, 0x4, 0x0, @random="f8bf88df5b1b", @remote, @dev}}}}, 0x0) 09:20:04 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x0, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 788.743731][T24538] IPVS: ftp: loaded support on port[0] = 21 [ 788.840138][T24672] IPVS: ftp: loaded support on port[0] = 21 09:20:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7fff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) [ 788.882935][T24692] IPVS: ftp: loaded support on port[0] = 21 09:20:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) [ 789.016746][T24711] binder: 24708:24711 ioctl ab0a 7fff returned -22 09:20:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {}, 0x0, [], [], [0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xfb\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) [ 789.292765][T24816] input: syz0 as /devices/virtual/input/input12 09:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 789.720095][T25026] IPVS: ftp: loaded support on port[0] = 21 [ 790.149486][ C1] net_ratelimit: 16 callbacks suppressed [ 790.149494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 790.161000][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304400000000007630440000000000e630c40"], 0x0, 0x0, 0x0}) 09:20:05 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f4, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x005\x00', @ifru_settings={0x713000, 0x0, @raw_hdlc=0x0}}) 09:20:05 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x0, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:05 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 790.355517][T25134] binder: 25133:25134 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 790.379987][T25139] IPVS: ftp: loaded support on port[0] = 21 [ 790.398665][T25142] IPVS: ftp: loaded support on port[0] = 21 09:20:06 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @bcast, 0x0, [@rose, @default, @bcast, @default, @rose, @default]}, 0x40) [ 790.445153][T25193] IPVS: ftp: loaded support on port[0] = 21 09:20:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) madvise(&(0x7f0000878000/0x2000)=nil, 0x2000, 0x9) 09:20:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) 09:20:06 executing program 1: [ 790.966331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 790.972148][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:06 executing program 5: 09:20:06 executing program 1: [ 791.117629][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 791.123547][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 791.278986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 791.284877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 791.290735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 791.296506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 791.472644][T25469] IPVS: ftp: loaded support on port[0] = 21 [ 791.823190][T25531] IPVS: ftp: loaded support on port[0] = 21 09:20:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:07 executing program 5: 09:20:07 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:07 executing program 1: 09:20:07 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:07 executing program 5: 09:20:08 executing program 1: [ 792.324895][T25584] IPVS: ftp: loaded support on port[0] = 21 [ 792.360531][T25583] IPVS: ftp: loaded support on port[0] = 21 [ 792.441360][T25594] IPVS: ftp: loaded support on port[0] = 21 09:20:08 executing program 5: 09:20:08 executing program 1: 09:20:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:08 executing program 5: 09:20:08 executing program 1: [ 792.829863][T25607] IPVS: ftp: loaded support on port[0] = 21 09:20:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:09 executing program 1: 09:20:09 executing program 5: 09:20:09 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:09 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 793.724913][T25726] IPVS: ftp: loaded support on port[0] = 21 [ 793.736221][T25729] IPVS: ftp: loaded support on port[0] = 21 [ 793.742061][T25728] IPVS: ftp: loaded support on port[0] = 21 09:20:09 executing program 5: 09:20:09 executing program 1: [ 793.763105][T25735] IPVS: ftp: loaded support on port[0] = 21 09:20:09 executing program 5: 09:20:09 executing program 1: 09:20:09 executing program 5: 09:20:09 executing program 1: 09:20:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:10 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:10 executing program 1: 09:20:10 executing program 5: 09:20:10 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x0, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 795.312372][ C1] net_ratelimit: 14 callbacks suppressed [ 795.312380][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 795.323871][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:11 executing program 5: 09:20:11 executing program 1: [ 795.353868][T25864] IPVS: ftp: loaded support on port[0] = 21 [ 795.381008][T25868] IPVS: ftp: loaded support on port[0] = 21 09:20:11 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0x0, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 795.441512][T25873] IPVS: ftp: loaded support on port[0] = 21 [ 795.473694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 795.479481][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 795.485368][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 795.491140][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:11 executing program 1: 09:20:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_buf(r1, 0x0, 0x30, 0xffffffffffffffff, 0x1c3) 09:20:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f00000028c0)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2ca, &(0x7f0000000040), 0x2c}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r0, r1}) splice(r0, &(0x7f0000000140), r0, &(0x7f0000000180), 0x4, 0x3) write$binfmt_elf32(r2, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x4) [ 795.672655][T25882] IPVS: ftp: loaded support on port[0] = 21 [ 795.808674][T25892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.441745][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 796.447564][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x88a8ffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 09:20:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) flistxattr(r0, &(0x7f00000001c0), 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0xfffffe04) 09:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:12 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 796.788135][T26210] IPVS: ftp: loaded support on port[0] = 21 [ 796.796166][T26208] IPVS: ftp: loaded support on port[0] = 21 09:20:12 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0x0, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 09:20:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 797.005825][T26432] IPVS: ftp: loaded support on port[0] = 21 09:20:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 797.091186][T26471] IPVS: ftp: loaded support on port[0] = 21 09:20:12 executing program 1: exit_group(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1008}], 0x1}, 0x0) [ 797.248466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 797.254332][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x400002) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x7, r1}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3, 0xfffffffffffffffc}}, 0x30) socket$inet_udplite(0x2, 0x2, 0x88) 09:20:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)="01000000000000001804000006000003000000021cd849832f") 09:20:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x3, 0x2) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000080)="2495e42357e521b3b937bf7d194813483d7598de210dd48cb14cf29e150653a5451c5544177b2ba7efdafe761f0e699945034d7104e41f65db00", &(0x7f0000000100)=""/121}, 0x18) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f00000000c0)=0xb, 0x4) ioctl(r1, 0x20000000008912, &(0x7f0000000040)) 09:20:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:13 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:13 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0x0, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 798.346992][T26984] IPVS: ftp: loaded support on port[0] = 21 [ 798.386313][T26989] IPVS: ftp: loaded support on port[0] = 21 [ 798.413396][T26988] IPVS: ftp: loaded support on port[0] = 21 09:20:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:14 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="ac6ad4195695de6c7a000c7043e4c1c8249a0e56e81bdf13452018816ff84d330adf"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 09:20:14 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x2, 0x40c) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f00000004c0)=""/255) write$UHID_CREATE(r0, &(0x7f0000000680)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000005c0)=""/180, 0xb4, 0x53, 0x101, 0x3, 0xfd, 0xb77b}, 0x120) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="883914ada3e9000000050b0500000003"], 0x10}}], 0x1, 0x0) dup2(r0, r0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x8, &(0x7f0000000040)=@raw=[@ldst={0x2, 0x84e189a0fb4b5bef, 0x6, 0x0, 0x9, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x2, 0x7, 0x3, 0xb, 0x30}, @map={0x18, 0x8, 0x1, 0x0, r0}, @ldst={0x2, 0x1, 0x7, 0xb, 0xb, 0x0, 0xffffffffffffffff}, @generic={0x6, 0x4, 0x7f, 0x8, 0x4}, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2}], 0x0, 0xa1, 0x43, &(0x7f0000000180)=""/67, 0x41f00, 0x1, [], r5, 0xd}, 0x48) readahead(r0, 0xa03d, 0x1ff) r6 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}) sendmsg$alg(r0, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x2d, 0x37, 0x2, {0x3, 0x101, 0x4, r7, 0xf, 'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}}, 0x2d) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000007c0)=r1) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000200)) openat(r0, &(0x7f0000000140)='./file0\x00', 0x200a80, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) [ 798.945144][T26998] device team0 left promiscuous mode [ 798.956533][T27023] IPVS: ftp: loaded support on port[0] = 21 [ 798.966159][T26998] device team_slave_0 left promiscuous mode [ 799.013754][T26998] device team_slave_1 left promiscuous mode 09:20:14 executing program 1: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) getpgrp(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x3a], [0x187]}) 09:20:15 executing program 1: clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x280) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x8) ptrace(0x10, r0) ptrace$setregs(0xe, r0, 0x0, &(0x7f00000000c0)) 09:20:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:15 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000004000)=""/4096) 09:20:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:15 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x0, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:15 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 799.945883][T27530] IPVS: ftp: loaded support on port[0] = 21 [ 800.053912][T27574] IPVS: ftp: loaded support on port[0] = 21 [ 800.089996][T27624] IPVS: ftp: loaded support on port[0] = 21 09:20:15 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000500)=""/236) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)="68819651a05a6fbdcda8b6671bcfca5750bd3389383769b52a2df8d0cf7ae63ca7d12630cd0de31a1be417e557199e6b2d217b042abaa5a643a2ee88d98bb47d2cd15d4b82e1453f37205928ea4f7114be3dcba7c26abcd3597e3d98e6db9e05dc14652256e4f1f7003e02e16bf8a1c0a375c3e15607b155915091a5e8496f0524e2cdf8674c81af29c89e4067ef3434f09e1e78") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) prctl$PR_SET_CHILD_SUBREAPER(0x2c, 0x2000000000000003) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000200)={0x0, 0xfff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x4}}, 0x709, 0x0, 0x20, 0x1, 0x40}, &(0x7f0000000340)=0x98) 09:20:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="fc88ba69b3807b8e7ba3f16bb51c26488da9253e474f2a721700b6fc844cdacaa43991ea02bbf4f49bdd21d5663aa6ba1b9a4d58c987d7b405c38d44514e54e45f70ca9142b6de5124024e487fa360b89214d35ba85f90935d3bdffb34cef94d06805ffe185038947a2fe4e78fc93ec1bf7a9521d7a2d551a9b26eb9616580cd73c6cf05f87ffcb73d988641f361583cd78e2387f4654686f32c6f21e6925176f4a04cc5b12240a1ec94af0bdee29bf1ca783223688585d1f96ba669e622934c0634", 0xc2, 0xfffffffffffffffc) add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unshare(0x24020400) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2e2f66b70a653000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='logfs\x00', 0x40000, &(0x7f00000001c0)='tracefs\x00') flistxattr(r2, 0x0, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000540)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) io_setup(0xe7e5, &(0x7f0000000280)=0x0) r5 = eventfd(0x9) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000580)="97d8096d9f3e4a349dd04e5715e31011f492c524daf3f04310400d12a77a304b89ee34ee0204f79c096164e8f89cc6c20deee24a54c19e3380a47168f205d680c7b7fef6f498864ef9a41df6330a23814ed129c4e298d8ec3cbdaa1a734ed028e3a166f1a252cc43", 0x68, 0x4, 0x0, 0x0, r5}, &(0x7f0000000600)) [ 800.636567][ C1] net_ratelimit: 16 callbacks suppressed [ 800.636576][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 800.648132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 801.444102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 801.450483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 801.604609][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 801.610723][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 801.766089][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 801.772213][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 801.778110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 801.784018][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:21 executing program 1: syz_open_dev$amidi(0x0, 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c653175ce8a77299a372412a5ce4516db1a39c33724846f66d3afdba0b2150f605a2807ec5f616d6d1510aec56d6199a5ce89711485ee88e4373a4f0a38deff5e8dbe41ecd6e90fc99edefd1a1dfec42d9ee91f9681e2436feba925140f8d84d35042114c02c26529d2927a17232ea2071939ce6769653dbba35739fcf322be8e25b0402780d8e78fc3af9def2b2637e0eaf0e13869d79c8c176fc2d9bc0581bc11608fee9c527c7bfbe49806f3"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x44) 09:20:21 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x20080) accept$packet(r0, 0x0, &(0x7f0000000080)) r1 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) fcntl$getflags(r1, 0x401) 09:20:21 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x0, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 805.796956][T28058] overlayfs: failed to resolve './file1uΊw)š7$¥ÎEÛ9Ã7$„ofÓ¯Û ²`Z(ì_amm®Åma™¥Î‰q…îˆä7:O [ 805.796956][T28058] 8Þÿ^¾AìÖéÉžÞýþÄ-žé–âCoë©%„ÓPBLÂe)Ò’z#.¢9Îgie=»£W9üó"¾Ž%°@'€Øçïï+&7àêðá8iלŒoÂÙ¼¼`îœR|{ûä˜ó': -2 [ 805.799614][ C1] net_ratelimit: 14 callbacks suppressed [ 805.799622][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 805.828124][T28061] IPVS: ftp: loaded support on port[0] = 21 [ 805.832055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 805.855031][T28063] IPVS: ftp: loaded support on port[0] = 21 [ 805.906235][T28088] IPVS: ftp: loaded support on port[0] = 21 09:20:21 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x401, 0x1ff, 0x0, 0x1f, 0xc98, 0x6, 0x81, 0x1, 0x1, 0x6, 0x8, 0x4, 0x8, 0x9, 0x8ba]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0xf91b}, &(0x7f0000000280)=0x8) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 805.960740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 805.966646][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 805.972627][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 805.978420][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 805.994479][T28215] IPVS: ftp: loaded support on port[0] = 21 09:20:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) syz_emit_ethernet(0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 09:20:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000200)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) 09:20:21 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001400000000000200000020000800120000000300000b0000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) r1 = getpid() r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000200)={0x7fffffff, 0x9, 0x200, 0x3, 0x2, 0x5, 0x9d5e, 0xffffffffffffffe6, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x25, &(0x7f00000000c0)='ppp0-.\'wlan0selinuxR[-cpusetkeyring/\x00'}, 0x30) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2400, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r0, &(0x7f0000000180)={r5, r0, 0x6}) 09:20:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x400000000000005, 0x2a, 0x804, 0x8000000001}, 0x2c) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x10001, &(0x7f0000ffb000/0x4000)=nil, 0x6) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000380)}, 0x10) 09:20:22 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001400000000000200000020000800120000000300000b0000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) r1 = getpid() r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000200)={0x7fffffff, 0x9, 0x200, 0x3, 0x2, 0x5, 0x9d5e, 0xffffffffffffffe6, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x25, &(0x7f00000000c0)='ppp0-.\'wlan0selinuxR[-cpusetkeyring/\x00'}, 0x30) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2400, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r0, &(0x7f0000000180)={r5, r0, 0x6}) [ 806.928833][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 806.934679][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001a0001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYPTR64], @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r0], @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], @ANYBLOB="e000000800000000005e585fa5000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000d6d7755956f045b3e395bf9203fa6b7200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000"], 0x4}}, 0x0) [ 807.736374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 807.742187][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:25 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:25 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="386625706cc36b81798611945519e4e249edfaf77e3b179174fae6bcc8537d5ddbaec4c2b08f18f7b71b078b37ffa7476236fb3a18f3798b35204be7de25d58f60fc9d57d3738df13f1217f4c10b5403df670549e84dadbd35d9322ba112712d477f3c006d7fcdd44460155265018252fa86203eb44a1e8b0cd49bec02af1ea72294ff33a15a1b6efb92d6bc7737efc90606ab1f9517c254721122bddaf71f6ebd0050c8afc786052fc3c2bb16", 0xad, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)='/dev/video36\x00', 0xfffffffffffffffa) keyctl$link(0x8, r0, r1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0585611, &(0x7f0000000140)={0x0, 0x9, 0x0, [], 0x0}) 09:20:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) close(r1) 09:20:25 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x0, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:25 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0x0, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 809.678937][T28919] IPVS: ftp: loaded support on port[0] = 21 [ 809.696593][T28994] IPVS: ftp: loaded support on port[0] = 21 09:20:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/211, 0xd3}], 0x1, &(0x7f0000000240)=""/61, 0x3d}, 0x40) r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) [ 809.818981][T29097] IPVS: ftp: loaded support on port[0] = 21 09:20:25 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0x0, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000480)={0x2, 0x6}, 0x2) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x800) keyctl$session_to_parent(0x12) clock_gettime(0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) modify_ldt$read_default(0x2, &(0x7f0000000780)=""/4096, 0x1000) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) [ 810.032876][T29197] IPVS: ftp: loaded support on port[0] = 21 09:20:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x10080) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x40, 0x4, 0x3}, 0x200}}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000280), 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000080)) [ 810.786981][T29457] IPVS: ftp: loaded support on port[0] = 21 09:20:26 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xfe) connect$ax25(r0, &(0x7f0000000040)={{0x3, @netrom, 0x2}, [@remote, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x7ffffffe}, @default, @null, @default, @null, @netrom, @null]}, 0x48) 09:20:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getgid() setgroups(0x40000000000004d0, &(0x7f00000001c0)=[r2]) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x15, 0x5, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) close(r3) prctl$PR_SET_UNALIGN(0x6, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') 09:20:26 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, 0x0) [ 810.994821][T29536] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 811.083927][T29572] IPVS: ftp: loaded support on port[0] = 21 [ 811.123593][ C1] net_ratelimit: 16 callbacks suppressed 09:20:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0x5, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 09:20:26 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, 0x0) [ 811.123602][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 811.129351][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:26 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20300, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x40, 0x101, [], &(0x7f0000000040)=0xc1}) r1 = gettid() sched_rr_get_interval(r1, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x400000) bind$isdn(r0, &(0x7f0000000140)={0x22, 0x80000000, 0xfffffffffffff202, 0x9, 0x7fff}, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180), 0x4) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)={0x49d, 0x24, [0x2, 0x6f1, 0xffffffffffffffff, 0x9, 0x9, 0x6, 0x10001, 0x0, 0x4]}) r3 = request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='vboxnet0^\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000380)={r3, 0x6f, 0x8da}, 0x0, &(0x7f00000003c0)="a27d9cca4b5a26", &(0x7f0000000400)=""/166) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000004c0)={0x2, 0x4e24, @rand_addr=0x2}, 0x10) sendmsg$kcm(r2, &(0x7f0000001bc0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x8}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000580)="0625c5d4ba4dcd8b456551d3893e72145adfab329651f0cc059eca359e13d64c58ede5e0f4b991f561a9e3c0651dfccfdcc4f5e744a8f7f99f9515957bc12ba72c6572e4f4336ab53d499c0dda59a5dcabe20b4179439c", 0x57}, {&(0x7f0000000600)="1e48bc8f90ac9c45b8d7b2476049ed5fcdbf9e0d48bf4f01aeb4322fe0522df4dbddb8f12c6b996a499393cadbeb5276d52814d830c91106813f69e52d3134821ecaf5f78533409814c4ceccdcfbac6b3745500f789c88a5003fe1c73f501472a8387a0c3fdc4daaff47917d5dc4999b253f815f389c359dd3", 0x79}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="802abb67c01120a2e0cdc8ce28d1f9f76efb16bc570b9575ad7ef5ce03f5bfdbb00ad28bc047d9abedefca8e1a151939041d09f34c2b3209addf9b2512576a01c87517ca33aa1ee843614b0fa3cd6252cc75ce19acc4209d1d3cbfd26a798ac9374ba4d71d1f9509d93e186deb0cdfb6c18931411e25996fb0a59f47b76b12bad00cff15876097a90e569153e4cac5b166d18b690c9f258acf8addb9276aeb178e3a1f9b0ec7e117b61af69f216461116a522fa84ca20e4be97dd90800445e1476", 0xc1}, {&(0x7f0000001780)="2ec30a40722012efa5cdcb0e9532475176baf5172a4e916ae49d1f37a102ec7337c430024da2aec68bf04bdbfdd07310187d986342615d515a3769c1ca1b00e663a2a9524501258c253298748ecfc48a3e228a758670992a270ca2bba0027731a0d746ebc90bcc318579f97c155fdabd00a0169b402516744a0880f511403ea099fc5010080b7106957cf4209af685ab98de9eb7ed3b4f821e69ff42f4445ff962e98603095679915a9ffd498e491b6cba7fbd92aa81464f432870ed02f47cf996ddc2dcd18449db01", 0xc9}, {&(0x7f0000001880)="bfb2d6652eb6707181b8a75e0006b75392fd68818b45cf47e88e3cddcbc16ec7d5dbe20627ac93c38bf50bf2d6019d006c47ea3223d29e17daeb0f1689e6c8eda7492a668092cca5a44273fe6eea1fa37e070fc988d05cf9f0ac", 0x5a}, {&(0x7f0000001900)="647ec341e35aae72bc7340b9eb32379acc7316b4877f2194e4cc5d25c71286d66e44c4a8b59430aeaab7f6c451a662059f4ab101ba516e8cc9a4d11570c727d378a3b6c357ffd4718d8806a61a950724e5984e8de91e88775e5345badcf2fa3448e0a5864b92ea835bc1e8d310416903a33e744a565d46bdb8817f85b50a785318606d3d0b00b704f85f3481fe247d871a7aae5460d5dcb3942bab82750f61655d61", 0xa2}], 0x7, &(0x7f0000001a40)=[{0xd0, 0xff, 0xf1f4, "51cfd77c0a0f4d9fb3d3ccc74b2c635983c960171446abe3ec83a760a657568aa61379b2ff25bdb66c01a463f7feb6b85e8a9e890857bd424fbc7932c7819ca198faa75eb1c7183bdafc359657c8339b857509711b69ad5a2b84cd662dde8d7b0dfe607e697653d4295baf8b549bfcdede68e430ccc3a330b5dbfed013cb3482bb5c477ec2f4b9eb2a16d7404b2fd1addfe3480bc72981e1ce1fa7dbacc4f3b044b8afcb3799a18fd5a855e120f86fc1951e00fa37060fc195a6182d4d31"}, {0x78, 0x107, 0x100, "9b9c18cd430fe09c68472e08ef1edf3184f6d30070b43ca18f4ae3293f4e2faaf68096900d2f1ed57dca2f6bd198e95969e65273b549ad81c674d9ee7c2d733fd8278c5948558315e9ad058cee224ee6b42ba54ec828597afeccaeec43fc39ba4554a018ef2ee6"}], 0x148}, 0x4000800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c40)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x440020}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x4048080) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000001d40)) openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/uinput\x00', 0x802, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001dc0)) lgetxattr(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)=@known='system.advise\x00', &(0x7f0000001e80)=""/133, 0x85) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001f40)=@generic={0x1, 0xfffffffffffffff7, 0xffffffffffff41f9}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000001f80)={{0xa, 0x4e24, 0x100000001, @dev={0xfe, 0x80, [], 0x15}, 0x1}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x3, [0x5, 0xffffffff7fffffff, 0x9, 0x761, 0x4, 0xff, 0x8, 0xfff]}, 0x5c) sched_setparam(r1, &(0x7f0000002000)=0x1) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x40) setxattr$trusted_overlay_opaque(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)='trusted.overlay.opaque\x00', &(0x7f00000020c0)='y\x00', 0x2, 0x1) getsockname(r2, &(0x7f0000002100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000002180)=0x80) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000021c0)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000002200)=0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002240)={0x1, 0x0, {0xa5, 0x3f, 0x0, 0x5, 0xa, 0x0, 0x2, 0x7}}) [ 811.250062][T29678] IPVS: ftp: loaded support on port[0] = 21 09:20:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:26 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0x0, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000331000)={0x8000000002, 0x4, 0x7, 0x4}, 0xe) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)="1cd1a7cd14318c315da6d9b0689d1439e4b9489b50ddde1f8a3f1dff3ab20fd86e8956113f21c7468d964cb4a815ebb480c1a4f465a3cca18c989460321a", &(0x7f0000000140)=""/105}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/29}, 0x18) [ 811.540934][T29862] IPVS: ftp: loaded support on port[0] = 21 09:20:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x4000000000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xbd, 0x279d}) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000014c0)={{{@in=@empty, @in6}}, {{@in=@empty}, 0x0, @in6}}, 0x0) 09:20:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xf0ffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 811.902435][T30052] IPVS: ftp: loaded support on port[0] = 21 [ 811.930300][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 811.936111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 812.091809][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 812.098780][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 812.263035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 812.268884][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 812.274749][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 812.274796][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:28 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:28 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, 0x0) 09:20:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x8000005, 0x5, @value}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0xfffffffffffffffa) 09:20:28 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x6}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x200000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x100000001, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) [ 812.662803][T30220] IPVS: ftp: loaded support on port[0] = 21 09:20:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = shmget$private(0x0, 0x3000, 0x54000040, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/31) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @dev}}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) [ 812.713498][T30326] IPVS: ftp: loaded support on port[0] = 21 09:20:28 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:28 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pause() listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 812.901942][T30435] IPVS: ftp: loaded support on port[0] = 21 09:20:28 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r2 = open(&(0x7f0000000280)='./file1\x00', 0x40140, 0x7d) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x2, 0x5, [0x0, 0x6, 0x9123, 0x8, 0x4]}, &(0x7f0000000240)=0x12) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r5}, &(0x7f00000002c0)=0x8) execveat(r4, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/240) 09:20:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd000000100001000a0c1000000000000004fcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x404, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000240)=""/110, &(0x7f00000002c0)=0x6e) 09:20:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:29 executing program 5: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x20ac3, 0x0) r2 = accept4$inet6(r1, &(0x7f0000003440)={0xa, 0x0, 0x0, @dev}, 0x0, 0x80800) r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x2fc14224b18ffb71) bind$vsock_dgram(r3, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000034c0)='/dev/vcs#\x00', 0x11, 0x80000) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)=""/249, &(0x7f0000000200)=0xf9) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000044c0)) syz_mount_image$jfs(&(0x7f0000003f40)='jfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8052, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'sit0\x00'}) seccomp(0x1, 0x1, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x8080) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000004700)={'sit0\x00\x00\xfe\x00\x00\x00L\x00\xc0\xfe\a\x00', 0x141}) [ 813.660542][T30765] IPVS: ftp: loaded support on port[0] = 21 09:20:29 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:29 executing program 1: r0 = add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)='F', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={0x0, r0}, &(0x7f00000005c0)=""/189, 0xbd, &(0x7f00000006c0)={&(0x7f0000000680)={'rmd128\x00'}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000700)=""/4096) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) 09:20:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev, [], {@canfd={0xd, {{0x4, 0x6, 0x80000001, 0x100}, 0x34, 0x0, 0x0, 0x0, "414662dd3895b84d92dda82755a59aae85607516704171a00a48ed572932fa86c6fe5a693545a7de6e6cf81cdbc4204811dae9dfad237426f52c691a575d05d3"}}}}, &(0x7f0000000040)) 09:20:29 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, &(0x7f0000000540)) 09:20:29 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 814.228176][T31088] IPVS: ftp: loaded support on port[0] = 21 [ 814.292853][T31097] IPVS: ftp: loaded support on port[0] = 21 09:20:29 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80200, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x28, @mcast1, 0xab}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x40, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x80000001, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x9, 0x1, 0x4, 0x0, 0x100000001, 0x7, 0x40, 0xffffffffd1f4b508, 0x0, 0x7, 0x0, 0x5}, {0x0, 0xa96e, 0x0, 0x6, 0xff, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x8, 0xe50c, 0x81, 0x100, 0x0, 0x3, 0x1ff, 0x12, 0xfffffffffffffffb, 0x3}], 0x800}) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='net/dev\x00') syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x1, 0x8000) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x9, 0x5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={r6, 0xe8, &(0x7f0000000780)=[@in6={0xa, 0x4e20, 0x0, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0x5, @loopback, 0xee}, @in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e22, 0x5d6, @empty}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x800, @remote, 0x40}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e20, 0xffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000480)=0x10) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="08601a79ddbc27c2b2c4000000", @ANYRES16=r5, @ANYBLOB="00032dbd7000ffdbdf2506000000a80001002c0004001400010002004e20ffffffff00000000000000001400020002004e20e00000010000000000000000100001007564703a73797a32000000002c0004001400010002004e237f00000100000000000000001400020002004e207f0000010000000000000000100001007564703a73797a30000000002c00020008000200f457a674080004000300000008000400b50d00000800020000080000080001001c0000000800020004000400"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x8000, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00'}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2401, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000280)={[{0x5, 0x0, 0x401, 0xfffffffffffffffa, 0x9, 0x7fffffff, 0x3ff, 0xfffffffffffffffe, 0x6, 0x1e1800ab, 0x64, 0x10000, 0xde28}, {0x7, 0x9, 0x5, 0x200, 0x401, 0x3, 0x1ff, 0x2, 0x9, 0x9, 0x1, 0x7f, 0x1}, {0x0, 0x400, 0x5, 0xb3f, 0x7, 0xdc83, 0x9, 0x40000000000, 0x75, 0x5, 0x2, 0xfffffffffffffffa, 0x9}], 0x400}) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000500)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) dup2(r1, r7) 09:20:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x0, 0x5, 0x1000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0xfffffffffffffdd2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x100000001, 0x8000000006}]}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f00000000c0)=0xee2f, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0xffffffffffffffbb, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000003c0)="17", 0x1, 0x8081, 0x0, 0x0) accept4$netrom(r3, &(0x7f0000000100)={{0x3, @default}, [@null, @null, @default, @rose, @rose, @remote, @null, @netrom]}, &(0x7f0000000180)=0x48, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xd1) [ 814.409509][T31300] IPVS: ftp: loaded support on port[0] = 21 09:20:30 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x20000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x4, 0x1fff76fc, 0x7f, 0x0, 0x11}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/ipv6_route\x00') syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:20:30 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r6 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xf3f, 0x490040) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffeb53}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81d, @local, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @empty, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8044}, 0x0) dup3(r4, r2, 0x0) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000000c0)=""/161) write$P9_RLERRORu(r8, &(0x7f0000000040)={0xd, 0x8, 0x3}, 0xd) 09:20:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x400000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:30 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = dup(0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x100000001) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) semget$private(0x0, 0x4, 0x4) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22}}, 0xfff, 0x82b5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYBLOB="3634d6250ef01dfdbb6ed984b22c40cfeb952617e7a80811e49b9df969509bb5f330bce704943a2eee3e2040ffa5e318e83d68af5ac095b35bc6e1b3269b180000000000000000f0c73aafc89db03a0a7d04fee07ac979db09ab28545f568e9540af467eda357487eb18960208282beef492b8612c85b56e085f77a43b981543bbfba596f7aaf6f118ac627cfc75ab10cf545a52febf906c3d39ea4e76ac7adacea6ecbfd29d86414288938277f0bc6469ba0cccbeefde24bab8a0f44d1ec770aef76e86b1cfbf0ea13167aa3b791c07e10109b398c92ede30a2e355d51520457e38f3c40c03c5487fcb9733a69bc459b3545b479a68c0"], 0x0) r2 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2000, 0x3000], 0x0, 0xd8, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 09:20:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) fsync(r0) r1 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="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", 0xfd, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r1) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002800812de45ae087185082cf0300b0eba06ec4000323000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 815.272225][T31739] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 09:20:31 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x507000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:31 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, &(0x7f0000000540)) 09:20:31 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 09:20:31 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 815.861349][T31952] IPVS: ftp: loaded support on port[0] = 21 [ 815.934013][T31954] IPVS: ftp: loaded support on port[0] = 21 [ 815.946310][T31963] IPVS: ftp: loaded support on port[0] = 21 09:20:31 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x14) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xfffffffffffffef8) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000)="459a280c4e8cb558848bbe90fbcdd802"}, 0x10) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) [ 816.109936][T32068] IPVS: ftp: loaded support on port[0] = 21 [ 816.286446][ C1] net_ratelimit: 14 callbacks suppressed [ 816.286453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 816.297914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 816.448303][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 816.454837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 816.462038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 816.467942][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:32 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 817.416677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 817.423348][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:32 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, &(0x7f0000000540)) [ 817.641631][T32257] IPVS: ftp: loaded support on port[0] = 21 [ 817.644446][T32281] IPVS: ftp: loaded support on port[0] = 21 09:20:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x600000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 817.987977][T32294] IPVS: ftp: loaded support on port[0] = 21 [ 818.233241][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 818.239338][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x2, 0x6, 0x3, 0x1}, 0x2c) fcntl$getown(r0, 0x9) 09:20:34 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1000000000400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x1, 0x8}) 09:20:34 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sigaltstack(&(0x7f0000009000/0x4000)=nil, &(0x7f0000000000)) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 818.869250][T32299] IPVS: ftp: loaded support on port[0] = 21 [ 818.952488][T32308] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:20:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000140)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) setsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0) 09:20:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xe09}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r3, 0x1f}, &(0x7f00000001c0)=0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001080)=[{&(0x7f0000000540)=@abs, 0x95, &(0x7f0000000740), 0x95, &(0x7f0000000a80)}], 0x153, 0x0) 09:20:34 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb0"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:34 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[0x0]) 09:20:34 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb0"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01001e65de510001005af23079e67b8cafea1413b97ada8abee0c401e5adea2e302ee9ca798362dd596f4600000000c354bb04ce3da2bfc3", @ANYRES32=r2, @ANYBLOB="3800020003000100240001006270665f686173685f66756e6300000000000000000000000000000000000080bf50150beb5d8d0004000400d30f7d1b5d5012063c2a8b93ce54c115d837795689673cd48fb06cf4af55dd9061039bca"], 0x54}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x5bc, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xbc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x124, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xe29}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4403}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff01}}}, {0x14, 0x1, @user_linkup_enabled={{{0x0, 0x1, 'user_linkup_enabled\x00'}}, {0x0, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x400) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr=0x2, @multicast1}, 0x8) 09:20:34 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x800000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 819.549277][T32675] IPVS: ftp: loaded support on port[0] = 21 [ 819.588468][T32740] IPVS: ftp: loaded support on port[0] = 21 09:20:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xa00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:35 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x94) fcntl$setpipe(r0, 0x407, 0x5) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/netlink\x00') getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000280)=0x80000000, 0x4) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f00000002c0)=0x4800000, 0x4) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x310, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x62, "985a00d2e0f41badea3eae96d4a0c0b494c83d7879eafcf1adc947771960c7f607700dae45dc91886a808df9b639f4ce84f38e1df5b2c49b255ddacdef7d04c239827456528a72bfcdb8e88d30813d3d0292dab13fd3d9f321cb88c060b1144dbea0"}, &(0x7f00000004c0)=0x6a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000500)={r4, 0x9d}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', r3}, 0x10) fstat(r0, &(0x7f00000005c0)) fcntl$setpipe(r3, 0x407, 0x4) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) ioctl$VT_ACTIVATE(r3, 0x5606, 0x80) socket$bt_hidp(0x1f, 0x3, 0x6) epoll_create(0x9) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000006c0)=""/6) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000700)='trusted.overlay.upper\x00', &(0x7f0000000740)={0x0, 0xfb, 0x1015, 0x4, 0x5, "4f88cdd66f4fb3960a8d397b85c13998", "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"}, 0x1015, 0x3) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dlm-control\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000017c0)={r4, 0x76, "ab734f998b36fad39a1889dc408932729bd6d46c205c5ce19e551efc426b57c65f67f3270df84650f5945d7803af9b7bbfb69ecf362ce7cbf660920084c3019340c1d51140f69705e346e0b668d5bd49347ac692cc6732c49f65c4083d1be8aa6f7dc880d1f0345c0bf5ecf6001216a6f51ca5237176"}, &(0x7f0000001840)=0x7e) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001880)='/dev/udmabuf\x00', 0x2) fanotify_init(0x4, 0x101800) capset(&(0x7f00000018c0)={0x399f1736, r2}, &(0x7f0000001900)={0x4, 0x10000, 0xe8a, 0x1, 0x0, 0xd54}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001940)={'ah\x00'}, &(0x7f0000001980)=0x1e) [ 819.898350][ T385] IPVS: ftp: loaded support on port[0] = 21 09:20:35 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x274, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:35 executing program 1: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2e30000000000000, 0x88000) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./cile1']) chdir(&(0x7f0000000280)='./file0\x00') io_setup(0x2, &(0x7f00000003c0)=0x0) io_cancel(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f0000000bc0)="776bc41fdcb85babaae10e1e901599c07b6a5c63271958f7ac66a156ecc69156aa0386dcb38dcda69c28c21437d7d3452a5f042672fa790e1ea670230b", 0x3d, 0x1f, 0x0, 0x2, r0}, &(0x7f0000000c80)) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) sendmsg$rds(r2, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/143, 0x8f}], 0x3, &(0x7f0000000900)=[@cswp={0x58, 0x114, 0x7, {{0x61e, 0x45ca}, &(0x7f0000000500)=0x3ff, &(0x7f0000000540)=0x6, 0x80, 0xfff, 0x10000, 0x80000001, 0x36, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffffffffffff9, 0xbb}, &(0x7f0000000580)=0xfffffffffffffff9, &(0x7f00000005c0)=0x10001, 0x2, 0x81, 0x4, 0x9, 0x10, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x3f}, &(0x7f0000000600)=0x1, &(0x7f0000000640)=0xee2, 0xdbe, 0x2, 0x800, 0x100000000, 0x4ff30197421d313c, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/101, 0x65}, &(0x7f0000000740), 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x12000000000}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x7, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/31, 0x1f}, &(0x7f00000007c0), 0x3}}, @mask_cswp={0x58, 0x114, 0x9, {{0x100000001, 0x6}, &(0x7f0000000800)=0x1, &(0x7f0000000840)=0x2, 0x6, 0x1f, 0x1, 0x3f, 0x10, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x1}, &(0x7f0000000880)=0xb5ff, &(0x7f00000008c0)=0x2dc000, 0x3, 0x1, 0x3, 0x0, 0x8, 0x100000001}}], 0x260, 0x10}, 0x4000) getdents(r2, &(0x7f00000002c0)=""/253, 0xfd) 09:20:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x100000004e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYRES32], 0xfffffffffffffee2) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) dup3(r0, r1, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0xf}, 0x116, 0x0, 0x0, 0x9, 0x100000001, 0xfffffffc}, 0xe) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffff9c, 0x0, 0x484, &(0x7f0000001600)=""/4096, &(0x7f0000000040)=0x1000) [ 820.341075][ T595] overlayfs: failed to resolve './cile1': -2 09:20:35 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:35 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@broadcast, @random="ee80e7010395", [{[], {0x8100, 0x100000000, 0x6}}], {@canfd={0xd, {{0x1, 0x2, 0x4000, 0x4}, 0x2b, 0x3, 0x0, 0x0, "8b1c0da9ec878027cc5de4caceda763490be8d6c14a02682a89347fbc65db93a5e5d2c7220869f97128fcc22ead5d40c850ab155f3a3a03bf9bdc6d7e3280bea"}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}, @gre}}}}, 0x0) [ 820.545751][ T790] IPVS: ftp: loaded support on port[0] = 21 09:20:36 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) connect$tipc(r0, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2}}, 0x10) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000140)={0xf000001, 0x0, 0x0, "2e5a91384b1454b737debac54263927782ee9f50f8a3c95ccd08112a9c0a79aa"}) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xff, 0x50000) accept$inet6(r0, 0x0, &(0x7f0000000880)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x3, 0x3, 0x0, {0xa, @win={{0x2, 0x6, 0x101, 0x8}, 0x6, 0x1, &(0x7f0000000100)={{0x1, 0x7, 0x2b04, 0x2}, &(0x7f00000000c0)={{0x8, 0x7, 0xd38, 0xfffffffffffffff8}}}, 0xfffffffffffff5cb, &(0x7f0000000180)="bb8ed1fd41c661224cc9cd855dc7a3581edd217ddb979707ce36b0291218f73e07e91a0c2dec8749fa9ee7e5c877e18e223a24f2cf7e96c4f39c7ec25304f6e52119165447e6bdbd403fab292dc2e1833e0cb1ddc8b72e4f313c6ed6c4cf79092704667b149164c6d52e1941c5137d22987446aef5bba83ed21b8359ad1769b328e47468cb948a3fdf5753693886911ff5e777e15aa6012662e376b39224581fad2e3598dcc897452704ee7092a48c4307faedf524ae30ea3e6eb58f63cb36eed6d7f5317c97922ff1ea26d93204989a9ea5d42d09173676eece7d32a1c3333694800b74be8f136ee4d9fcc168bbbc0f2bb410b47c0e1a50732dd5d0", 0x8}}}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000003c0)=""/250) preadv(r1, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/219, 0xdb}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/81, 0x51}], 0x4, 0x0) 09:20:36 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[0x0]) 09:20:36 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb0"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:36 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x666f) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8) 09:20:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cZ\xf1\x84b\xc4@\xb6li9\x1d\xa0\xd3\xacgrouM.cp\xe5\xc7A\xbc\xb4Z@\xaa\xc7\xe8\xfc\x83\xa7g\xe9\xc2\x9e\x10!]#d\xc5\xd4\x98\xff\xfcJ\xec\x15t\xecX\x02\xa0$\'a>,\x1e S\xba\xae\xaa\xb4y\x0e\xa2/z\x04\xb1\xdb\xce$)&j\xf8\xd6pi\x00\x95\xd7\rR\xe4\xae\x86\x9fR\xfe\x1bp7\"\x12\xf8*\xba:7\xc2\x8c\xec\x80\x15\xc6\x83\xc0h\x81\xa5]\x9e4\xd0\xb0\xee\x8e\x9c\a\x13\x813\x80\xab\xfa(\x14+\xe3|@\b', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00h\xc8\x8a\xa1\xe4\xc6\xb4\x1e\x19\"g\xeb\xaf\xfe\xb4\xa7\xde#^Z\x93\x8b\x981\xd0d\x12\xc7g\xb0\xf9Zb~\xe4\x88\xa0\xd5(\x00\x00\x00\x00\x00\x00\x00\x00\xa6\xbc\x18P\xaf_\x11\xde\x05b$\x9bR\xe4(h\xcd\x11I%\xa4=\xa9\xe1\xcf\xe09\x00a\xd6+\xea\x93\xed\x96\x03\x9e\xf2\x02\x96\x99\xf9?k\x95\xf7\xd14\xb0\xc4\f\xab\xd8\x86\'\xf7<\xbb\xe4W\x0fBI\xf61\xf5\xeat:\xae\x1c\x98\x04M\xf6\x96\xb2\x89\x99\xedeiDK\x90$+_LF|\xfe\xf1b', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0xfffffffffffffc6a, 0x2) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000) [ 821.107365][ T27] audit: type=1800 audit(1552728036.506:191): pid=924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17502 res=0 [ 821.178049][ T938] IPVS: ftp: loaded support on port[0] = 21 [ 821.198334][ T27] audit: type=1804 audit(1552728036.526:192): pid=924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir541978994/syzkaller.PP9HU2/928/file0" dev="sda1" ino=17502 res=1 [ 821.239698][ T926] IPVS: ftp: loaded support on port[0] = 21 09:20:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xc00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) r2 = fcntl$getown(r1, 0x9) ptrace$peek(0x2, r2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) ptrace$cont(0x9, r3, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x151) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000180)={'veth0\x00', 0x9, 0xffffffffffffff01}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 09:20:36 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x20000000000000e8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x1f, 0x0, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x100000001, &(0x7f00000000c0)={{}, {0x0, 0x7}}, 0x0) [ 821.548226][ T1150] IPVS: ftp: loaded support on port[0] = 21 [ 821.610642][ C1] net_ratelimit: 16 callbacks suppressed [ 821.610650][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 821.622117][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:37 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 09:20:37 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x922, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdba}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff6000/0x9000)=nil, 0x9000}, &(0x7f0000000100)=0x10) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x1, 0xa6cf, 0x1, 0x0, 0x568, 0x7, 0xc1f7, 0x7d1a]}) 09:20:37 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x17b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'bridge0\x00'}, 0x18) 09:20:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x6, 0x0, &(0x7f0000000000)=0xfffffffffffffd5d) [ 822.134719][ T1660] IPVS: ftp: loaded support on port[0] = 21 [ 822.417335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 822.423180][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:38 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[0x0]) [ 822.578706][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 822.584576][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:38 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000100)="0cc4089cf8c9b123544907c16f7eebca47cd82b98027ea6a637a5be2bcff5d638d4fe2ef27f6a7d0e75f931ca0cf95ca97204e6a981cfbd0ed8f1c09ac223d44e904c919498da130eac33299a744fea221931957c8fdd38e00b35ddcf700ff1a5cd9df411c40bbdf3e5c9f0b") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x88042, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'team0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 09:20:38 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ftruncate(r0, 0xffffffffffff8000) pselect6(0x40, &(0x7f0000000040)={0x0, 0xf8, 0x2, 0x0, 0x100000000, 0x8, 0x9, 0x7fff}, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) inotify_init() pipe(&(0x7f0000000180)) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) [ 822.740010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 822.745816][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 822.751682][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 822.757456][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 822.766491][ T1815] IPVS: ftp: loaded support on port[0] = 21 09:20:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xe00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:38 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={[], 0x1}, 0x4, 'ip6gre0\x00'}) connect$caif(r0, &(0x7f0000000080), 0x18) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) 09:20:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:20:38 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000780)=""/155, 0x9b}], 0x6, &(0x7f00000008c0)=""/254, 0xfe}, 0x10000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="5f42374dce16c3209741df423471799151a2c44929dbf4c92a75527b95d7af9a2daafd56785232b55b72346ede680c5cf797f3747b5e5a2077b10ef34deb82aca320cd417d43e626c21663d53d93e5350d68906b6f86ba67c144b26d6b874416eac792b9972d6c80ec0b87b6d122b3ef475aff8a8c1aeeebb0abd00d847918c2f82cc002a097ef8f7bf00d92f6ad0dba42bc728eaef16f21827bef2385d062d85016c0c3cc135c902ab8972a75af48dc5e502bd9fd4f7e896a18", 0xba}], 0x3b8}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x2000, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) fgetxattr(r3, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000140)=""/126, 0x7e) [ 823.087503][ T2027] IPVS: ftp: loaded support on port[0] = 21 [ 823.098158][ T2030] IPVS: ftp: loaded support on port[0] = 21 09:20:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x9) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='locktable=md5sum,spectator,nosuiddir,loccookie,localflocks,commit=0']) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 823.428467][ T2341] gfs2: commit mount option requires a positive numeric argument [ 823.470638][ T2341] gfs2: can't parse mount arguments 09:20:38 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x6) open(&(0x7f0000001840)='./bus\x00', 0xb, 0x0) 09:20:38 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 823.587968][ T27] audit: type=1804 audit(1552728038.966:193): pid=2392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir541978994/syzkaller.PP9HU2/934/bus" dev="sda1" ino=17520 res=1 [ 823.691710][ T2466] IPVS: ftp: loaded support on port[0] = 21 09:20:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setsig(r1, 0xa, 0x33) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x10) r2 = creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000480)=[0xee01, 0xee00]) mount$fuse(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000003c0)='fuse\x00', 0x1000020, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000160000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c64656661756c745f7065726d697373696e6e732c61756469742c6f626a5f757365723d2d2c646f6e745f686173682c61707072616973652c00352ad2859748f68e9363ca16462b4e1476fd383e77904e15c81844106f825ae92c785961d5a1d64fc247109e0e13fc33ab9f9b7c3ce40beabf1c7c78a94402c594d22dab58fd746a76640a9dd4d74706a50f720c90eb100e685177e1e11d3aa011ade9038678a29276f4272fdbb8ed8c5156147c65e465a5205ae193c4369cd2"]) mkdirat(r3, &(0x7f0000000740)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000580)='.//ile0\x00', 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) renameat(r3, &(0x7f0000000240)='.//ile0\x00', r3, &(0x7f0000000140)='./file0/../file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8947, &(0x7f0000000100)={'ip_vti0\x00'}) r5 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x70, 0x5, 0x1, 0x0, 0x5, 0x0, 0x2, 0x40, 0xe, 0x80, 0x6, 0x7, 0x7, 0xfffffffffffffe00, 0xc000000000, 0x9, 0x4, 0x4, 0x5, 0x0, 0x40, 0xfffffffffffffff9, 0x6, 0x6, 0x0, 0x4, 0x3da, 0x9, 0x2, 0x40, 0x3, 0x200, 0x2, 0x10001, 0xe56f, 0x6, 0x356b, 0x0, 0x10000, 0x6, @perf_bp={0x0, 0x2413cb7a01de32c0}, 0x1, 0x0, 0x6, 0xf, 0x6, 0x4, 0x2}, r2, 0x9, r3, 0x4) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0/f.le.\x00', 0xe, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000006c0)={0x5, 0xa, 0x4, 0x400000, {0x0, 0x7530}, {0x3, 0xa, 0x4, 0xfffffffffffffe00, 0x0, 0x80000001, "0f603f3e"}, 0xe4, 0x4, @fd=r2, 0x4}) ioctl$RTC_WKALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x0, 0x0, {0x3b00}}) 09:20:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r1, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002a00110300000000000000000027fa78e0677535bf3d44048bcd000000"], 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) [ 824.012816][ T2570] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 09:20:39 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:39 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000001, 0x408080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x80000000, 0xd2, 0x0, 'queue1\x00', 0xb30a}) setsockopt$inet6_dccp_buf(r0, 0x110, 0x5, 0x0, 0x4) 09:20:39 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000140)=@hci={0x1f, r1}, 0x67) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x800, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "55ae887930467fae3d43ffa5fa7209934fe0d3e57421f67ed8602d6d741fbc0e84946297e8f536a96450b1533ad7cc6f90959c54483f6d309fc122aeeeef15fc"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)) 09:20:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x1000000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:20:39 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f0000292000/0x1000)=nil, 0x1000}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x40000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0) bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 09:20:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x2, 0x400040, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f00000000c0)=0x4, 0x4) 09:20:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='proc\x00') prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 09:20:40 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:40 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x204000, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000600)=0x5) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x146218da7ec60354, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25030000000c00030001000000000000000c00060001000000000000003400070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00050007010000000000001c00070008ba0100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00030005000000000000000c000600010000000000000008000100000000000c0004002285000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r4 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x6f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea56, 0x0, 0x0, 0x6397, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)={r3, 0x0, 0x8, 0x100000001, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r4, &(0x7f0000000080)="e0d93cd8c12085b1a62364400755db99720ff4b399dfe25771339541e064d72939ed37d719a6f4b2d730a7b073e9d27b5be49c9a6454066938be35efdfa7fa40d7301fe370c15fd22fd90b6b059bcecb107d2e9d8e95696cf3eef5a5558e8aad164cb3508cfa57164d572fa07439e14057eb8b4fc4847776016fcc6d705744bcb0d7559d9a132fb4f1b2312f406239e48a9500f457809d2ca41867872548e3f765ff51f6f29217bb90f8fb8cc04301e9acc0636ac6addd9e5859f04531c39aa19577f8ed24da", 0xc6) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='Z\x00') 09:20:40 executing program 1: r0 = socket(0x4000000010, 0x802, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="54e4ac73ed56ba8aa7aa89780b03bfc60dc57fdebeb566bf681bb7bfdb3b495d3d02d73b7601f06c2ce664cb979586922e459b495426a9910264c3bce121f0627b841ed0ac05f389ba9e303c38a12cdee10017569c2e7b7a669738cb5a0c5da94f6f28520dfee0bf661a6953a152e5dd2fda4b73") write(r0, &(0x7f0000000040)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800020023020000", 0x24) 09:20:41 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002e80)=0x43, 0xfdf0) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) write$P9_RWRITE(r1, &(0x7f0000000240)={0xb}, 0xb) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x40011) 09:20:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 825.859766][ T3908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 826.703323][ T3910] IPVS: ftp: loaded support on port[0] = 21 [ 826.773479][ C1] net_ratelimit: 14 callbacks suppressed [ 826.773488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 826.785014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 826.944941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 826.950765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 826.956636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 826.962407][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 827.913158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 827.918975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 828.709600][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 828.715440][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 832.097703][ C1] net_ratelimit: 16 callbacks suppressed [ 832.097710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 832.109168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 832.914468][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 832.920332][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 833.065693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 833.071452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 833.237166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 833.242983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 833.248891][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 833.254643][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 837.260500][ C1] net_ratelimit: 14 callbacks suppressed [ 837.266200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 837.271961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 837.421881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 837.427647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 837.433488][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 837.439230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 838.389874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 838.395683][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r2, 0x105, 0x4000000a, r1, 0x0) read(r2, &(0x7f0000000000)=""/64, 0x18) 09:20:53 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x3f00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:53 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "d35d20945176629e"}, 0x9, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000580)) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000005c0)=0x2, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000001c0)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00', 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={r4, 0x8, 0x53c9dfdf, 0xb, 0x7f, 0x0, 0x1}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1ff, 0xac4, 0x1, 0x1, 0x1}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)=ANY=[], 0x0) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_settime(0x5, &(0x7f0000000640)) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000340)=0x166675f32b52acd2) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x942be1ea52fb9c13, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, 0x0}, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioprio_get$pid(0x1, 0x0) 09:20:53 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:53 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 838.531518][ T4023] IPVS: ftp: loaded support on port[0] = 21 [ 838.534277][ T4029] IPVS: ftp: loaded support on port[0] = 21 [ 838.555883][ T4028] IPVS: ftp: loaded support on port[0] = 21 [ 838.564655][ T4021] IPVS: ftp: loaded support on port[0] = 21 09:20:53 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xa0000, 0x1a0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x501) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000011c0)={0x100000000, &(0x7f00000001c0)="1739e33ada56d8c5ec01976a68c6f1436ab622f921815ff5df307f704132d82eeddbc9f13d94b8f8e90bbfd8cb2480a101219051f78ea441f68e5f6bf90674504397a8c76150036d0d0888d6bfe6b6b135b622f96a196631136284dad1ba21c62b914735d20e5456764b0bb85e64b45421819e395d728b4309795911a61b6487c73d365664cfa7f6aad5c3c713aef79c617fff0dfaa6e8720575b032abbaf438c3755d2a19aadb634ee880d2884a10dcc0e0d0a366e2bae698e6406d7c20dd7a0673bcff0020e85222fa8d1a4954c1ffcb111dfde86e4a7bccdc84cf0701426985c6e30520e94712737bf034b031c7f48a6663e7c605170aa89109b1d7931b689dc5f1bba2c0146028cad71e583bef029952834077dd2e143beef104974e2bbddb003db427661ca84a063673f9fcd1096a267df6d01e95cf4f85393a5231bcb86c5c2deefb46fd21ee0e7ef0fd4334dbb9218c6205c2e8fe9b3fb21ad824aa729356a68475ef3837de53caab47fa0c2fc40c51ad503c61f6a85b283b92a9d74b375c2b798c116ec38c261b31e582251af037b3fb0a0d5839088026de0f548b6801aa13c3d691a61b42ee95392532824d9b6eb26c8a18a08843622e7dffb722ad83943df138b8591d841a94604544a419c7b117293c2f1de07791b34acbb4f1a65d4495caf83698fab02d71e93a4ac05fa2db28b75be6dc5c93c2277bf6933dd94af1386ae4043061ec2f5f703dee8cc4f5be6e73f733f809ee89e6283c84f71243114e23e7a3593788b61246d3127d37163a769d832d6dd87750d35fcac3bfc5153fd02e17629975c9fd939b4b0e78b8c761f028837db013924dfe9f273f014b159c5b67b9de87d50033aa1be1ca671428b64fc805d4e517685ec40cde2028fa0b8efd8e4208344b026734f360124ad96cc8ad230831526451ec92143759d368b199fe154b0e7a65429156e5c5c505c01f24a37edd3dc2b97ec6c966f447f8aedfe3a3857adf6e17d34e1a8ce2b30b432f22cd9a63c4fc6296de2c3a7baacb6b56fe087bf8e425c8b63b59c6f8c25053265c518f71e1a89d7061601da32f8384d500064261364a2b441495b0c6066ffeb91b949e4d9eeac9472c9cdc901a689237b2bd6e93df851a037ba4307cfe84c323610f3791321f25140c861a48167b02fef93f9687cb40e0546785839092b7492b782696342e6d4206d3af6b2f6777167db81d92e898ddd8de6a6b57db16429a9e98ddd344e7f2c3c3f23841690c874314656b772e227d2f1d9ed1bd09af2a93208884ceadd8d784d13ba287251ccbb7359ab6a86a06524073d0dc8f586b358c893efb03d8340d16a5f4ab2f0a6f389917c5a8186e1575a10d497211610176bdba3191f3c1dcd61772fb89ad36b9fe43a05b9c5aacd2878889b20f11bda1c4bba20afa1289501d2d48dc1a691a842b52fd3a20282117fdea8c059a864f267c1ff2886c915a02be8d8e72919468e8b4f392f70ccd57a7bb6ee3dc8de220343430444edbf99eb1c0fdabb6c66fe46ea5e107b82b076e2a2cd05386f6c06409751ede26b09b7d6427d3a27be37b16cd6b023a64e30a9a659059716543ec5abb2b6dd4ec2b14c6e0a1cc62c493a7dcd22985abedbbc5769e1f7b79d6380c54e7449e7d8a03efa49bfbf580f0fe9b81c8753fd2f1b79b30474da18165d7ee959ed5921926c23a261a19e58e717004ce59b74a29e4a6b4e25f090d4a4f0f8cfa71846050678daeed532dddffd155513189fb814cb8c0d4fcf627d87fa7efe9c081936b0c4d7ea48bff37d9751bc7476b90097654a020462004b660be9ec2e02f20444a76a1b8fe65e3d07bb1556c8ecd48d45c02960de770c91991dca8fe7448742ce3165f9270915309524d0f17088cec9f8a2e4ccad4ddc3797639047dbf3235c2cb3e58489de916c89d31b4a499efe88d4b1fe56812d1c8906be8382ca98186cb251ecf0230a9852ed8850d42d307c24e631f925bbff44bfaa54706f50fa560954ce6bb244df796c4338800f08122d0ea4297bd218bbae57b4f5d05748f2d3911a1b7f987ebca9d89537431d007550db4534a36b9abd303f2f74ff9c94b1a11f455e206b7ea9cd522ccff8291799982b599c6bbdebcd16a824b7cd08f5e015c1c1c09d1866dacd37af914212e15068b38c905c3f6e8abdd40aaa951ab1fb3a01c92b450a4f87a2e1b5b546acecc4f67ba5c101eb92614db84ddc42466cd8f43068e8d938acec346e08c8d6555342e47b7cc3eb2ba3f4318dc93045d21d4a950a74295285e5425fbf1c152536d97435d87c0055f8169b4e70154a2cc3af4bf6c077fd38b76c31590561edd7acd9492357a5e1d2b9d59d764f411b412ef62083bf292b1fb8bf971b449a65c0e76da7e4a429d0512c29277246618ba7fc0558a98efc86848589eefe1b91ecb40808b5d993c4c059b0422505af6fab9b81d2ac2817a893f764a7f8b75cf55bce2a1a51d4396a0429ecc2e88bb519ca2388ee661dd203224caaa8357cc60033c7a6c1026769bef0dc06db6b4f975fc5eeb10c4b3dc1d51efc8fd1c02c4c3ce1c19557a796aea45775b058658833b65ab64f7c93ed4c80ac39ecda67941b884af1a7598578bc552474e6886c4eb1f5f337c4f15b5c1b2c41abd57453e7af251afcca58c65b3c6fce3b66f7f58db5bb06014349cb887a8fd61be5de74d8462b3aa0e5a083c94c90916e172e78c2e2232c6dbee1508be1990beb09c2eade1b64121cc1b7c4ea7c621de7ccf69bdea2a82abd9cda80f401680f54eafaca940c198cc5e18b03d18e30eaed15b29677f4ca156f7ea021129be5a1b07cbada87f327c08fb8b24ed11e49a1b9b363ecb861a175bb2f24706b3907d5b67ebc4c44ceed99c93b9b1b74b1fb8ef45556568d31bbd08b0099a49381753e995ac37543e4dea2d2ff366d1682f6887a973d020f5bc12c8e565708b6dc0cd4c2f45a15b7b503be83cde904bf36e8ec6a15a9e11fc8c34543e7977f474a7ce23cdbc145a3fe43381619256a1ee8ab88710a502237e249ba25aec582c81457b4d87aee9ad7437b01b2fe1830472e4b81c1ae471c2d26227d710dbea4c4223579da0af362e6cbaaf981c101c5cc08b574278efdf478975bb9f42a0c5ccf6ea5b4a3dd1f464aeab7dd61971100697001ce076b86493aa9464640752d81d4498b799249470babd9d2a1b238b7c388b87dc86b961a3119c91e78ff85e935fe0a39595a794a7f2152c7725d18c7192485096901ef963e92b64a9585de84449a614880148e4444621f2e7fe893b663385841deeedb8fd924b3807a24a59b5e74bf26fdfd229ff45ef4a79f5698b82b4220e026b185dce5cac17f3737723406e6c2692587124b26a7100c8afc04ea0ed9063b58f9084710ecf3b431f91254533be3f7a81842da8c7e64d40b5f8d565c317c7bdd6520d076de9dae21512f81f58cc7da757e9c15eb37a5611424da9327611956aa5052674214dcced2ce832c5dd0f84a5149abd2d5939da258744ce057893f3cd11b9bd29d0c05f0c920ab52a98ae9462da3d5d05e8f65e3e72bf108f6de74eae980c0b209edcef64060939933b511b458c22e70e85c8deb2b3ab74ad3b25018212641052921d98d851f27a9cb1a8c946e540caa3a3aac33108710e255d2cb4c2595c724bc393c349dee88c4d8ff2e0a025ba9b607cc5c740032d6f47c7cbe60d0a1511f5856007a62be8b19136459f696956dd221b4b86b4862d29da8b8d2415d8aed68d86862f0879b95a98d805e44d4a3bc8d8af5bb9687212f7f6ae6226c723f4554d9d83f915261b6960d383e413ec1cf46982be24c21ff4a34313c65a4349b187d25b40afaa50bbc49da71ddfb838621a80b306804d4fbe3ed3b367c80bb6ba9ce1ac7ed57d7f739dfb87be0f4054c0a36b9e07717a3b738eb99d7c67b17cbeaf1fd74b1d354f4ea95cd2903eec4e4842398d598c878016269653c6a85ebd7b012f98fa837df4547040a425814bbfe35975013d9a6ff1c3038033b2c5a9bd9da45e4e370f28395a4a2c6af5e44ee6edcd2c0961bdde6d6965c4d817ce6659865eadfc0dac573961c1cf276b617bb59ebd030ab2d72c78b85943d987dc308763bac64e80f4df126f727280a016265dbdf21caf786d2d92b5208e1e5c22d23a02385a23e8625cb3ccc8de42a0d1059a4df49b3de8fdef7fb19d1d82e1854f2c4aeb51169ab1983a423411b03958b3b46e64f2445b095f6b9f5bb22e0ad26f49bcd32850ee499fde74047192f3e14990e36263c8f9be8b7655d960134e7ce59362c8105478e9868c3392e7861a24be9a3e1d639a2e5d6083f8811f6d67fbe4f275bc64865947b86fb3dc03a5d86cbdf87ba95b6972200bc2c35ae9d497f393057d0d2936604a2c79a7ed9b2fc8159fe71aa28c54ac7682e749eab713b9a37c5bf20e6c08f8c5c4e8a6fda115f45c5a894195e375dbbf6003ad0ffdf528ed73e0c6f14f21a38b281ff3540beca3cdc17052065d7112b1fc512095cf9f34626f82d009b6b072c14c161e02af80fefd488dd663b51feb29668a22138fa929aedb1bab437afb448f28d73042d463214aefa6096c069c9c4e38c6631cbf9fd54f31618afbea7973648218c63734b812571dab119582840a57bbb1d66bb3d4b8ba053de53100e7c10ee4a6dfb5ade4f761680287cc4ace793b097a2f77a6ade05d6d70221078a34ad8ad1b4896283d4d1f33460cf6706a07a69677ae86906b6de32277955c55d93ff0a07f5fbfe1a8e3d84854a8e8ac30a7da859f08608a189779915e973a7ad872e2c6d090a5bc4851a5f2c49d2b9bc5958046db0e3c5167be521ad68a712edef958b4b474edb3237774ad573a3bf28dbb127ceb237388beb14c8a5e14b05595803aeb579b4cffc48383495d4ffc12176e512eb67be2dac64f6556cfec8360c3cc4362c74bf13afa0aa4637ad8af4e2dd37108e030741c5b3f52d25361cfbb86917c60a838d69d5fb5fbadee54a7aa63e7a1f73738545691dbe59220e46cb86be6660a8779b5ae53a6be545332816ee9e4b18e9544fd378e6a478db2edd8e2e58012754bae4127df069412dbd51455d4aca9444d77fac53310bc68ef1935465fb4a6850b7c2018834db67405daf9244e98cb66f558c0d22f24c96caa1cb93d241a2e67b832efe6a43c5513d07bfad5a835d265bf52b01323433698678102b2f40c4df0f9b711e229d37b4b957fe6daa0fe041b770e5dc14b160a7a2a65637252d7e78c23d9bfa350d35134a501a105010c022134425360b968ffde3b6bbb050bdd3239d5b31cf8ce23aaee9764cff83b832c460fd749e763e77e85296b28d0f1b8fc91fb353b60bf2900c2245abe41cd388ecd813d0875d1c2257e7df70a571d2433b71539e8d5548e23736883998ba4944cf02c9b095ed70281da0096ac7cb3780d88bed8196059d959ee971ff3757f33b9d8d9686ee0fd2e37f69cd6bf8ec9382ec20a84abb2d78b2d687a849cb951b66f585c762ff4d13e52f45a36dae1e65d7d7145aa06a4ca918ccbf3766787b75f23a89730d89dc702a9c636e0f49d2081e3eead567aed6043767ca55df16db99ba3c59f80487d500df6f3e1f2d4c01a919e847a36f005a5235e5f22121194192d5c87948463d73aca65afcbe07b7977e3d3d3b2dafe9bb25e5ac47c6606819a8b230e47110484b6213d80790893aef29437e1bafd8a6c5ed894d6bf655eb58b0334e7b46fbdf9120cb35fd6d5af54c10824e668ce3dcdf8550b82ce790922c56e53e933f814af24bae5f2"}) write$apparmor_current(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="7065726dffff74203078303030303030307030303030303030335e76626f786e657406000000000000003a737973740000000000000000697c66fc00fb5edb3c8dbc1d4d4ce63d07a0b7c0f7d11125839a9093a626dba5c4c598ec13b642e1950e121f3fb9cc594cadf7afaf08c9d56f57d858b8a45c14859b4b36c849c9c53066a81baefd1dac6596daa451215f21ae41bf99ccca0781fbceda162358e5f793dd3b091f2a6e90097cdb4f36af479515b9846b081490dd352bc5b624af4a49922563ed22dee8f7c2457e19fb8ee87b1cc559f42e58316dd2"], 0x33) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xdb1) capget(&(0x7f0000000000)={0x20080522}, 0x0) 09:20:54 executing program 5: io_setup(0x8, &(0x7f0000000000)=0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x60200) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) r2 = socket(0x2, 0x3, 0xff) r3 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") poll(&(0x7f0000000140)=[{r3}], 0x1, 0x1) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0xffff0000}]) 09:20:54 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400)='/dev/hwrng\x00', 0x10082, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r0, r1) write$P9_RLINK(r2, &(0x7f0000001380)={0x7, 0x47, 0x2}, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x8}, 0x2c) pwritev(r3, &(0x7f0000001440)=[{&(0x7f0000000100)="74120ecc6341596077dab060c42a5828bb2ef635f73346ed8a7e15fff8a7289c50f0e3d2cfa87d572fe41fe0842e05ec850639ebe8029068db7fd5914cb67c23f594b59ea06dd0070ea8a9b395c8169e1a25d690bb77581e549b9e48a82245a0e3342fcbb12f86d1e572e29beca8ed92da6ffc851c6a933cd358583cd320abebcfa33b6e6800b65fac42d880c1a2afd7c6b955e6dc52b15b5bd9ff01788cd0b5125af2392b8526ea3293f50790b87d2571b46a0a1dfbdb32a8bbfd81d5573d3ee3", 0xc1}, {&(0x7f0000000200)="b7398380e3630695d2f02c459222320bbe5614161f62d6a59339f6e9a0504e6554649c1f37ebd29731ad1a9d0ed7443b4e254ec4d520fdc54c7b2ae5df1e64fae1c874d14eb8f1dee9fa24dc244b4cd832130c39dbf152943397dd332756e15590bcafadf40b18a02206ef3aa1d5a6040f4f2285eaddd6b31765e90277f2641180bec2f6c6910bd9c6346bebe1eea6c151ff44a6b6626ab1d77b31e4dbe71d2c9c3d45d22877610d9b91563eb49258eab0", 0xb1}, {&(0x7f00000002c0)="b542caca9201e50c68ded979ec191e4321aca87dbdc1dadee14443e61b15501e3b2749d31522b45fdc954f4ec2029cf5dd7e4e6a31de872f904ee8af5779d10d273934acc8878a8e4af44ffb9ec322b6d76d81956de80d802078efe5d0f7f250d9306bd06b4248059d4ac68e2043f25f4ce8aca06bc39f9e044f4e6c11bafb76c4880c32b8e0efda36daa14bbc4af328dbf879e2bce05865efff48d28aeb44502184673973ffb4a9472d60ddb6673ed1ef00a19dddc6bd40204935c94c52012ec7ef9a001c3fcc492ecf2dd871e25082691e8bce63c65501c14d75cd633ffae5ce771e7e691ef5dffdefbb0a02ab60bc8067c32edc30a4ec13d11d155fe32acf513d765ab4c42ea62e976427932dfabe57d5224ff997ed6a12a1c9c17b7c82fac3f73ef53439e5cf7296e2e354eb1d5fc6e4dbdf9b2bc0ce84b3260ac51b20f1917cc7f68d777e6a63c01a9adfde4bb77f09d52055b51a65fe477a6c663200f50e30a954b618d4dd235be757e687569f93b1b12d731a190ebef331a3e1d29f4e384cea242c3b79b1f9f7887af238a42d0ab9909dea3506608ea0e5be46977c9ce4d97a4e39fa1e3b46c2b1ff0c0e6b28b4281a3a299f4446cc7a391e34ca7d5e34c6a534d7d4b05d916fae8a2ee872391a9987ccae37dcda20720b7cfec0a725a267e3d7498dac351f25475796d711499ebf5507798efa1a2b4ac8ed1d0fe53baed3fbf7c5b963cb43f526add10f911fdb69dd9860a4fed07cd59c7477b5b3e59b2e893ab5e29a645d76b249803e72498bced004299f24c6be185834e39992d3c23095b25bcd109cb6a1dfc2470bed4968f3896288e3b533fdbcaaca3d6e5001fa4ad467223ac28243d7c16686847521a2b7ae671690f6b5226642026d37a592c7dc85c64f2779f5a30d41f3a57dc87ccd86b61c03b46b0a00e2a7e0f4c445cc673e66582574c45055de9c8482694d5409656fe737477a3eb435a881f6ff5f455920f9857c72a4e291930959612629ca46e16611f87673b5ace0dbc044295f36c127cc3fac9d1112b5c2bdc7c6f1e8831d1c49a0b8a1f39b3568f8d242db2833cd05f9c8062d3741488b277e545be1d53c4f70d8be83f9841479be7300d33d580f756afad72dee2ca0a9ae0e57c7371c0327fced000ae45cb2d24415897b2440c0a94d3a221e7f22b679235be04355123a855e72e3ffb9246ed3b73ea672db3e86de4d3d27b68ae4cb62e33df8382ca7d61d99cdff10a5d4230d993ce3087e3919e0ace3a1fb5f694b044a97ee8a966b76a2bc21f110f6fea8ca17070ec66f59f8947d4493821ececb1b7c86be3f7bc4d63c5fbb0e3fd9c398d04a02b6825f5c85b3ba26000c259d9a9b8d8e094d9ff2f70a4d6c9f958062d5c236ea2c007562163005924d72286cad355acdf8e9576af051c4b775b2fea0b39a80045f428ecd5c976a839ad6dd3a5ee66704e0ae04dc5be73f23684b7404bb81a95c49d2b9159be18347ad6ee08af3c303ed5c730c57f296411931b4080f9fab25accefeecda84e7ff457aad400482f929daed9ac4c20016b1c6c81d39aa6c7e67406ac57f03e6367d242b46cbfd199581884e3791b7a86377aee2258606ba67d65bf3ab1dc8d560574eaf9975024bd556197a55510a07e9e4d583c6c11d82a4392d30805e589c0c5517ee02acaca0888c5e13fc0fd74d81f6052749b61c8a76e5baf50f40760eaaa382f6d0c11d9b5936d0862ca40113341ad0b6f7c14704dc9dfac6aedf66cf7dd19d93198b247017b6db67f47d42e8cd4c0946b87c294f54164e913db5bea956aae92b3a03537f4f1e026dac979833cc7fa2cb1415916f06685e033ff45dfd556cbc950d2e0597c4db0b83739c00f701f27cbe20248d6bcf834717bcaacd7ebed6eeb743c6bdd15c72ec9eb7810af6cd87b7e76e48766c7acb6cb616cd91c7f9dfb8f3005e813594fdbc9c4b9abb53570f3ba724cbdf77d808815c8c90a02c135d4fdbd05226b068762d222bc821efd24d585994f527d490ebdf949e9612b4542407f402e87797a5ff1971859399ddfb7e3916a8261a7f57c732d1ee3a95b69bbf1dbbb22e817e6eb4def221b71793a877a2929ba5e52a34961ad90565bde1bf17bccc16600d4c4f738b855c1a55098b9ec3ad891734ee871fc4a2d64e76d66511e08b65874745ccdbd58e0d028bfa0812b82905fd9c23ca51d585cc091c4beef27faef1b2b02cfc9571aca232ec684ac10c52157004c8cdae070cf8d5b231fc943feee78dd1c3c59c7c306e269a1f43754ba1b5e479585260d12f2c84dda26151228ec4a8a75cd47eac1bbaf32979071c480367041a03dff0468e5661369cd69ebcaa88afbea37ac564f568e482376e2c8f03e4dff1d2d614442c0f064c08ee17c8069a987721fe6bd97a59619629651aec242dac55f6ffe569def08979cf5b1fa97fe2a63faf00e0156a62a5e3f92e49a24342b8e8e955caa78910ea8d78ebf6273c079ef1bb814e11702b106da7c6959a828d34e2b2857ca30be3b4b7625fa28cc55a35b7bc7be632c0b2ae9bf8cd6b392a428212bd2b86d1e4ce8411359e8b0889eb2398f55a9ad80129ce1d5166bfa8777038b78ccaf75b208b09016939e75526dd3ae01b7ea916fb893abd807e06dbf86a11dc25d9142ebae62ccff1ca2da186a50963c87754ce7ec6c4b8a922041d37a45518aec53381eb0f18f07ee5c4b155316d9bdedeeb74b92b5658378f525ddcce161a8d27c1dd219f3662410d5de4d2caa2b14d45c2b2fcad1afc1a90a6fe374f1005f2ed6b21ef48ea288f081d0dec83afe2eaf4bb82b579abdcd0df96c7ce4bc11d17b8823ca1fa03d2f6577e2573956969505f83ecd25231da5fc54450bb322f7382a761e3b0063ec4c1cbce8a9d6a05cc87b19fee299f7d92b2e099b934ec75b50f83aeb720fb486536b7eb27eb59c30080720979f29ce618b9ad411da32fd04dcc8b7574de67e6afdd68228bbfd77e850600557cb83be1138d07fd95de3d1229683a424ced49001023915e92417fb256a901aea23cbc7127d8038356a783412d2d1a4cda9b88e310a69ca1b30ee95482144437df241dfb803a40f216c7c53535698de6f76c8fde8855cccf41456a9fdae02aa3f24b473a56a6b759fe99b743fa03ae17f1df818bbc5e6cb334c3e0f66dd9709986dbe2716430ab512175f19db3c2db3a4ad817af48b36f9b41507e096597dd1d77a4857d3a4123e7810953863b3f65a4affcd89e3ac8778e4aea53aa5071ed80db3c119c6729dcb7f2b84abffccb6d1b7edeb3184cedd28a199bda2b25b5ef98181ac6de4293805a2e6aa441ac564a19928add295e03b0d47d2542208cce1b9de59feed48d767203a418f4b9310b83a461606cf243732f94c2ef14f5cea44e6c03fe9ce5f8de8fca89d4c391708130d29371c0cea7c5630b0c42ca1b3688c8f24e0369a534776544182446a0e04c0ba0586a2d1f64ba229518f401a651b312a4e281a64c5e065ca7c7ab5646c5b3f5595dd878172b20d358dfa3a31a0c72587d95b8a43935de6389ead819f8a4320cf28596f3d2f04af45da652e28d7c91ad4ff4752f70e7d806cd780f6799978c59ba3e17dae8be479e07ba4cac04d4810218a05c16d5b8cb6e76c599fa589c3ddc0f6f23273a2c7047e9a476672da9f087efd1f78a90e92c849a58645df743dd382b3a131d98d59a11a5cdc4d30d920bd937ece4bbb78923480090af54b5a3332ffe4debdeb2965844fca00f1ec041e2aa71ce00ddffa5240ce9c8ae64c9045253068dfe47011bafc9b6b5e297c412e28aa9c52f57d888550681af3c1218e8c2fd3dd0b6ea19829d99f004f0a3cca7e1a28858944c41ac6cb7b77456062b0e8cf65e912b81b770ef65eee9465eacf0c66297951a4aa0f02ea32a0062e4d04826bf32181e9cb5e0d1801697d32c9b0de86aec16a391740d303c0b246c8818f60a78a5bb8353b7c5b4a84712e2af4179c12f4c068652318e75a19da17190a6078298f4f721e8d234257ea339a58f67320cd763eb52958b6ad7c1685f96131aef852bd1c8e8a7d34458c7c5ead76dc28f20fbafcfbf9158daf88193af204a0f4df7b08934c483f68000b193eae45aa52690b30b3a5e8745dc721037b5ebcf1a8caefe284f81192aed77ae2585a3da8a7ff3ea6c2053dd89949c0af8205924441a5dfc1d33a259b5dc382a84a7f15d9ee6035fe2ddbf8b788ff5a13e09f9aad4d72a8504e9c5878fb4dc007aa6884bd5cf5df9fa5d2e117996ffbaeec3acd8cf2e2098f60956e9f2655439b06ccb7e1b5810190e3582c3d02c4516993bde740de81888c25644c2f62e2fc655002612dacc09ae5a2662d0b1be225c6ff3682974f56e1b8d257f9d7d5162ce8040448b9c195f002dad9c5b1db197ae687b529e349a3fff5cf9df2586d55f3567bb422390ac9dd41f47f7588fac4b2540d55270044fe8db39c7aaa74fa078003bdf5b241f90500f50e64a9a3cc1ee76772ce53df6e2039f232f6198b3b6245cb5ad1c18790a139ecf20da12025671110789e29b1d68b71f247f3decb223a642d7bcf467b650f495e801ef59e3d92439ba33fca600d11601accdbb7221d0d4f2424d27baebb7819b5305c7c42cb4c0c5c9290b525027226387f9a42f2d295fb66fd15b70eab1b8c95e26602e71476cd5e9ec7fe366de554de9c4209c456ec5361b89deaa1bee8ba1e056a2866f63e6e63aab06512166c3684086a71a41a1231045b65215193b5806b0a76f1f8dacf58dcfe22514d3c3d891194b49513bee31ae463ca8eeab1c042b16ff8a5333b7126b59d4445b1a9a24428fa39aaf1e43549337228594e9c67e34e2c019db36c54115a1ac6f022ca228450771ce1dcf613f92af1cbc4d6f03ba668b76c5ed038b778dbb4bc13708fe36e566b8c8ad565b1e37fcdef6a52b3e6367efe41196c6aba539f1f80603b5ad007dc9ad85e5dae38ab7249f8da1cd9085223c0b55004e93e10ca72d1d42469ab5aaebd51ef2b1a362e54b6d0395d244128f83dad62ec3c93357d6c9f59f8b47add6fd007f150ba972f07dda4a1eca6a3e382aa94f982c3a0f043f1434b38145748f8aa6dd323a4b63608dc3f7dc217e5fbdc56e9721b0415b12d4f28e214339d44e0f07906285e2e6a5f99a61416de4dce6c79b0f1a7d8005cbea24b1b5d7c4a5c7825ac28182627d676b80e61e2724497e69f2744c6d41a0c387a04cfa8958e10c59615d972d9994c156e6380c1c8ca256f2a3ccebce670fa70d02baf1e8ae0216606a9b4bc262c1df48fe6f51e4a6d2562c5e11575aa2815e0d4f4ffbf4131a9d2e9a8c61363face1184d1d259405bd50631347c1a6c85a01e409dc8484d130a8519ea309b773ef96bac345964d5a3985cac5e8214923b56a6e2e0921fe8963370ec1c78952690b0b13ca31abf07fdc95d7ed5a62ee30e22c2479804aefe06ceb06e51b7069002c515267ce206a03e1c895526a09e6fa112d8a9916470444e2e7b76a9ec44a10f7cbe32f6279d3fc033274703502aaf2b7cf92787dc820c331c6abe838548843b62055c8cfcda46265861d25e032e56949b81272d10884eb8c8a05110cb5ed9152e57ad9b66535e15f92b4c980eb43222663a47cfb0cd0f41ebba23cf407da001555e4b6f0650eedda1816ebbece02d4cd1ab38c5989ec08e862f9c70e309bae35b98192e338c27348fc5d4876c22677554d8d885049c7bc4ac4c231311622e65b0a1ea1574b873e37bb1e168ba6952e00aae17bfb4e948340a03d92733e7c67", 0x1000}, {&(0x7f0000000040)="65d3346061f1521b20578e35f7a3fd031acee659f0fca5425cd2344679e707cbb21a4ddb7502a8f65be66a044a0dd37e6fa914bb20adcc9eb3441cad49e05c9a8d2ee88b16d366c18e", 0x49}, {&(0x7f00000012c0)="7e67cd95d9cfeec080d20133f48541ab1ce234a9dc9747325efb5c6ffb80648f9748f634897c511219f2f02cfb571b7d49cad67b094ef387e4a952f89c32bdf649a326d708fafa9f09306f99452c06cd2ac81ffd05be68f0acdbe657b1567288dfccff7a956cc82ab3b45c73d96c4031803b389b9aaa81ad358752546d137c713b72bc59cd8d6d91a380a25ebbdf", 0x8e}], 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000040)}, 0x10) 09:20:54 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x80800) write$smack_current(r1, &(0x7f0000000080)='/dev/vcs#\x00', 0xa) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000480)=""/213, 0xd5}, {0x0}, {&(0x7f0000000580)=""/253, 0xfd}, {0x0}], 0x4, 0x0) [ 839.196575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 839.202374][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:54 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) fgetxattr(r0, &(0x7f0000000500)=@known='trusted.overlay.origin\x00', &(0x7f0000000540)=""/104, 0x68) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000ac1e0001ac1e0001ac1e0101ac1414bb00000000000000000000000000addeaf6a435907c1c29eee483f5d29f5"], 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000440)={'nat\x00'}, &(0x7f00000004c0)=0x78) pselect6(0x40, &(0x7f0000000000)={0x6, 0x400, 0x3, 0x80000000, 0x8, 0xa73, 0xffff, 0x4}, &(0x7f0000000100)={0x2, 0x441, 0x80000000, 0xe326, 0x7, 0xffffffff80000000, 0x500000000000000, 0x1feb}, &(0x7f0000000240)={0x2, 0x9, 0x2, 0x10001, 0x9, 0x8000, 0xaf5, 0x20}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300)={0xa7}, 0x8}) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) pselect6(0x40, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x25}, &(0x7f00000005c0)={0x0, r2+30000000}, 0x0) [ 839.410506][ T4103] IPVS: ftp: loaded support on port[0] = 21 09:20:54 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') exit(0x1000400) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 09:20:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="45d61bf29f7bdc690bd08def56f8effc35bcaa602428424fc9a46f996510f3f2dbbaa3382fc3003c277fe3824ef39675fe3633aa459b752a318066cd9a7451b457f9602a14158cb829971f1a4bb0e9f8f59109d2cc7f60cf7998e5754d8fa11ce3e697c3123cda7d67cfcf20d7cd9302078bc66954e1311545ef24bae45f0f0c5c808388f0702f1e414789efc1eed31015885162159516271f8b8d842f11830dc6bc33d5184806c6633ecf622dd9093f72327443b77200a8ee4832ee00000000000000000000", @ANYRES16=r1, @ANYBLOB="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"], 0x28}}, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000000)={0x6, 0x8}) 09:20:55 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 839.908915][ T4972] IPVS: ftp: loaded support on port[0] = 21 09:20:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x6000000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:20:57 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:57 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 09:20:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002fc0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000080)=""/6, 0x20000086}, {&(0x7f0000000240)=""/74, 0x4a}], 0x3, &(0x7f0000005180)}, 0x0) 09:20:57 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:57 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002a80)={0x0, 0x25, "b8f4793421947c1b61d4e7307a1b88c1547edc472910673f62cd2e0fc3f36103ced3143595"}, &(0x7f0000002ac0)=0x2d) sendmmsg$inet_sctp(r0, &(0x7f0000002e80)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x9, @remote, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="45c85a704a43229c39fa60574650f1eb666489a867086a589e5f427ebe0406d3002a865b68587af8a60788841a56086751e5689e1215d76e7db9a108f3a7ad55938fdf1e979fd5d97b401451e40a3a5853ce42936c70e4bd2bece00783e3472a55370575694b0c088564810059d0d10319756ffc4231338297d37302c7de3b87617c72481cddc16190340935d9e7060dcdc2dee2b296c70846f32365259d2f1f2802ac9f2a438e1852aac9f805670d5116d0f2d2282fc050fc62240bce2983d961ba11bb5ec413009a53d640eb4db23bfad07e4cc57d21f373e98d0086706227d16e5542296c70d949", 0xe9}, {&(0x7f0000000040)="5713562343d01c8988", 0x9}, {&(0x7f0000000280)="14ef935d9f4996a91b337f6134a44453d09d5e6f1b369dd33f7e7347a11fa15ab6987f94118a57b7655ec4dfa83816c8cf734f47c52762ca2073d563e9346adb46eefbdf03af833bcb15cd93e4a001515b3fc4a276c92d0a384262933020bd21403960784ca1fe933b6a36e87e8635c44f7e44f274057cfa2745d15c66617a6941436076285448b26a8fab2f398735be4faea1683bc3bcb4896a8dc9e75d27b87129300f9835256f3f1e504f5464977fcd93ef0f6a368abd1d4ce528ccd4a191c71c86f202e68e40db129e12e696f6545220f0fab71f45aedbad0a158d5966590af75b9cea70b66d2a939d703fd344f4a2078ffd", 0xf4}], 0x3, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0x9, 0x6, 0x5, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x569598b, 0x200, 0x7, 0x200, r1}}], 0x38}, {&(0x7f0000000440)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000000480)="c1e024cb0fd9cd19d3dc3a0538b8ef7c10ff82b7b29af363eb53d441b0e332626148e1ad162d38b372d293b3add752bcf71ca191a7c83e8d64f7c4139ef0e8ded42391fc03f77bd87c24ada139b4e1592171c9c77acd30bc9a97d32dbe4511f6b378f1b6950fe8194f4469892468bd36a3f8867a1419d38d783d82b2bc", 0x7d}, {&(0x7f0000000500)="c36bae9b73f2b160e0f523c24e74d9dc27f5491de0c2d4e9a7b64b0ee14319188d28", 0x22}, {&(0x7f0000000540)="d8f3a6a62a4ef626f24fbaf68e142d3484f07e833009764f0607dc8ae8c56cb49a5e34b1262865c310a2a70c46fb6bced81fe265ae886dc445414b1d243d8bc3d4eba5b55f69fbf0220804600a4591a26339b752a76dfa2ea8f01d519c4ba291cdbf91ffeedba19f3541afc607b42e22222ff15ca3f9c38e96d1e490ff92df56fc319d7e1fd2357655288533ffa651c84dcb0bf3f146da55cd78ad738f9b36a23220f5f2c2bca4bbd707b1ad4772d9c22a5946f9effa118a", 0xb8}, {&(0x7f0000000600)="a00f6da8cb2a506b87af6467125f476252f23d932d5f3cf35192a7fdba4425de77dd59fec6b61767c8e2746a3142f5fd7141b0a010786fac8725c67f29afef421e6a56c045340b865337627b486979d8683bc92e5e7b95a73011b717dd841a072c1fbf23c569a960bda28059cab49e87aa1ed8d4d6eb251c52fe0b513297b2346f29ccee6eb5665fbe774d9b535a3b969d3e153743e2199a80626a7e884989620e5766e27c131aa7e2e644de3a02ece5bf582c48d1a756e30dc587a8b5", 0xbd}, {&(0x7f00000006c0)="e239d1253fb3710e87f73f0e4588b894fc10f33e472250d6f5beb0312a791be0f484b6bcd844a5a2faa15b71a97fab2c6b159af8930c5fa07b513986759154c892d21382b390432c2233f532ca7aea2fbc23c72043bf8d3bbf5bf1144a44c2a9ab339f53c06512afc6e44654d40c011dfb196f00c705447c5f8df5125b1921c920033eb3978b51ebd135c600340a0910b4e732d08d76f0a51d266420c0595f2c5059f25f3e4795e5ec999bdb809bbabeffb29ad43d99f7219d3f553c1903d661f258b94bc7884b051275c059c60b73d929b946adb1429e0e1609852fdf", 0xdd}, {&(0x7f00000007c0)="be6461ce103688c0c4cf599071d7037ff123849a666c919ed7ec5c94e542de76cd84c4e1e330db0709362a4ab957d6fd23dda5a0fd5e95d6bd1064045486d3d6b93a9cb61233c705365eb9a054337d7bea3915592011fbf84a689c8919999cfcc9b7b72cc5539d5f8e56f3d8bbb7411bd0460035a5e381a0cf1bf783c99c5e7b2f4f021d1c745c0c5a9191676973c9f5a8518468a18c7105a00cbf9b224dba75ad964f1132e8fa363f1b31b1e962cbcf1193dc00ddf1d14adbcb47516f53c7aa202190fefbdde178", 0xc8}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="cba2009b8bdcabcb68e95e4f3a5b6b001ce07e99a5cc0c59b0961ca7530b671ba0871c1829dc2574e10cca9200a70786f2365d4003a0c514bbd3318027ff90b0c613b073563add0c4ebfe6f30461f7b468d27a27ba4deb28629b8eae4511fbd952e2b5c54eb8a0f35f87c50e7e0790ba807d566640f88b13e66820bfe3f5b172350c26b1714b9c268b8292e09bbd32a61b2865e18c55742455d4d9d68ed85bf7e72c4159866ed3fe47a3206b8485ca7b0eec9bde361d58cd60fe0f436af4e03450febfd7a309e2c25ee0014ba3f9b7", 0xcf}, {&(0x7f00000019c0)="89dd91237e303e6b8b8975fcc702b1f80c22bbdcc55580c0ca9fcad569b0b4aa0dcaa6f91651c7484d0b3a5e32fdc7ac15fa11464ba62031d34c86eaaf29cdea736b4b145cde54f365cd97ddc6906d9acd2bdb4612b0564fcd126478d02a802786c8140f0a596b1a2ec7f071528cbc743a2e575dfc02057397947ba8c4798c2816f1dd88174254286907d6673c345afd11d1c35fa35678dddd2eb9d7df3fa6b8c209780aaa8286658a88214c8ed146e61c46acb7bccf5f47b2d4cf5f83d8f8eb20c8ba7bf67c9d9be5d2daee62f654a6fa6a026c3538d352cd5323601043c0ffe77714906f02c0f4ad0ad63177c80f6283d6dc02d78e0db5af9e5964d576767ffaad20ea3c1645887b3e4b39b1a26662f4156413862ad25d9ec0bd3844424f8698984ba5bb766fd03d62b74b96c298408e51c53c6e18569111ffcd357528f56da9646b0098a8608258037953898b143caee1020e4fd74a2a18ec9e5788a7776cc6f887fa2dfd6e0b210f80a723098113e778a495e4e736f0293a483ddffcff3c35cba21da62c2eea9606044d78901c8dc4a1ce89547f2bb278a36242685915d896b69ecfb953ec9484303a20f280c6c3d0ece59e7f8c8f50f78b3029d28008a32620e771cc77a391c7dad45f104aeba85e76029787453b838fe934d1a2cbc9cfceb5b8ed9498d4610113651e39632575c4352fb483ce8985032c1166ecf74665c8c3cf6715bdf62d7492930bd60b829d306cf8bd11c899d76816fb7ddfcccacc43806bd838dbffac332d9818302c6e90df1f061fa303198f3cc2e881c7a4ae341fc46f1d09cf1665d57cf3ae69c627b5444d6e4dc3f78861cdfbfd3076e4cf9e1a3f04803f8d43d6b38de866593a9f848e82d44c4faebd38abebe5ea58d8b48ede8e71bbe6ab2f84fc63987a3aa7a914364612eec4c65e01371cf1b376467a8ff80fb62b68a8739080108028d3d6f4e20472fdb08010a3baa6e8a90b4b73a84d8ce5fbeff7eba6be17e7fc83b68ff543d17d7ee373d2eb3b25438298d99c7301993cff1ad9dc6ea48b66517105fcc8daa191155c440d75b290bbea445ee01be77f3d40da370933140e25789f3832dd63ac757b8c377505a90143f216e3cef7a365ebe7ef39ae647eaa42045e743473c53745eda1110b2dccff568da95cf02c5608f3af762163f8c79a12f45f4ad706320bfbc746ac1685c5042ee0c924e04522636538ab64087f04a01935aed3dd47c4b47e538bab12eae19671c52da8a8c1381cda2790c3bf7efb9b62377bacf11842e0a4cae0d33d3d4183c9990ea330145379a147aa962449b705b16f7a3f8b822870fb1e0502b3d28b7c1e6809d04a42bbda8c6c2aadef1cc4ca2790cc14cd8690c5307adfd72edbcff86025dc7fb5cc2b0f749a2410a2bc81422990fa28f52a37a268c6539a058fe748eea8b9cb1ad45f903f61ceaf31a1f9e2cbdbddc524a3ecd464dbc066c6592a9f3e4f4b1f40d6038493e64704da06cd83d5a30261cf77551a67826f357432f468df13a7293d03427af0338239e66d2fdf6475c60c8266f08c38a83344aae9fbf3ab79e056903dcff5da63dc04a244fa58973ab7d4a77d768e5c224a73fde0e71a9b97147b9eaa8a451f578b66aabe1e0e2f8af6591739a05723f9cb93dc4fbabd83e4ff205b2538074fc2d4b0e9a312bd767802d4cae659a1e8ee0aa11f8617b302e2e55f0f299c68757c5d93458986186485c1446fced13dafd9bcd96b28c7b0af12e8a5c85c641e36ec618b07b2d83391da5f8329c9027121625feb6fa4f49e33dd0740a284234659932efc0d960ff8c8167b90bffcd9d18defe2df52ec48e28bd627506d7230d1cf54d3ab0d8471129cc105db1583a88002775a19f0162c11056e7c9fd4d1119219825c4ba319be5ab95019a3f217a4d4904c778fae98fdeacaa9d3a6286ae52ecc13df3c77bef8216b4ab11333f4e94471679a520a4b463e4aae1d86cb4be261764b5cf9d87c8a2a1ffa0b48ef63e1d032c069969477bd749cd8e6e6866d429407991a2f8ba3e9cdb1e22ed7268d3034cf966eeb35afa7419e409de31aec49bed993531221232630e8b1b5c3a6d3dd1abb0127707d2720f8de912e6a05a7ebab653f9c7b5767c329e82bbed9bd0b3c08e917bf9ec84835a2cc9f7d90987c43a4b8cbf9843426a9a50dae1c93c3cbf51e645e95e1ce98122e60d2e7c6d27bd7653eb89dd2fb17b66f7358eaf4d7fd37614baf2b0187dd7dd1377841baa740921c1b2787fcd6725856a1009672c90b7479586d1c61da8b61ac03731c347851a8e3355efba930a87bc8c6a76ef84a143e4a098d7aa696a25e3771b769f1e937787d2bb96b7459d7cf1ce14d0fecfd21654ae3e581d12bcce5693ec724494c31ded104b4fa4f04c45622e962e5694c77f97a3c3addc418879694469238bf14f6830b97ac9a102f2f073e7b55144460907ba6e1240751f3083ec2c8fd2d536d3118fd714667d22e9c364f82d4eb45a3a5ff0fa430d378ca1224470ee84b1afff6138ccabec7a841da06ac1acf744877f11d2b93c36d180a4cdaac87f30d2cbc5f336b9ac2f1db6b55b077b322165695a3b8863efb9109fbc2c766825bfdb3503b1b6d4dac3b33b35f110eac97fc6b84a9b2b37f7b12f7a1cb108b33a94139f6ec52cd0c876929f7e9832ac37e03db31522336d3183e4e95788b079eedf8db6a7be50e9edc38872a08b4faf976927f7592b87af485d35b8b85e8d58a5eede3bd0eb37ecc3f3025eaea269eba576a1661f0056e1e7c43a8e801ae21cbbd090dd331a5c68e1c77558311a902def7a56cb3fd3af47231fea55c756d52ec98dbe08f42f1f2f13d1ddfcd7d335ebcd4461cb74f014abedbddfc49ec11d22869ba71b3e63a06a8be5f5f1cb4dfd6293cbf72a7302ae22338a9fc58e81ba4ecb7b28e35c0aff7bee6d68e3c317cc35e3db6b4ff9a7aee6cc2336f038b4d8f09e18c1cfe814f1dc6db77e970beecb0924135bbbf8d4405850c4a037be801ddae2a2794e7c74e6b7f78ff471e4b701d3a503c0404ec0bb72ba16938c10a17e3fcaa45d65708b762ee71ea39654be8fe6089e2cfd8a1dc30becaddbf65a7d9eb723a3039c008aed4a17c82a9cde3db8ad521d0b6ef31870cebe8a10bb04c962912d68ce36809d43bcd1925745163ca75c839b55421127bae5308c20ef7e1481aba48e98fa32b7a65addea6577c2b914fa0fb85d901f48dd4d7730e49acb3e77125e01d924e952105ffb82ae1c0a00efa350dd207e9ad617641868378e7b348266962fbd4682a3bc28ebd49d82c5f2696fa00fc121eb166911bc537c9977bf345c08b9024e51798ec34d494610c3adbd064f52730c1fd90f44e9a5341fb9505fa98dd5b35b2d31a0fc34cb58bdd82951bad22729e8605f2e12eed910993f8f7f810487cf9643858a57a1d7dd48d7282cb051301db79108ef65d807ae6fc2db26a5a5d3d330bf40f29ddf9fd901f76b685826fa5b5e372bc2e4fb4732375dd6f0f34165ac7a341ff9493541199f5337759a815b2bd358c3fa7540b68baecdc6a6963c0141fcf06201a8b8c8fed16abdc41904cc75f215ca56feb803931dc65001cad8ddf43e8b47359140898f833d251a1c990f77e8353043f81436112e36fc1d9b83f1aa6388e74ef92b8dc078990b6261e0fceaed1a31eaef38d63a54e9ab2132fd6e18b5510a358ce38a50546cadaaf1907a74873e76256c712d0de4d1d0d03391e67db16fc0439b3adf970f6db6c2f3658500265ddb63d486c490d74f92781d35fb1a75f36fdb1c7047bcd3a10bc5636c7fc7b93de26c468ad8d8060db018cad922fff5cc92e55d1d469eaa4e8de44ab9019fcc050fa943627fc7979205364afa9038d7c31dd3ca64efb926ee6fba95f711b5fb3aef92a35fd8dd3a40c177304eeeb09c6edee2e183f45ce05d5dbcaf24590edc1ac37dee5684cf594ef964e7cc1868767d03047eb6d2a0714b8f0d63d7e44ce756fc15e41b6144845c9fc647755745f88578fd259a7b7b376ade48a136d933cb8b43cc8f755c6d3e9d2ab706f089e72d94c09cc8c9ae4dfd1e0e9520fb5afe280e2e57bcbdc8151b82d3cff903699f5de95ed620ff2f3917e5b1842100c255089777245bf3625e1233e01d591322cb82da09f45fa9245756d9a902182cf72d058c6c71877fecd13492e557ce1c6ebe2932ccb5b98fc0f99ba3bab6581d5c2f1fdecbd7cef25166580aae3772107c5cbcfda5fbde1ebb3dafc0e3c018722488a936f120c2937588f8b66de0bf1dc6a7f970b547348b3d11a4527d81d8605c9651954e34caf932541fcb73f352830789be1d0d514d7e3f96b6b4a7519bd22776afa24fe7ffb5f919fe583c725ec9845e70f740454b35350097cbc23a57a2912a9ebc8ffe3dec261a48fe117474b278d6343d8cfc7548742dd7fc5143cbd3667c0ce7fbbf44cc6cbc145d1fc96dfeef89797f33bf98364d5b4240ace059087b51c49e2d56fa57105d7004035d0822bb35edefd6705fe9b3eaf71d96520e460e0fe5c4b4f93d25e38940f1faebff8635bc7e0fc1f95511c0314de23dd6e84890f5fc9f682936d69da5cb6c73ee584e8b0d9ed0225702ae9950c40ecd91acf71092aa98617a82a2af827d32390106039caa7c09020da11a505939f47bc14d3ed58fe5ebed0bc20d63332f647b385afb605252f48aab520187eca2adafbebc5422c39ebdb640b3cd35d738cbfaf24c3c1b0f39bd860a5cef7f1ff85e02d279608f8f996099f39514026f416943027936633d896daf71722239067796bac0a8ddb154e0f7bb7b430a07cd7cc161490fe43becf91ffc7a76276cee07a36a73a1523bc6e0758527db098ac1b7e206e465b04e73e73d9b52e165d247b84e5cb483d16686b131bc65e5ac56f28811d4ad42883d2ba4b6517db2db73d0974f971bd75a746dcaac577eb72d36ebb411a226ea51d7fedf4b759928561fa59b8ce0a4ff1aa383a515f48e5a74fcab94b42c16b4cfc2a37cb48cb123a70a066c2634513dfd309236e87a897d8deb84ec1f5c49edbbed0ec2a2a1969b92f6fee6da1ad345a72a70212ecc499db377efe740e511df38b0efc134b9945f7efad5982c8c036470b4c4362aee489dc26877c6664ec1e0300888f05eb7ce8ed235b6c1beeb1b72d5dcc4d2d7a26a6ab48658c1eb9a0d53a0577f71ee58f8e972a0ce722422fd2b375aeb8f3907ec307f316b364415b94d25a0bcce30bad06d100a129d7a2c6e8706dadd20772bc93f07702b45c9b2d1770cb79ab44e2e31be69da2eeee9559070a8f44a13a075964a2f97883db709050ab6e3fddcfe6bffb4f488892c51020b3f55b3ac9d0c926ff048a38fa99ee9e8c7ba4091738b8654681e6ff3c93b063a6cb2dfa86821adb9d707204b08570233e763a9bea1f8d1dfab4dcf397719f634827ea1d99e2adbd87d2948c26b6ac86321d0b4b9404375dee827144beea4e28218ffcb5b7822bf3c470f017817d12d8216f11b30cd38389f52ee1b926c42279c00c5bfee64ed6a89dbe205551b4cf73616d3282fb95d83047bf291290671aa56617663e63d383f1cb62f49e98a7d166f29464684a9053364cbaf9f29b949168f19dcb54a2d58245fe46f8f5b7bd08c9594fa34644adfe8adfb781de7b1f09a5baf385198926fc9614bb63756f050226574ac95fd6a102aebbdb70d9f2b983aba57468dc473522647093fb6306b334577bb7dc99aea285f83c5c2906bde06536dca2e3101c33fe17c00bf00e8059dd848b299ee845eb9af6", 0x1000}], 0x9, &(0x7f0000002b00)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xf}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @init={0x18, 0x84, 0x0, {0xfa0, 0xfff, 0x7c, 0xfffffffffffffffb}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8200, 0x100, 0x7, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x90, 0x1}, {&(0x7f0000002bc0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002c00)="20616708aefee0a7cbf875dd12734176580081b06cf2255b598e526b3222a26511a56fbff7b61bf074bfd3a536281d0dfd35c0dedfc06a7d386eb68a2e3ec84b97b134d5daccf98252671fc5b6ae", 0x4e}, {&(0x7f0000002c80)="3414187eff8034bf53e228357134253ba9791cc7e965afa1215f19e9b45edd62590d7ca7a71c8f55fe1619fe5daedffc16b2e48f1b6e40234d45ff9901cd", 0x3e}, {&(0x7f0000002cc0)="3947d907259ae62b6f91c7d855b55d46d2470364a070a8dc773b44cd21c78733944d771ce56d7e555a939eea3d89be3f645285a31840b79cdbebaea038c1db4a08019cf38f6353afb176d03ec87ea1197fd0e93f9c762ad6ceef12f65a55c5707a9321da1fa93acd4548f47cc3fc13d5c7d9c795a7dce67da1303ad8d291cb333a8978bfb1ed7a4f826b0cf42c683a7b7941bdc7f00ba92f36ef295378f419e019d02c293916864cef1b64603aae7418db27f546fecd50bb5f82ed23dc60f26918276a3e354313a69d6c80afa18cb9cf9d06b54954220a4298e16f2e67ece24372d36b6b30aa5c9fac", 0xe9}, {&(0x7f0000002dc0)="93dafd6cfec76f2cc1a5b651952ad561d21de4ff3c0a2f587a44e125fc01da0adbbfebdb94debc41e36dcf0990df24c33b5c68919d4dffe0fe4f122ed4b4976dd3dea8ec6a70f05b2d02a07d6d1a9f8ff9bee39bc3ef7c248c5e2c5193e3405d1cb06ad278a1e75909d5", 0x6a}], 0x4, 0x0, 0x0, 0x40000}], 0x3, 0x4000010) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x8}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/loop-control\x00', 0xc0040, 0x0) [ 842.126439][ T4982] IPVS: ftp: loaded support on port[0] = 21 [ 842.130140][ T4991] IPVS: ftp: loaded support on port[0] = 21 09:20:57 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x6558000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 842.267115][ T5058] IPVS: ftp: loaded support on port[0] = 21 09:20:57 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x40402) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x2008000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0xdda, 0x4) sendfile(r1, r2, 0x0, 0x80000000000d) [ 842.381160][ T5105] IPVS: ftp: loaded support on port[0] = 21 09:20:57 executing program 5: mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffefffffffffd) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') 09:20:57 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x105100, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001580)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x1008) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x20}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20200, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000080)=0x1, 0x4) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4}}, 0x2e) [ 842.584687][ C1] net_ratelimit: 16 callbacks suppressed [ 842.584696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 842.590454][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:20:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0xe) r1 = accept$alg(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x20, 0x401}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200), 0x0) r3 = msgget(0x1, 0x80) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000000c0)=""/172) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x20080) bind(r1, &(0x7f0000000340)=@isdn={0x22, 0x4, 0x6, 0x5, 0x6}, 0x80) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000240)=&(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r5}}, 0xc) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x3) socket$alg(0x26, 0x5, 0x0) 09:20:58 executing program 1: personality(0x0) uname(&(0x7f0000000240)=""/176) [ 843.233578][ T5569] IPVS: ftp: loaded support on port[0] = 21 09:20:58 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 843.355444][ T5635] IPVS: ftp: loaded support on port[0] = 21 [ 843.391433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 843.397229][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:20:58 executing program 0: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 09:20:58 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x1, 0x7ff, 0xf0a7, 0x9}) 09:20:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='GPL\x00', 0xffffffffffffffff}, 0x30) waitid(0x3, r0, &(0x7f0000000080), 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0x3, 0x4, 0x1) 09:20:58 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:20:58 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b00000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 843.552719][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 843.558597][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 843.589465][ T5715] IPVS: ftp: loaded support on port[0] = 21 [ 843.714097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 843.719891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 843.725741][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 843.731511][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 843.781394][ T5844] IPVS: ftp: loaded support on port[0] = 21 09:21:01 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x8100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x8}]}, 0xffffff19}}, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0xa2082) 09:21:01 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'sit0\x00', 0x4002}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='task\x00\x1d+\x1f\x80\x93g\x93\xc3{\x7f\xe5\xab\xfc A\x06\x11eO\x98\x86 (\xff\xb6;\x048\xc9G\x931j\a~\x9f\x17\xe8A\x83\xf7`g\x12\x19j0C\x01\x17,y\x9e\xe2\v\v>\xbf\xa9\x8c\xb7m\xa2a8\x98\x8dm\xcb\x9d7\x8b\x8ed\xdan\x14T\x8fd\xf7\xb7TNO&\xc7\x97J>\xf3\xd9\x81\xa3\xbdY\x8b\xb2\x19\x99\x19\xc0\x85\x04\xf7\xe0\x94\x84\x96\xff\n;\xfb\xfc\xb2\x80\xc7\x8b\x8d\xc7+A\xe0r\xddn\xf4U\xf3K\x9e\xb0\xea\x11IG\x1d[\x91h\x9c\x8cu\x92\xa2B\xaaJ\xbd\x9f\xad\x19TwS\xb5\x8b\xf1\xfeZ\xa6c\x1d\x1e\xac\xefFb\xb0$;]\xa4\xe0\xb3\xa7\xc6\x03\x8fV\x18\xbd\x1c1y}8\xeb\x8fC\x9fo\x93\xb4T\x1d>)K\x04\x96\x14\xae\f\xfcz1\xbd]\x98\x89\v-/~d\x8a\xeb\faU\x96\xa2\xd4\x05\xe8N)\xd8@\xf6p\x9b\x01\xba\xed\x87rAS\xac\xdevE\x12\xd7)\xd3\xca\v\xa1X\x12+]@\x01\r\x9a\x04\xac\x01\x0eUL\x80U`\xa6\xa8\x13\xf0y\xcd\xc2\x7fdY#q)\x98p\r\xd50\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00g\x94H\xb0\x03\xe8\xc0t\xfa\xa2\xd5\xd3\xab\xfc#:\xc8\xfd#EI8v\x1d\x95W\tO\x02)\x00\x0fj+:m\xd4\xba\xff\xc22\au\x88\xa6^Q\rVW\xb2s\x80%=\xb8w\x05\x16\x80\xfd\xdb\x86\xfb\xc5\xc8\xf7i\xfd2\az\x92&\xd5\x9c$\x00^8\xc7[\x17\xc9\xd3I\x93\xc9\xd1\xf2\x12,_H\x95 \xb2\x8d\xce\x14\xadi\x04Yr{\xe8\x9a\x98D\b\xd3\x04\x99\xb1V\x83!\xef\xe3hX\xd6P{\x00\x1cE_\xcf\xee\a\xc8\xdd2\x8b\\J\xe1*\x92\x0f&r^oF\x90\x00\xadTK\n\x0f\x17{\x85=\x16A\xf9>\xd2\xa0vH\xafg5i\x9dC6\x18\xcb\xfe\x14\xe9\xb0\xf5\xa3\xc7\xa2\xe4U\xcd\xf0e\xe9=\xc5\x19\xe2\x00\x00\x00\x00\x00\x00') ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x8000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x1000000, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x0, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000480)=[{r2, 0x0, 0x10000000000}, {r3, 0x4208}, {r1}], 0x3, 0x3ff) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfffffffffffffe01) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getrusage(0x0, &(0x7f0000000640)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x10000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00', 0x43732e5398416f1a}) 09:21:01 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:01 executing program 0 (fault-call:19 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 846.452374][ T5968] IPVS: ftp: loaded support on port[0] = 21 [ 846.467692][ T5970] IPVS: ftp: loaded support on port[0] = 21 [ 846.491186][ T6000] IPVS: ftp: loaded support on port[0] = 21 09:21:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:01 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x0, &(0x7f0000000200)='l') [ 846.634699][ T6148] IPVS: ftp: loaded support on port[0] = 21 09:21:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080), 0x4) [ 846.730283][ T6190] UDF-fs: bad mount option "l" or missing value 09:21:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040), 0x0, 0x0) 09:21:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCGSOFTCAR(r0, 0x5412, &(0x7f00000000c0)) 09:21:02 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0xd}, @random="52cff2c5bec5", [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @random="f8bf88df5b1b", @remote, @dev, @rand_addr=0x7f000000}}}}, 0x0) 09:21:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x88a8ffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = gettid() setsockopt$inet_opts(r1, 0x0, 0x100800000, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x303) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) tkill(r2, 0x1000000000016) 09:21:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) 09:21:02 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:02 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 847.747548][ C1] net_ratelimit: 14 callbacks suppressed [ 847.747556][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 847.759008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 847.759850][ T6522] IPVS: ftp: loaded support on port[0] = 21 [ 847.794667][ T6521] IPVS: ftp: loaded support on port[0] = 21 [ 847.809918][ T6526] IPVS: ftp: loaded support on port[0] = 21 09:21:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00\x14\x8a6O0\xcf\xe7.\x7f\xbd\xd9w\x8b~\x8a\xe6?vv\xa3\f\x80\x0e\xd0>\xcc%>\xd5\xf6\x80yF\xc6\xb8C/%\xeeZ\xeb\xf6\x0e\xc6\x9f\x04\x85\xfcf\x83\fl\x17\xab\xeaK7\b*\xa9\xb8\xc9\xcbi{\x90\xc7B\xc6\xc4\x1b\xa5q\x82\xbe\x80@\x9cHR\xcc\xf21\x88s\xb2\x15\xd6\xbf\x05\x1d9\x11p\xe7\x9f\xed\x98u/\x8a\xa8c\xa9X\x86;\x12O\xb3\xc3\xa1,\x11\x1c\xdc\x9cn\xebU\xa0H\x1d\x03\xe2\x05\xa64\xd2t|b\xc2\xf4\xfcuu,G\xc9j\xbe%tNs5\xd3t\xfd\xf3U\x0f|\xcd\xe4\xc1\xac\x84\xdc\x03\xe1\xcc\xc8\xe1\xc5\xdd\x98\xf9\xe2\x18\xae\xa5\xd4\xbeE\xc9\n\xd2\xfa]\xd3\xee\'\x1d)\xd3\x15\xb2\xf2\x00\x86\xa3\xf2\xf65D\xcaS\xdf\x8cn\xd2\xfbZ\x19\xa5\xaf\xb5\x94\x01T\xcc\xf7\xc62\x8d#[dP\x97\x1e<\xb1\x89\x98\xdf\xca\x81\x85o\xf4\x81\xee\xc4') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 847.908903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 847.914696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 847.920560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 847.926381][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 848.013536][ T6636] IPVS: ftp: loaded support on port[0] = 21 09:21:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000002340)=[{{&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="91350c655a955c52ef4594c17b4f0c0eb78bac9b6ed13f4df0a442fb58367dcc2fe72e844f19a91e829ca6e23890f370839554194829f1392e1dc0cdb77fe396d2ce1737305cceb999e4155ac3cc01788848cc43f90262659f3c36d28e4250c8ac075763243b56634e8ffeedcb3604a94c55ec5add6159d9fbd85b531f15f8de1631db38170b70eb2b5c1ed961e7aa04fdd083c93756a61e49ea46fc678fc4535aca59c726a8950832ad36d6e1388567e957293d202754b05532646e635e222f0b55ed25e35674c9824ca08ddc58b972d0f2fb57279af6e50fb2cda5c8763d", 0xdf}], 0x1}, 0x7fff}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 09:21:03 executing program 5: quotactl(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) clock_gettime(0x0, &(0x7f0000000540)) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2cf1c765d34abaa63d5310ad83674aea3f71dc5c80f76d4fada96c6eaf1db42f6361f4f73f2e02001996010303d942499f8ee34fa534c21c3c71d1d59c9696e7db48ac67b676b7285c916ca6a94e54866bebe2486de4dbb34ecc79fa8c8dad16c83a52cd0eb2dc4ca1f3a088db3bcf3216d80011e726036aa18bf9067a2e2adc87cbd684b73552b9e8f0ebc530ba9fb40432ac6e6075a1e51429d78e675af01a2c4da8dce27ebc8a104d3044b7799393f8a7a08c40e4da1b35626a344920db895431"], 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x8, 0x0, {0x4}, {}, @rumble={0x2}}, {0x0, 0x0, 0x0, {0x0, 0xe3}, {0x0, 0x7c79}, @ramp}}) semget(0xffffffffffffffff, 0x5, 0x2) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:21:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/\x00~WMzU\xed\xbb\xc8\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xb1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\x19sT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6d\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\xf7\xff\xff\xff\xff\xff\xff\xff\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xecv:\x1ba=\xd7G\xd5)\xeap\xef\x02\x98\xff\xf5f\x160\xb9\x9ay\xec\x82i\xaf\x9b\xe1x\xae\xca\x17\xfe\xfb\x14\xfd=\x00\x97Z\x99\x9dy\xba\x89M\xba\xe4\xc1\xa6\x06\x00\x00\x00\x00\x00\x00\x00x\"m\a\xe6:?E\x96~\x0e\xe8Y\xbbn\x0f0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 848.876909][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 848.882752][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:21:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) 09:21:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x9effffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:04 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000029ca2c5068c6c6810000000095"], 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="a7ad5699603372a3dbadf3e39e7a", 0x0, 0xa09c}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 09:21:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:04 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:04 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @raw_data="e9d8fa9c18f05b7d4152323470464f119cd6577a50a621ce209afdc139a8d6f9c15283ddf6c2e8f4720f492b819dc6e6bc6b08ef81e8d435e63a4029b80d0d6370abe8e9acbfff66ccff177760937d97530183ee50cc6e86d7ed695b890d4e25d5aeac2eb8fc8c2945d3f9020175cd4ee5c25c4fbcdb9f37e9a0b0434cb4b6e0dc961f0ee364f457c83ba3ed7b4a9104763bd594f1bf6a53e5dbce66c12c6e550985c3d827b5c38ad2b0ac68505f88666ff7a669cb973de4ced0d59d17dc7bfd13963d9071aa557c"}) [ 849.556448][ T7380] IPVS: ftp: loaded support on port[0] = 21 09:21:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 09:21:04 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 849.596739][ T7383] IPVS: ftp: loaded support on port[0] = 21 [ 849.633540][ T7388] IPVS: ftp: loaded support on port[0] = 21 [ 849.683638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 849.689424][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:05 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000001c0)=""/40) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0xffffffffffffffc7) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'teql0\x00', {0x2, 0x4e24, @local}}) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000200)={0x2, 0x7, 0x4, 0x0, 0x6d, 0xfffffffffffffff8}) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) [ 849.813530][ T7533] IPVS: ftp: loaded support on port[0] = 21 09:21:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) 09:21:05 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendto$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:21:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getresgid(&(0x7f0000000100), 0x0, 0x0) 09:21:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xf0ffffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:06 executing program 1: 09:21:06 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000300)) io_setup(0xce, &(0x7f0000000040)) 09:21:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:06 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:06 executing program 1: [ 851.383287][ T8081] IPVS: ftp: loaded support on port[0] = 21 09:21:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x7fa, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 851.494870][ T8086] IPVS: ftp: loaded support on port[0] = 21 [ 851.532315][ T8095] IPVS: ftp: loaded support on port[0] = 21 09:21:06 executing program 1: [ 851.729376][ T8102] IPVS: ftp: loaded support on port[0] = 21 09:21:06 executing program 1: 09:21:07 executing program 1: 09:21:07 executing program 1: 09:21:07 executing program 5: 09:21:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xffffff7f00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:08 executing program 5: 09:21:08 executing program 1: 09:21:08 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:08 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000300)) io_setup(0xce, &(0x7f0000000040)) 09:21:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:08 executing program 1: [ 853.025188][ T8339] IPVS: ftp: loaded support on port[0] = 21 [ 853.042315][ T8337] IPVS: ftp: loaded support on port[0] = 21 [ 853.053347][ T8342] IPVS: ftp: loaded support on port[0] = 21 09:21:08 executing program 5: [ 853.071726][ C1] net_ratelimit: 16 callbacks suppressed [ 853.071733][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 853.077830][ T8346] IPVS: ftp: loaded support on port[0] = 21 [ 853.083168][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:21:08 executing program 1: 09:21:08 executing program 5: 09:21:08 executing program 1: 09:21:08 executing program 5: [ 853.878450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 853.884344][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 854.039760][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 854.045569][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 854.202337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 854.208632][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 854.215187][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 854.221438][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xffffffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:09 executing program 5: 09:21:09 executing program 1: 09:21:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:09 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:09 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000300)) io_setup(0xce, &(0x7f0000000040)) 09:21:09 executing program 1: [ 854.680889][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 854.696921][ T8482] IPVS: ftp: loaded support on port[0] = 21 09:21:09 executing program 5: quotactl(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) clock_gettime(0x0, &(0x7f0000000540)) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2cf1c765d34abaa63d5310ad83674aea3f71dc5c80f76d4fada96c6eaf1db42f6361f4f73f2e02001996010303d942499f8ee34fa534c21c3c71d1d59c9696e7db48ac67b676b7285c916ca6a94e54866bebe2486de4dbb34ecc79fa8c8dad16c83a52cd0eb2dc4ca1f3a088db3bcf3216d80011e726036aa18bf9067a2e2adc87cbd684b73552b9e8f0ebc530ba9fb40432ac6e6075a1e51429d78e675af01a2c4da8dce27ebc8a104d3044b7799393f8a7a08c40e4da1b35626a344920db895431"], 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x8, 0x0, {0x4}, {}, @rumble={0x2}}, {0x0, 0x0, 0x0, {0x0, 0xe3}, {0x0, 0x7c79}, @ramp}}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 854.727325][ T8480] IPVS: ftp: loaded support on port[0] = 21 09:21:09 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f0000000000)) 09:21:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfffffffffffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 854.990829][ T8507] IPVS: ftp: loaded support on port[0] = 21 09:21:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000000040)={@local, @empty=[0x3, 0x4, 0x9000000, 0x3f00000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x1e01, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 09:21:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3}) 09:21:10 executing program 5: r0 = gettid() unshare(0x28020400) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) [ 855.371392][ T8746] [ 855.373756][ T8746] ====================================================== [ 855.374943][ T8728] kobject: 'kvm' (00000000e30d2fd8): kobject_uevent_env [ 855.380765][ T8746] WARNING: possible circular locking dependency detected [ 855.380777][ T8746] 5.0.0-next-20190306 #4 Not tainted [ 855.380788][ T8746] ------------------------------------------------------ [ 855.380797][ T8746] syz-executor.5/8746 is trying to acquire lock: [ 855.380802][ T8746] 0000000050f9196c (&pipe->mutex/1){+.+.}, at: fifo_open+0x159/0xb00 [ 855.380923][ T8746] [ 855.380923][ T8746] but task is already holding lock: [ 855.392573][ T8728] kobject: 'kvm' (00000000e30d2fd8): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 855.394845][ T8746] 00000000be8baa34 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 855.394872][ T8746] [ 855.394872][ T8746] which lock already depends on the new lock. [ 855.394872][ T8746] [ 855.394876][ T8746] [ 855.394876][ T8746] the existing dependency chain (in reverse order) is: [ 855.394879][ T8746] [ 855.394879][ T8746] -> #1 (&sig->cred_guard_mutex){+.+.}: [ 855.466166][ T8728] kobject: 'kvm' (00000000e30d2fd8): kobject_uevent_env [ 855.468043][ T8746] lock_acquire+0x16f/0x3f0 [ 855.468082][ T8746] __mutex_lock+0xf7/0x1310 [ 855.468104][ T8746] mutex_lock_interruptible_nested+0x16/0x20 [ 855.487167][ T8728] kobject: 'kvm' (00000000e30d2fd8): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 855.487793][ T8746] proc_pid_attr_write+0x200/0x580 [ 855.514517][ T8746] __vfs_write+0x8d/0x110 [ 855.516890][ T8728] kobject: 'kvm' (00000000e30d2fd8): kobject_uevent_env [ 855.519367][ T8746] __kernel_write+0x110/0x3b0 [ 855.519421][ T8746] write_pipe_buf+0x15d/0x1f0 [ 855.519441][ T8746] __splice_from_pipe+0x395/0x7d0 [ 855.529459][ T8728] kobject: 'kvm' (00000000e30d2fd8): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 855.531540][ T8746] splice_from_pipe+0x108/0x170 [ 855.531554][ T8746] default_file_splice_write+0x3c/0x90 [ 855.531565][ T8746] do_splice+0x70a/0x13c0 [ 855.531576][ T8746] __x64_sys_splice+0x2c6/0x330 [ 855.531598][ T8746] do_syscall_64+0x103/0x610 [ 855.557808][ T3875] kobject: 'loop1' (0000000034c1f82b): kobject_uevent_env [ 855.563369][ T8746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.563374][ T8746] [ 855.563374][ T8746] -> #0 (&pipe->mutex/1){+.+.}: [ 855.563400][ T8746] __lock_acquire+0x239c/0x3fb0 [ 855.563410][ T8746] lock_acquire+0x16f/0x3f0 [ 855.563423][ T8746] __mutex_lock+0xf7/0x1310 [ 855.563435][ T8746] mutex_lock_nested+0x16/0x20 [ 855.563449][ T8746] fifo_open+0x159/0xb00 [ 855.563461][ T8746] do_dentry_open+0x488/0x1160 [ 855.563472][ T8746] vfs_open+0xa0/0xd0 [ 855.563483][ T8746] path_openat+0x10e9/0x46e0 [ 855.563493][ T8746] do_filp_open+0x1a1/0x280 [ 855.563505][ T8746] do_open_execat+0x137/0x690 [ 855.563526][ T8746] __do_execve_file.isra.0+0x178d/0x23f0 [ 855.569991][ T3875] kobject: 'loop1' (0000000034c1f82b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 855.573717][ T8746] __x64_sys_execve+0x8f/0xc0 [ 855.573732][ T8746] do_syscall_64+0x103/0x610 [ 855.573745][ T8746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.573748][ T8746] [ 855.573748][ T8746] other info that might help us debug this: [ 855.573748][ T8746] [ 855.573752][ T8746] Possible unsafe locking scenario: [ 855.573752][ T8746] [ 855.573755][ T8746] CPU0 CPU1 [ 855.573758][ T8746] ---- ---- [ 855.573769][ T8746] lock(&sig->cred_guard_mutex); [ 855.716559][ T8746] lock(&pipe->mutex/1); [ 855.723402][ T8746] lock(&sig->cred_guard_mutex); [ 855.730937][ T8746] lock(&pipe->mutex/1); [ 855.735259][ T8746] [ 855.735259][ T8746] *** DEADLOCK *** [ 855.735259][ T8746] [ 855.743415][ T8746] 1 lock held by syz-executor.5/8746: [ 855.748865][ T8746] #0: 00000000be8baa34 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 855.759379][ T8746] [ 855.759379][ T8746] stack backtrace: 09:21:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 855.765278][ T8746] CPU: 1 PID: 8746 Comm: syz-executor.5 Not tainted 5.0.0-next-20190306 #4 [ 855.773851][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.784164][ T8746] Call Trace: [ 855.787456][ T8746] dump_stack+0x172/0x1f0 [ 855.791803][ T8746] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 855.797873][ T8746] check_prev_add.constprop.0+0xf11/0x23c0 [ 855.803687][ T8746] ? depot_save_stack+0x1de/0x460 [ 855.808718][ T8746] ? check_usage+0x570/0x570 [ 855.813308][ T8746] ? mark_held_locks+0xa4/0xf0 [ 855.816320][ T3875] kobject: 'loop0' (00000000cdacf7c9): kobject_uevent_env [ 855.818077][ T8746] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 855.829792][ T3875] kobject: 'loop0' (00000000cdacf7c9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 855.830970][ T8746] ? graph_lock+0x7b/0x200 [ 855.830984][ T8746] ? __lockdep_reset_lock+0x450/0x450 [ 855.831013][ T8746] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 855.831033][ T8746] __lock_acquire+0x239c/0x3fb0 [ 855.854531][ T8942] IPVS: ftp: loaded support on port[0] = 21 [ 855.857444][ T8746] ? save_stack+0xa9/0xd0 [ 855.857459][ T8746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.857477][ T8746] ? mark_held_locks+0xf0/0xf0 [ 855.857493][ T8746] lock_acquire+0x16f/0x3f0 [ 855.857516][ T8746] ? fifo_open+0x159/0xb00 [ 855.871738][ T8942] kobject: 'lo' (000000009269accc): kobject_add_internal: parent: 'net', set: 'devices' [ 855.872545][ T8746] ? fifo_open+0x159/0xb00 [ 855.872562][ T8746] __mutex_lock+0xf7/0x1310 [ 855.872576][ T8746] ? fifo_open+0x159/0xb00 [ 855.872597][ T8746] ? fifo_open+0x159/0xb00 [ 855.879837][ T8942] kobject: 'lo' (000000009269accc): kobject_uevent_env [ 855.883562][ T8746] ? fifo_open+0x2b5/0xb00 [ 855.883578][ T8746] ? mutex_trylock+0x1e0/0x1e0 [ 855.883591][ T8746] ? fifo_open+0x2b5/0xb00 [ 855.883613][ T8746] ? kasan_check_write+0x14/0x20 [ 855.888535][ T8942] kobject: 'lo' (000000009269accc): fill_kobj_path: path = '/devices/virtual/net/lo' [ 855.892517][ T8746] ? lock_downgrade+0x880/0x880 [ 855.892536][ T8746] mutex_lock_nested+0x16/0x20 [ 855.892549][ T8746] ? mutex_lock_nested+0x16/0x20 [ 855.892569][ T8746] fifo_open+0x159/0xb00 [ 855.910426][ T8942] kobject: 'queues' (0000000042bd9c87): kobject_add_internal: parent: 'lo', set: '' [ 855.911162][ T8746] do_dentry_open+0x488/0x1160 [ 855.921298][ T8942] kobject: 'queues' (0000000042bd9c87): kobject_uevent_env [ 855.926793][ T8746] ? pipe_release+0x280/0x280 [ 855.926808][ T8746] ? chown_common+0x5c0/0x5c0 [ 855.926820][ T8746] ? inode_permission+0xb4/0x570 [ 855.926840][ T8746] vfs_open+0xa0/0xd0 [ 855.926858][ T8746] path_openat+0x10e9/0x46e0 [ 855.938355][ T8942] kobject: 'queues' (0000000042bd9c87): kobject_uevent_env: filter function caused the event to drop! [ 855.940422][ T8746] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 855.940436][ T8746] ? __kmalloc+0x15c/0x740 [ 855.940502][ T8746] ? prepare_creds+0x2f5/0x3f0 [ 855.940523][ T8746] ? prepare_exec_creds+0x12/0xf0 [ 855.948055][ T8942] kobject: 'rx-0' (00000000d77924f1): kobject_add_internal: parent: 'queues', set: 'queues' [ 855.954892][ T8746] ? __do_execve_file.isra.0+0x393/0x23f0 [ 855.954908][ T8746] ? do_syscall_64+0x103/0x610 [ 855.954922][ T8746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.954937][ T8746] ? __lock_acquire+0x548/0x3fb0 [ 855.954958][ T8746] ? prepare_exec_creds+0x12/0xf0 [ 855.974421][ T8942] kobject: 'rx-0' (00000000d77924f1): kobject_uevent_env [ 855.983548][ T8746] do_filp_open+0x1a1/0x280 [ 855.983562][ T8746] ? may_open_dev+0x100/0x100 [ 855.983582][ T8746] ? __lock_acquire+0x548/0x3fb0 [ 855.983597][ T8746] ? debug_smp_processor_id+0x3c/0x280 [ 855.983617][ T8746] ? debug_smp_processor_id+0x3c/0x280 [ 856.004120][ T8942] kobject: 'rx-0' (00000000d77924f1): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 856.004862][ T8746] do_open_execat+0x137/0x690 [ 856.004883][ T8746] ? unregister_binfmt+0x170/0x170 [ 856.016714][ T8942] kobject: 'tx-0' (00000000969847d5): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.018339][ T8746] ? lock_downgrade+0x880/0x880 [ 856.018355][ T8746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 856.018388][ T8746] ? kasan_check_read+0x11/0x20 [ 856.044975][ T8942] kobject: 'tx-0' (00000000969847d5): kobject_uevent_env 09:21:11 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffff9c, 0x0, 0x481, 0xffffffffffffffff, &(0x7f0000000a80)) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, &(0x7f0000e62000)={@broadcast, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast2}, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfffffffeffffffff, 0x20000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000009c0)=@broute={'broute\x00', 0x20, 0x5, 0x8b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x20, 0x7, 'netdevsim0\x00', 'netdevsim0\x00', 'syzkaller1\x00', 'veth1\x00', @dev={[], 0x10}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xd0, 0xd0, 0x148, [@vlan={'vlan\x00', 0x8, {{0x3, 0x5, 0x805, 0x0, 0x5}}}, @cgroup0={'cgroup\x00', 0x8, {{0xb94, 0x1}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x5, 0x100, 0x0, 0x0, "190676089450d809d5d55e264374abab5ff456e688f38a3b9929538fc7f7d0c28e8c697e5f77404d348ff0e5b9e72679d94e97ccc94ad9679952027ce2e518f8"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x11, 0x18, 0x88a8, 'veth1_to_hsr\x00', 'syzkaller0\x00', 'ip6gretap0\x00', 'veth1\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x1d0, 0x200}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:removable_device_t:s0\x00'}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}, {{{0x9, 0x67e2064f71965dfa, 0xa00, 'eql\x00', 'batadv0\x00', 'veth1_to_bridge\x00', 'nlmon0\x00', @broadcast, [0xff, 0xff, 0xff, 0xbf510792e811f76a, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff], 0xe0, 0x1a8, 0x1f8, [@rateest={'rateest\x00', 0x48, {{'lo\x00', 'syzkaller0\x00', 0x2, 0x3, 0x7ff, 0x3, 0xff, 0x7, 0x8, 0x9b97}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x8}}}, @common=@nflog={'nflog\x00', 0x50, {{0x5b4d, 0x588, 0x59, 0x0, 0x0, "5f51b162b2d5250e3372bddd8e59eb59424bcc206a3943e431b56362ec333e9e2b23734d614a98259bc663a03fb2af368703344bcf3af164cbc5d341c38964aa"}}}]}, @common=@log={'log\x00', 0x28, {{0x8, "74ca968a203bfb7a8ec4c8cb1bfdbc8caa441795a99d31cc3cafe40b119a"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{{{0x19, 0x10, 0x883e, 'hsr0\x00', 'vcan0\x00', 'team0\x00', 'lapb0\x00', @dev={[], 0x1a}, [0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0xc0, 0x138, 0x1b0, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}, @common=@ERROR={'ERROR\x00', 0x20, {"088ea09f9495dc64a3a85394f4bb589730093a2767fbefbd1537c568796f"}}]}, @common=@nflog={'nflog\x00', 0x50, {{0xec, 0x1f, 0x7ff, 0x0, 0x0, "c9b049cc9c106d5550bb1cd1d7359ec9b0833165455347a61b641704720b192b94718c3419661c2198c82f94e208a8d0d6d1c0f1da56c48548d109c430a6920b"}}}}, {{{0x3, 0x12, 0xf6, 'bond0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'nr0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xe8, 0x130}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x7dae, 0x8eb, 0x7}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"b72ddf474dfab7612c9bd64bf6fe050a5a56d842560e0478b9a15ce3473a"}}}]}]}, 0x928) [ 856.048806][ T8746] ? do_raw_spin_unlock+0x57/0x270 [ 856.048825][ T8746] __do_execve_file.isra.0+0x178d/0x23f0 [ 856.048838][ T8746] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 856.048856][ T8746] ? copy_strings_kernel+0x110/0x110 [ 856.048876][ T8746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 856.074466][ T8942] kobject: 'tx-0' (00000000969847d5): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 856.075405][ T8746] ? getname_flags+0x277/0x5b0 [ 856.075420][ T8746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 856.075436][ T8746] __x64_sys_execve+0x8f/0xc0 [ 856.075458][ T8746] do_syscall_64+0x103/0x610 [ 856.090912][ T8942] kobject: 'tunl0' (000000007d126f1a): kobject_add_internal: parent: 'net', set: 'devices' [ 856.092385][ T8746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 856.092396][ T8746] RIP: 0033:0x458079 [ 856.092410][ T8746] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:21:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 856.092425][ T8746] RSP: 002b:00007f2ed7b5ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 856.104383][ T8942] kobject: 'tunl0' (000000007d126f1a): kobject_uevent_env [ 856.106484][ T8746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 856.106492][ T8746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 856.106500][ T8746] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 856.106507][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ed7b5b6d4 [ 856.106515][ T8746] R13: 00000000004be5b3 R14: 00000000004ceea0 R15: 00000000ffffffff [ 856.221821][ T8958] IPVS: ftp: loaded support on port[0] = 21 [ 856.248577][ T8942] kobject: 'tunl0' (000000007d126f1a): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 856.324722][ T3875] kobject: 'loop1' (0000000034c1f82b): kobject_uevent_env [ 856.348701][ T8942] kobject: 'queues' (00000000086c25cb): kobject_add_internal: parent: 'tunl0', set: '' [ 856.352886][ T3875] kobject: 'loop1' (0000000034c1f82b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 856.382455][ T3875] kobject: 'loop5' (000000000f38d621): kobject_uevent_env [ 856.394539][ T3875] kobject: 'loop5' (000000000f38d621): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:21:11 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) [ 856.424945][ T8942] kobject: 'queues' (00000000086c25cb): kobject_uevent_env [ 856.448924][ T8942] kobject: 'queues' (00000000086c25cb): kobject_uevent_env: filter function caused the event to drop! 09:21:11 executing program 3: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), 0x0) io_setup(0xce, &(0x7f0000000040)) 09:21:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 856.465629][ T8942] kobject: 'rx-0' (000000005c837658): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.476400][ T8942] kobject: 'rx-0' (000000005c837658): kobject_uevent_env [ 856.485729][ T3875] kobject: 'loop3' (00000000236f8fad): kobject_uevent_env [ 856.505536][ T9161] IPVS: ftp: loaded support on port[0] = 21 [ 856.506679][ T8942] kobject: 'rx-0' (000000005c837658): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' 09:21:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 856.521350][ T3875] kobject: 'loop3' (00000000236f8fad): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 856.552409][ T9168] IPVS: ftp: loaded support on port[0] = 21 [ 856.574458][ T3875] kobject: 'loop5' (000000000f38d621): kobject_uevent_env [ 856.580606][ T8942] kobject: 'tx-0' (00000000f2938c03): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.591339][ T3875] kobject: 'loop5' (000000000f38d621): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 856.620543][ T3875] kobject: 'loop1' (0000000034c1f82b): kobject_uevent_env [ 856.638462][ T3875] kobject: 'loop1' (0000000034c1f82b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 856.666820][ T3875] kobject: 'loop5' (000000000f38d621): kobject_uevent_env [ 856.674746][ T8942] kobject: 'tx-0' (00000000f2938c03): kobject_uevent_env [ 856.685173][ T3875] kobject: 'loop5' (000000000f38d621): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 856.714541][ T8942] kobject: 'tx-0' (00000000f2938c03): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 856.743144][ T8942] kobject: 'gre0' (0000000072153bfe): kobject_add_internal: parent: 'net', set: 'devices' [ 856.776498][ T8942] kobject: 'gre0' (0000000072153bfe): kobject_uevent_env [ 856.795960][ T8942] kobject: 'gre0' (0000000072153bfe): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 856.806543][ T8942] kobject: 'queues' (00000000facea821): kobject_add_internal: parent: 'gre0', set: '' [ 856.820473][ T8942] kobject: 'queues' (00000000facea821): kobject_uevent_env [ 856.827726][ T8942] kobject: 'queues' (00000000facea821): kobject_uevent_env: filter function caused the event to drop! [ 856.841967][ T8942] kobject: 'rx-0' (0000000033870ef9): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.852187][ T8942] kobject: 'rx-0' (0000000033870ef9): kobject_uevent_env [ 856.861309][ T8942] kobject: 'rx-0' (0000000033870ef9): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 856.872401][ T8942] kobject: 'tx-0' (00000000249c9868): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.883473][ T8942] kobject: 'tx-0' (00000000249c9868): kobject_uevent_env [ 856.890737][ T8942] kobject: 'tx-0' (00000000249c9868): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 856.902410][ T9168] kobject: 'lo' (00000000e0793888): kobject_add_internal: parent: 'net', set: 'devices' [ 856.913724][ T9168] kobject: 'lo' (00000000e0793888): kobject_uevent_env [ 856.920691][ T9168] kobject: 'lo' (00000000e0793888): fill_kobj_path: path = '/devices/virtual/net/lo' [ 856.930307][ T9168] kobject: 'queues' (000000008ff82bfd): kobject_add_internal: parent: 'lo', set: '' [ 856.940257][ T9168] kobject: 'queues' (000000008ff82bfd): kobject_uevent_env [ 856.947494][ T9168] kobject: 'queues' (000000008ff82bfd): kobject_uevent_env: filter function caused the event to drop! [ 856.958498][ T9168] kobject: 'rx-0' (00000000a0c73276): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.968652][ T9168] kobject: 'rx-0' (00000000a0c73276): kobject_uevent_env [ 856.975728][ T9168] kobject: 'rx-0' (00000000a0c73276): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 856.986528][ T9168] kobject: 'tx-0' (000000009f57d259): kobject_add_internal: parent: 'queues', set: 'queues' [ 856.996695][ T9168] kobject: 'tx-0' (000000009f57d259): kobject_uevent_env [ 857.003709][ T9168] kobject: 'tx-0' (000000009f57d259): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 857.096797][ T7975] kobject: 'rx-0' (0000000022b11d33): kobject_cleanup, parent 0000000016b5a391 [ 857.135394][ T7975] kobject: 'rx-0' (0000000022b11d33): auto cleanup 'remove' event [ 857.143199][ T7975] kobject: 'rx-0' (0000000022b11d33): kobject_uevent_env [ 857.155812][ T7975] kobject: 'rx-0' (0000000022b11d33): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.186326][ T7975] kobject: 'rx-0' (0000000022b11d33): auto cleanup kobject_del [ 857.193897][ T7975] kobject: 'rx-0' (0000000022b11d33): calling ktype release [ 857.216057][ T7975] kobject: 'rx-0': free name [ 857.220694][ T7975] kobject: 'tx-0' (00000000b430c2aa): kobject_cleanup, parent 0000000016b5a391 [ 857.236229][ T7975] kobject: 'tx-0' (00000000b430c2aa): auto cleanup 'remove' event [ 857.244041][ T7975] kobject: 'tx-0' (00000000b430c2aa): kobject_uevent_env [ 857.266661][ T7975] kobject: 'tx-0' (00000000b430c2aa): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.286651][ T7975] kobject: 'tx-0' (00000000b430c2aa): auto cleanup kobject_del [ 857.294233][ T7975] kobject: 'tx-0' (00000000b430c2aa): calling ktype release [ 857.301557][ T7975] kobject: 'tx-0': free name [ 857.306167][ T7975] kobject: 'queues' (0000000016b5a391): kobject_cleanup, parent (null) [ 857.315321][ T7975] kobject: 'queues' (0000000016b5a391): calling ktype release [ 857.322905][ T7975] kobject: 'queues' (0000000016b5a391): kset_release [ 857.329668][ T7975] kobject: 'queues': free name [ 857.334851][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): kobject_uevent_env [ 857.342231][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.354283][ T7975] kobject: 'rx-0' (00000000453dd361): kobject_cleanup, parent 00000000f8a055e8 [ 857.363333][ T7975] kobject: 'rx-0' (00000000453dd361): auto cleanup 'remove' event [ 857.371381][ T7975] kobject: 'rx-0' (00000000453dd361): kobject_uevent_env [ 857.378484][ T7975] kobject: 'rx-0' (00000000453dd361): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.397694][ T7975] kobject: 'rx-0' (00000000453dd361): auto cleanup kobject_del [ 857.413036][ T7975] kobject: 'rx-0' (00000000453dd361): calling ktype release [ 857.427900][ T7975] kobject: 'rx-0': free name [ 857.438033][ T7975] kobject: 'tx-0' (00000000547c9997): kobject_cleanup, parent 00000000f8a055e8 [ 857.446966][ T7975] kobject: 'tx-0' (00000000547c9997): auto cleanup 'remove' event [ 857.471324][ T7975] kobject: 'tx-0' (00000000547c9997): kobject_uevent_env [ 857.486074][ T7975] kobject: 'tx-0' (00000000547c9997): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.496911][ T7975] kobject: 'tx-0' (00000000547c9997): auto cleanup kobject_del [ 857.504578][ T7975] kobject: 'tx-0' (00000000547c9997): calling ktype release [ 857.511948][ T7975] kobject: 'tx-0': free name [ 857.516615][ T7975] kobject: 'queues' (00000000f8a055e8): kobject_cleanup, parent (null) [ 857.525812][ T7975] kobject: 'queues' (00000000f8a055e8): calling ktype release [ 857.533413][ T7975] kobject: 'queues' (00000000f8a055e8): kset_release [ 857.540197][ T7975] kobject: 'queues': free name [ 857.545411][ T7975] kobject: 'ip6gre0' (0000000018f07574): kobject_uevent_env [ 857.552795][ T7975] kobject: 'ip6gre0' (0000000018f07574): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.564821][ T7975] kobject: 'rx-0' (00000000c089be07): kobject_cleanup, parent 00000000136d9969 [ 857.573859][ T7975] kobject: 'rx-0' (00000000c089be07): auto cleanup 'remove' event [ 857.581755][ T7975] kobject: 'rx-0' (00000000c089be07): kobject_uevent_env [ 857.588840][ T7975] kobject: 'rx-0' (00000000c089be07): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.608502][ T7975] kobject: 'rx-0' (00000000c089be07): auto cleanup kobject_del [ 857.624025][ T7975] kobject: 'rx-0' (00000000c089be07): calling ktype release [ 857.639027][ T7975] kobject: 'rx-0': free name [ 857.643705][ T7975] kobject: 'tx-0' (00000000327fee89): kobject_cleanup, parent 00000000136d9969 [ 857.665801][ T7975] kobject: 'tx-0' (00000000327fee89): auto cleanup 'remove' event [ 857.679914][ T7975] kobject: 'tx-0' (00000000327fee89): kobject_uevent_env [ 857.696255][ T7975] kobject: 'tx-0' (00000000327fee89): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.725445][ T7975] kobject: 'tx-0' (00000000327fee89): auto cleanup kobject_del [ 857.744527][ T7975] kobject: 'tx-0' (00000000327fee89): calling ktype release [ 857.764669][ T7975] kobject: 'tx-0': free name [ 857.775983][ T7975] kobject: 'queues' (00000000136d9969): kobject_cleanup, parent (null) [ 857.798186][ T7975] kobject: 'queues' (00000000136d9969): calling ktype release [ 857.821081][ T7975] kobject: 'queues' (00000000136d9969): kset_release [ 857.827767][ T7975] kobject: 'queues': free name [ 857.832967][ T7975] kobject: 'ip6gre0' (00000000921f05ce): kobject_uevent_env [ 857.840755][ T7975] kobject: 'ip6gre0' (00000000921f05ce): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.852727][ T7975] kobject: 'rx-0' (0000000046403e64): kobject_cleanup, parent 00000000d3e0dde5 [ 857.861694][ T7975] kobject: 'rx-0' (0000000046403e64): auto cleanup 'remove' event [ 857.869490][ T7975] kobject: 'rx-0' (0000000046403e64): kobject_uevent_env [ 857.876539][ T7975] kobject: 'rx-0' (0000000046403e64): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.887317][ T7975] kobject: 'rx-0' (0000000046403e64): auto cleanup kobject_del [ 857.894897][ T7975] kobject: 'rx-0' (0000000046403e64): calling ktype release [ 857.902207][ T7975] kobject: 'rx-0': free name [ 857.906822][ T7975] kobject: 'tx-0' (000000005e3ae38a): kobject_cleanup, parent 00000000d3e0dde5 [ 857.915839][ T7975] kobject: 'tx-0' (000000005e3ae38a): auto cleanup 'remove' event [ 857.923686][ T7975] kobject: 'tx-0' (000000005e3ae38a): kobject_uevent_env [ 857.930696][ T7975] kobject: 'tx-0' (000000005e3ae38a): kobject_uevent_env: uevent_suppress caused the event to drop! [ 857.941652][ T7975] kobject: 'tx-0' (000000005e3ae38a): auto cleanup kobject_del [ 857.949256][ T7975] kobject: 'tx-0' (000000005e3ae38a): calling ktype release [ 857.956559][ T7975] kobject: 'tx-0': free name [ 857.961155][ T7975] kobject: 'queues' (00000000d3e0dde5): kobject_cleanup, parent (null) [ 857.970321][ T7975] kobject: 'queues' (00000000d3e0dde5): calling ktype release [ 857.977828][ T7975] kobject: 'queues' (00000000d3e0dde5): kset_release [ 857.984512][ T7975] kobject: 'queues': free name [ 857.989494][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): kobject_uevent_env [ 857.996811][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.009259][ T7975] kobject: 'rx-0' (00000000dc61843c): kobject_cleanup, parent 000000000382e608 [ 858.018244][ T7975] kobject: 'rx-0' (00000000dc61843c): auto cleanup 'remove' event [ 858.026074][ T7975] kobject: 'rx-0' (00000000dc61843c): kobject_uevent_env [ 858.033113][ T7975] kobject: 'rx-0' (00000000dc61843c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.043905][ T7975] kobject: 'rx-0' (00000000dc61843c): auto cleanup kobject_del [ 858.051493][ T7975] kobject: 'rx-0' (00000000dc61843c): calling ktype release [ 858.058930][ T7975] kobject: 'rx-0': free name [ 858.063593][ T7975] kobject: 'tx-0' (000000000e155fbf): kobject_cleanup, parent 000000000382e608 [ 858.072530][ T7975] kobject: 'tx-0' (000000000e155fbf): auto cleanup 'remove' event [ 858.080346][ T7975] kobject: 'tx-0' (000000000e155fbf): kobject_uevent_env [ 858.087405][ T7975] kobject: 'tx-0' (000000000e155fbf): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.098184][ T7975] kobject: 'tx-0' (000000000e155fbf): auto cleanup kobject_del [ 858.105767][ T7975] kobject: 'tx-0' (000000000e155fbf): calling ktype release [ 858.114132][ T7975] kobject: 'tx-0': free name [ 858.118735][ T7975] kobject: 'queues' (000000000382e608): kobject_cleanup, parent (null) [ 858.127862][ T7975] kobject: 'queues' (000000000382e608): calling ktype release [ 858.135345][ T7975] kobject: 'queues' (000000000382e608): kset_release [ 858.142018][ T7975] kobject: 'queues': free name [ 858.147091][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): kobject_uevent_env [ 858.153914][ C0] net_ratelimit: 12 callbacks suppressed [ 858.153921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.154434][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.160051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 858.166620][ T7975] kobject: 'rx-0' (00000000d226129f): kobject_cleanup, parent 00000000c5fbbef3 [ 858.191416][ T7975] kobject: 'rx-0' (00000000d226129f): auto cleanup 'remove' event [ 858.199256][ T7975] kobject: 'rx-0' (00000000d226129f): kobject_uevent_env [ 858.206465][ T7975] kobject: 'rx-0' (00000000d226129f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.217286][ T7975] kobject: 'rx-0' (00000000d226129f): auto cleanup kobject_del [ 858.224885][ T7975] kobject: 'rx-0' (00000000d226129f): calling ktype release [ 858.232151][ T7975] kobject: 'rx-0': free name [ 858.236979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 858.237015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 858.249393][ T7975] kobject: 'tx-0' (00000000f5a7bc7a): kobject_cleanup, parent 00000000c5fbbef3 [ 858.258387][ T7975] kobject: 'tx-0' (00000000f5a7bc7a): auto cleanup 'remove' event [ 858.266298][ T7975] kobject: 'tx-0' (00000000f5a7bc7a): kobject_uevent_env [ 858.273317][ T7975] kobject: 'tx-0' (00000000f5a7bc7a): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.284094][ T7975] kobject: 'tx-0' (00000000f5a7bc7a): auto cleanup kobject_del [ 858.291690][ T7975] kobject: 'tx-0' (00000000f5a7bc7a): calling ktype release [ 858.299019][ T7975] kobject: 'tx-0': free name [ 858.303612][ T7975] kobject: 'queues' (00000000c5fbbef3): kobject_cleanup, parent (null) [ 858.312727][ T7975] kobject: 'queues' (00000000c5fbbef3): calling ktype release [ 858.320268][ T7975] kobject: 'queues' (00000000c5fbbef3): kset_release [ 858.327006][ T7975] kobject: 'queues': free name [ 858.331970][ T7975] kobject: 'ip6gre0' (0000000078f672a4): kobject_uevent_env [ 858.339301][ T7975] kobject: 'ip6gre0' (0000000078f672a4): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.350987][ T7975] kobject: 'rx-0' (00000000f4a7d15b): kobject_cleanup, parent 00000000f847d29e [ 858.359965][ T7975] kobject: 'rx-0' (00000000f4a7d15b): auto cleanup 'remove' event [ 858.367792][ T7975] kobject: 'rx-0' (00000000f4a7d15b): kobject_uevent_env [ 858.374795][ T7975] kobject: 'rx-0' (00000000f4a7d15b): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.385593][ T7975] kobject: 'rx-0' (00000000f4a7d15b): auto cleanup kobject_del [ 858.393171][ T7975] kobject: 'rx-0' (00000000f4a7d15b): calling ktype release [ 858.400478][ T7975] kobject: 'rx-0': free name [ 858.405095][ T7975] kobject: 'tx-0' (000000007d0441cb): kobject_cleanup, parent 00000000f847d29e [ 858.405993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.414046][ T7975] kobject: 'tx-0' (000000007d0441cb): auto cleanup 'remove' event [ 858.419806][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 858.427593][ T7975] kobject: 'tx-0' (000000007d0441cb): kobject_uevent_env [ 858.433380][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.440338][ T7975] kobject: 'tx-0' (000000007d0441cb): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.446052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 858.456787][ T7975] kobject: 'tx-0' (000000007d0441cb): auto cleanup kobject_del [ 858.470030][ T7975] kobject: 'tx-0' (000000007d0441cb): calling ktype release [ 858.477447][ T7975] kobject: 'tx-0': free name [ 858.482045][ T7975] kobject: 'queues' (00000000f847d29e): kobject_cleanup, parent (null) [ 858.491170][ T7975] kobject: 'queues' (00000000f847d29e): calling ktype release [ 858.498748][ T7975] kobject: 'queues' (00000000f847d29e): kset_release [ 858.505411][ T7975] kobject: 'queues': free name [ 858.510565][ T7975] kobject: 'ip6gre0' (0000000053306c8f): kobject_uevent_env [ 858.517867][ T7975] kobject: 'ip6gre0' (0000000053306c8f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.529924][ T7975] kobject: 'rx-0' (00000000304ac350): kobject_cleanup, parent 000000008d5ee70a [ 858.538881][ T7975] kobject: 'rx-0' (00000000304ac350): auto cleanup 'remove' event [ 858.546659][ T7975] kobject: 'rx-0' (00000000304ac350): kobject_uevent_env [ 858.553712][ T7975] kobject: 'rx-0' (00000000304ac350): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.564509][ T7975] kobject: 'rx-0' (00000000304ac350): auto cleanup kobject_del [ 858.572106][ T7975] kobject: 'rx-0' (00000000304ac350): calling ktype release [ 858.579417][ T7975] kobject: 'rx-0': free name [ 858.584034][ T7975] kobject: 'tx-0' (00000000556c5b67): kobject_cleanup, parent 000000008d5ee70a [ 858.593002][ T7975] kobject: 'tx-0' (00000000556c5b67): auto cleanup 'remove' event [ 858.600825][ T7975] kobject: 'tx-0' (00000000556c5b67): kobject_uevent_env [ 858.607910][ T7975] kobject: 'tx-0' (00000000556c5b67): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.618703][ T7975] kobject: 'tx-0' (00000000556c5b67): auto cleanup kobject_del [ 858.626255][ T7975] kobject: 'tx-0' (00000000556c5b67): calling ktype release [ 858.633583][ T7975] kobject: 'tx-0': free name [ 858.638307][ T7975] kobject: 'queues' (000000008d5ee70a): kobject_cleanup, parent (null) [ 858.647678][ T7975] kobject: 'queues' (000000008d5ee70a): calling ktype release [ 858.655184][ T7975] kobject: 'queues' (000000008d5ee70a): kset_release [ 858.661969][ T7975] kobject: 'queues': free name [ 858.666946][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): kobject_uevent_env [ 858.674258][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.686012][ T7975] kobject: 'rx-0' (00000000a95f73cc): kobject_cleanup, parent 00000000557d5f67 [ 858.694965][ T7975] kobject: 'rx-0' (00000000a95f73cc): auto cleanup 'remove' event [ 858.702805][ T7975] kobject: 'rx-0' (00000000a95f73cc): kobject_uevent_env [ 858.709880][ T7975] kobject: 'rx-0' (00000000a95f73cc): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.720692][ T7975] kobject: 'rx-0' (00000000a95f73cc): auto cleanup kobject_del [ 858.728236][ T7975] kobject: 'rx-0' (00000000a95f73cc): calling ktype release [ 858.735549][ T7975] kobject: 'rx-0': free name [ 858.740217][ T7975] kobject: 'tx-0' (00000000f99a9deb): kobject_cleanup, parent 00000000557d5f67 [ 858.749208][ T7975] kobject: 'tx-0' (00000000f99a9deb): auto cleanup 'remove' event [ 858.757008][ T7975] kobject: 'tx-0' (00000000f99a9deb): kobject_uevent_env [ 858.764054][ T7975] kobject: 'tx-0' (00000000f99a9deb): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.774874][ T7975] kobject: 'tx-0' (00000000f99a9deb): auto cleanup kobject_del [ 858.782491][ T7975] kobject: 'tx-0' (00000000f99a9deb): calling ktype release [ 858.789821][ T7975] kobject: 'tx-0': free name [ 858.794418][ T7975] kobject: 'queues' (00000000557d5f67): kobject_cleanup, parent (null) [ 858.803610][ T7975] kobject: 'queues' (00000000557d5f67): calling ktype release [ 858.811092][ T7975] kobject: 'queues' (00000000557d5f67): kset_release [ 858.817773][ T7975] kobject: 'queues': free name [ 858.823083][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): kobject_uevent_env [ 858.830400][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.842260][ T7975] kobject: 'rx-0' (00000000d686dba0): kobject_cleanup, parent 000000004903422a [ 858.851221][ T7975] kobject: 'rx-0' (00000000d686dba0): auto cleanup 'remove' event [ 858.859014][ T7975] kobject: 'rx-0' (00000000d686dba0): kobject_uevent_env [ 858.866057][ T7975] kobject: 'rx-0' (00000000d686dba0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.876850][ T7975] kobject: 'rx-0' (00000000d686dba0): auto cleanup kobject_del [ 858.884485][ T7975] kobject: 'rx-0' (00000000d686dba0): calling ktype release [ 858.891823][ T7975] kobject: 'rx-0': free name [ 858.896469][ T7975] kobject: 'tx-0' (000000004454feec): kobject_cleanup, parent 000000004903422a [ 858.905432][ T7975] kobject: 'tx-0' (000000004454feec): auto cleanup 'remove' event [ 858.913255][ T7975] kobject: 'tx-0' (000000004454feec): kobject_uevent_env [ 858.920335][ T7975] kobject: 'tx-0' (000000004454feec): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.931129][ T7975] kobject: 'tx-0' (000000004454feec): auto cleanup kobject_del [ 858.938682][ T7975] kobject: 'tx-0' (000000004454feec): calling ktype release [ 858.945978][ T7975] kobject: 'tx-0': free name [ 858.950640][ T7975] kobject: 'queues' (000000004903422a): kobject_cleanup, parent (null) [ 858.959739][ T7975] kobject: 'queues' (000000004903422a): calling ktype release [ 858.967231][ T7975] kobject: 'queues' (000000004903422a): kset_release [ 858.973936][ T7975] kobject: 'queues': free name [ 858.978931][ T7975] kobject: 'ip6gre0' (0000000016917e43): kobject_uevent_env [ 858.986248][ T7975] kobject: 'ip6gre0' (0000000016917e43): kobject_uevent_env: uevent_suppress caused the event to drop! [ 858.997922][ T7975] kobject: 'rx-0' (000000003b965012): kobject_cleanup, parent 000000009cdfc90b [ 859.006884][ T7975] kobject: 'rx-0' (000000003b965012): auto cleanup 'remove' event [ 859.014717][ T7975] kobject: 'rx-0' (000000003b965012): kobject_uevent_env [ 859.021811][ T7975] kobject: 'rx-0' (000000003b965012): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.032611][ T7975] kobject: 'rx-0' (000000003b965012): auto cleanup kobject_del [ 859.040157][ T7975] kobject: 'rx-0' (000000003b965012): calling ktype release [ 859.047666][ T7975] kobject: 'rx-0': free name [ 859.052518][ T7975] kobject: 'tx-0' (0000000000d3ea0c): kobject_cleanup, parent 000000009cdfc90b [ 859.061506][ T7975] kobject: 'tx-0' (0000000000d3ea0c): auto cleanup 'remove' event [ 859.069308][ T7975] kobject: 'tx-0' (0000000000d3ea0c): kobject_uevent_env [ 859.076357][ T7975] kobject: 'tx-0' (0000000000d3ea0c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.087165][ T7975] kobject: 'tx-0' (0000000000d3ea0c): auto cleanup kobject_del [ 859.094750][ T7975] kobject: 'tx-0' (0000000000d3ea0c): calling ktype release [ 859.102109][ T7975] kobject: 'tx-0': free name [ 859.106714][ T7975] kobject: 'queues' (000000009cdfc90b): kobject_cleanup, parent (null) [ 859.115840][ T7975] kobject: 'queues' (000000009cdfc90b): calling ktype release [ 859.123513][ T7975] kobject: 'queues' (000000009cdfc90b): kset_release [ 859.130190][ T7975] kobject: 'queues': free name [ 859.135430][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): kobject_uevent_env [ 859.142738][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.154719][ T7975] kobject: 'rx-0' (000000001586a392): kobject_cleanup, parent 00000000ed092433 [ 859.163813][ T7975] kobject: 'rx-0' (000000001586a392): auto cleanup 'remove' event [ 859.171610][ T7975] kobject: 'rx-0' (000000001586a392): kobject_uevent_env [ 859.178660][ T7975] kobject: 'rx-0' (000000001586a392): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.189458][ T7975] kobject: 'rx-0' (000000001586a392): auto cleanup kobject_del [ 859.197040][ T7975] kobject: 'rx-0' (000000001586a392): calling ktype release [ 859.204511][ T7975] kobject: 'rx-0': free name [ 859.209139][ T7975] kobject: 'tx-0' (00000000408f1bd4): kobject_cleanup, parent 00000000ed092433 [ 859.218095][ T7975] kobject: 'tx-0' (00000000408f1bd4): auto cleanup 'remove' event [ 859.225955][ T7975] kobject: 'tx-0' (00000000408f1bd4): kobject_uevent_env [ 859.233016][ T7975] kobject: 'tx-0' (00000000408f1bd4): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.243834][ T7975] kobject: 'tx-0' (00000000408f1bd4): auto cleanup kobject_del [ 859.251641][ T7975] kobject: 'tx-0' (00000000408f1bd4): calling ktype release [ 859.258946][ T7975] kobject: 'tx-0': free name [ 859.263606][ T7975] kobject: 'queues' (00000000ed092433): kobject_cleanup, parent (null) [ 859.272702][ T7975] kobject: 'queues' (00000000ed092433): calling ktype release [ 859.280166][ T7975] kobject: 'queues' (00000000ed092433): kset_release [ 859.286958][ T7975] kobject: 'queues': free name [ 859.291932][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): kobject_uevent_env [ 859.299264][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.311030][ T7975] kobject: 'rx-0' (0000000030879b26): kobject_cleanup, parent 000000004639a216 [ 859.320009][ T7975] kobject: 'rx-0' (0000000030879b26): auto cleanup 'remove' event [ 859.327842][ T7975] kobject: 'rx-0' (0000000030879b26): kobject_uevent_env [ 859.334880][ T7975] kobject: 'rx-0' (0000000030879b26): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.345669][ T7975] kobject: 'rx-0' (0000000030879b26): auto cleanup kobject_del [ 859.353217][ T7975] kobject: 'rx-0' (0000000030879b26): calling ktype release [ 859.360532][ T7975] kobject: 'rx-0': free name [ 859.365217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 859.365257][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 859.377001][ T7975] kobject: 'tx-0' (00000000af128b2c): kobject_cleanup, parent 000000004639a216 [ 859.386685][ T7975] kobject: 'tx-0' (00000000af128b2c): auto cleanup 'remove' event [ 859.394545][ T7975] kobject: 'tx-0' (00000000af128b2c): kobject_uevent_env [ 859.401595][ T7975] kobject: 'tx-0' (00000000af128b2c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.412424][ T7975] kobject: 'tx-0' (00000000af128b2c): auto cleanup kobject_del [ 859.420005][ T7975] kobject: 'tx-0' (00000000af128b2c): calling ktype release [ 859.427357][ T7975] kobject: 'tx-0': free name [ 859.431948][ T7975] kobject: 'queues' (000000004639a216): kobject_cleanup, parent (null) [ 859.441184][ T7975] kobject: 'queues' (000000004639a216): calling ktype release [ 859.448658][ T7975] kobject: 'queues' (000000004639a216): kset_release [ 859.455343][ T7975] kobject: 'queues': free name [ 859.460348][ T7975] kobject: 'ip6gre0' (00000000c50546ab): kobject_uevent_env [ 859.467677][ T7975] kobject: 'ip6gre0' (00000000c50546ab): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.479324][ T7975] kobject: 'rx-0' (0000000077097ea8): kobject_cleanup, parent 00000000cd2c2f69 [ 859.488311][ T7975] kobject: 'rx-0' (0000000077097ea8): auto cleanup 'remove' event [ 859.496124][ T7975] kobject: 'rx-0' (0000000077097ea8): kobject_uevent_env [ 859.503141][ T7975] kobject: 'rx-0' (0000000077097ea8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.513929][ T7975] kobject: 'rx-0' (0000000077097ea8): auto cleanup kobject_del [ 859.521735][ T7975] kobject: 'rx-0' (0000000077097ea8): calling ktype release [ 859.529116][ T7975] kobject: 'rx-0': free name [ 859.533726][ T7975] kobject: 'tx-0' (00000000871446cd): kobject_cleanup, parent 00000000cd2c2f69 [ 859.542686][ T7975] kobject: 'tx-0' (00000000871446cd): auto cleanup 'remove' event [ 859.550573][ T7975] kobject: 'tx-0' (00000000871446cd): kobject_uevent_env [ 859.557629][ T7975] kobject: 'tx-0' (00000000871446cd): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.568408][ T7975] kobject: 'tx-0' (00000000871446cd): auto cleanup kobject_del [ 859.576013][ T7975] kobject: 'tx-0' (00000000871446cd): calling ktype release [ 859.583296][ T7975] kobject: 'tx-0': free name [ 859.587929][ T7975] kobject: 'queues' (00000000cd2c2f69): kobject_cleanup, parent (null) [ 859.597042][ T7975] kobject: 'queues' (00000000cd2c2f69): calling ktype release [ 859.604494][ T7975] kobject: 'queues' (00000000cd2c2f69): kset_release [ 859.611256][ T7975] kobject: 'queues': free name [ 859.616356][ T7975] kobject: 'ip6gre0' (000000008e2f6fae): kobject_uevent_env [ 859.623638][ T7975] kobject: 'ip6gre0' (000000008e2f6fae): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.635492][ T7975] kobject: 'rx-0' (000000007feb525e): kobject_cleanup, parent 00000000087365e2 [ 859.644460][ T7975] kobject: 'rx-0' (000000007feb525e): auto cleanup 'remove' event [ 859.652542][ T7975] kobject: 'rx-0' (000000007feb525e): kobject_uevent_env [ 859.662836][ T7975] kobject: 'rx-0' (000000007feb525e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.673731][ T7975] kobject: 'rx-0' (000000007feb525e): auto cleanup kobject_del [ 859.681343][ T7975] kobject: 'rx-0' (000000007feb525e): calling ktype release [ 859.688662][ T7975] kobject: 'rx-0': free name [ 859.693269][ T7975] kobject: 'tx-0' (00000000feaccda1): kobject_cleanup, parent 00000000087365e2 [ 859.702251][ T7975] kobject: 'tx-0' (00000000feaccda1): auto cleanup 'remove' event [ 859.710086][ T7975] kobject: 'tx-0' (00000000feaccda1): kobject_uevent_env [ 859.717137][ T7975] kobject: 'tx-0' (00000000feaccda1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.727924][ T7975] kobject: 'tx-0' (00000000feaccda1): auto cleanup kobject_del [ 859.735480][ T7975] kobject: 'tx-0' (00000000feaccda1): calling ktype release [ 859.742769][ T7975] kobject: 'tx-0': free name [ 859.747399][ T7975] kobject: 'queues' (00000000087365e2): kobject_cleanup, parent (null) [ 859.756578][ T7975] kobject: 'queues' (00000000087365e2): calling ktype release [ 859.764099][ T7975] kobject: 'queues' (00000000087365e2): kset_release [ 859.770810][ T7975] kobject: 'queues': free name [ 859.775787][ T7975] kobject: 'ip6gre0' (00000000af0dacba): kobject_uevent_env [ 859.783431][ T7975] kobject: 'ip6gre0' (00000000af0dacba): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.795349][ T7975] kobject: 'rx-0' (000000005fab4ccc): kobject_cleanup, parent 00000000081c32c5 [ 859.804315][ T7975] kobject: 'rx-0' (000000005fab4ccc): auto cleanup 'remove' event [ 859.812147][ T7975] kobject: 'rx-0' (000000005fab4ccc): kobject_uevent_env [ 859.819184][ T7975] kobject: 'rx-0' (000000005fab4ccc): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.829980][ T7975] kobject: 'rx-0' (000000005fab4ccc): auto cleanup kobject_del [ 859.837830][ T7975] kobject: 'rx-0' (000000005fab4ccc): calling ktype release [ 859.845086][ T7975] kobject: 'rx-0': free name [ 859.849787][ T7975] kobject: 'tx-0' (00000000919f6c80): kobject_cleanup, parent 00000000081c32c5 [ 859.858755][ T7975] kobject: 'tx-0' (00000000919f6c80): auto cleanup 'remove' event [ 859.866548][ T7975] kobject: 'tx-0' (00000000919f6c80): kobject_uevent_env [ 859.873610][ T7975] kobject: 'tx-0' (00000000919f6c80): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.884392][ T7975] kobject: 'tx-0' (00000000919f6c80): auto cleanup kobject_del [ 859.891982][ T7975] kobject: 'tx-0' (00000000919f6c80): calling ktype release [ 859.899304][ T7975] kobject: 'tx-0': free name [ 859.903893][ T7975] kobject: 'queues' (00000000081c32c5): kobject_cleanup, parent (null) [ 859.913400][ T7975] kobject: 'queues' (00000000081c32c5): calling ktype release [ 859.920904][ T7975] kobject: 'queues' (00000000081c32c5): kset_release [ 859.927577][ T7975] kobject: 'queues': free name [ 859.932786][ T7975] kobject: 'ip6gre0' (000000008a86a0de): kobject_uevent_env [ 859.940108][ T7975] kobject: 'ip6gre0' (000000008a86a0de): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.951903][ T7975] kobject: 'rx-0' (00000000748b085f): kobject_cleanup, parent 00000000a960f399 [ 859.960884][ T7975] kobject: 'rx-0' (00000000748b085f): auto cleanup 'remove' event [ 859.968685][ T7975] kobject: 'rx-0' (00000000748b085f): kobject_uevent_env [ 859.975717][ T7975] kobject: 'rx-0' (00000000748b085f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 859.986483][ T7975] kobject: 'rx-0' (00000000748b085f): auto cleanup kobject_del [ 859.994075][ T7975] kobject: 'rx-0' (00000000748b085f): calling ktype release [ 860.001374][ T7975] kobject: 'rx-0': free name [ 860.005969][ T7975] kobject: 'tx-0' (000000005cf67428): kobject_cleanup, parent 00000000a960f399 [ 860.014908][ T7975] kobject: 'tx-0' (000000005cf67428): auto cleanup 'remove' event [ 860.022724][ T7975] kobject: 'tx-0' (000000005cf67428): kobject_uevent_env [ 860.029779][ T7975] kobject: 'tx-0' (000000005cf67428): kobject_uevent_env: uevent_suppress caused the event to drop! [ 860.040823][ T7975] kobject: 'tx-0' (000000005cf67428): auto cleanup kobject_del [ 860.048368][ T7975] kobject: 'tx-0' (000000005cf67428): calling ktype release [ 860.055669][ T7975] kobject: 'tx-0': free name [ 860.060522][ T7975] kobject: 'queues' (00000000a960f399): kobject_cleanup, parent (null) [ 860.069624][ T7975] kobject: 'queues' (00000000a960f399): calling ktype release [ 860.077116][ T7975] kobject: 'queues' (00000000a960f399): kset_release [ 860.083835][ T7975] kobject: 'queues': free name [ 860.088808][ T7975] kobject: 'ip6gre0' (00000000599f60ff): kobject_uevent_env [ 860.096111][ T7975] kobject: 'ip6gre0' (00000000599f60ff): kobject_uevent_env: uevent_suppress caused the event to drop! [ 860.107828][ T7975] kobject: 'rx-0' (00000000690ad413): kobject_cleanup, parent 00000000484a8481 [ 860.116781][ T7975] kobject: 'rx-0' (00000000690ad413): auto cleanup 'remove' event [ 860.124595][ T7975] kobject: 'rx-0' (00000000690ad413): kobject_uevent_env [ 860.131650][ T7975] kobject: 'rx-0' (00000000690ad413): kobject_uevent_env: uevent_suppress caused the event to drop! [ 860.142446][ T7975] kobject: 'rx-0' (00000000690ad413): auto cleanup kobject_del [ 860.149978][ T7975] kobject: 'rx-0' (00000000690ad413): calling ktype release [ 860.157299][ T7975] kobject: 'rx-0': free name [ 860.161969][ T7975] kobject: 'tx-0' (00000000da87c0f0): kobject_cleanup, parent 00000000484a8481 [ 860.171417][ T7975] kobject: 'tx-0' (00000000da87c0f0): auto cleanup 'remove' event [ 860.179212][ T7975] kobject: 'tx-0' (00000000da87c0f0): kobject_uevent_env [ 860.186281][ T7975] kobject: 'tx-0' (00000000da87c0f0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 860.197057][ T7975] kobject: 'tx-0' (00000000da87c0f0): auto cleanup kobject_del [ 860.204643][ T7975] kobject: 'tx-0' (00000000da87c0f0): calling ktype release [ 860.211951][ T7975] kobject: 'tx-0': free name [ 860.216540][ T7975] kobject: 'queues' (00000000484a8481): kobject_cleanup, parent (null) [ 860.225675][ T7975] kobject: 'queues' (00000000484a8481): calling ktype release [ 860.233158][ T7975] kobject: 'queues' (00000000484a8481): kset_release [ 860.239815][ T7975] kobject: 'queues': free name [ 860.244891][ T7975] kobject: 'ip6gre0' (000000004d95da06): kobject_uevent_env [ 860.252458][ T7975] kobject: 'ip6gre0' (000000004d95da06): kobject_uevent_env: uevent_suppress caused the event to drop! [ 860.263996][ T8942] kobject: 'gretap0' (000000002ed05841): kobject_add_internal: parent: 'net', set: 'devices' [ 860.274939][ T8942] kobject: 'gretap0' (000000002ed05841): kobject_uevent_env [ 860.282404][ T8942] kobject: 'gretap0' (000000002ed05841): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 860.292911][ T8942] kobject: 'queues' (00000000f9382d2f): kobject_add_internal: parent: 'gretap0', set: '' [ 860.303260][ T8942] kobject: 'queues' (00000000f9382d2f): kobject_uevent_env [ 860.310441][ T8942] kobject: 'queues' (00000000f9382d2f): kobject_uevent_env: filter function caused the event to drop! [ 860.321407][ T8942] kobject: 'rx-0' (00000000a8d2df87): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.331545][ T8942] kobject: 'rx-0' (00000000a8d2df87): kobject_uevent_env [ 860.338974][ T8942] kobject: 'rx-0' (00000000a8d2df87): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 860.350210][ T8942] kobject: 'tx-0' (00000000125a2035): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.360385][ T8942] kobject: 'tx-0' (00000000125a2035): kobject_uevent_env [ 860.367447][ T8942] kobject: 'tx-0' (00000000125a2035): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 860.379093][ T8942] kobject: 'batman_adv' (0000000094a80f49): kobject_add_internal: parent: 'gretap0', set: '' [ 860.390291][ T8942] kobject: 'erspan0' (00000000f44cd5a3): kobject_add_internal: parent: 'net', set: 'devices' [ 860.401094][ T8942] kobject: 'erspan0' (00000000f44cd5a3): kobject_uevent_env [ 860.408442][ T8942] kobject: 'erspan0' (00000000f44cd5a3): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 860.418917][ T8942] kobject: 'queues' (00000000258bddad): kobject_add_internal: parent: 'erspan0', set: '' [ 860.429320][ T8942] kobject: 'queues' (00000000258bddad): kobject_uevent_env [ 860.436534][ T8942] kobject: 'queues' (00000000258bddad): kobject_uevent_env: filter function caused the event to drop! [ 860.447500][ T8942] kobject: 'rx-0' (00000000caeb38ba): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.457632][ T8942] kobject: 'rx-0' (00000000caeb38ba): kobject_uevent_env [ 860.464716][ T8942] kobject: 'rx-0' (00000000caeb38ba): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 860.475885][ T8942] kobject: 'tx-0' (000000004458b3a3): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.486101][ T8942] kobject: 'tx-0' (000000004458b3a3): kobject_uevent_env [ 860.493132][ T8942] kobject: 'tx-0' (000000004458b3a3): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 860.504891][ T8942] kobject: 'batman_adv' (000000000c35bb2f): kobject_add_internal: parent: 'erspan0', set: '' [ 860.516133][ T9168] kobject: 'tunl0' (0000000010e7c4e0): kobject_add_internal: parent: 'net', set: 'devices' [ 860.527015][ T9168] kobject: 'tunl0' (0000000010e7c4e0): kobject_uevent_env [ 860.534200][ T9168] kobject: 'tunl0' (0000000010e7c4e0): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 860.544245][ T9168] kobject: 'queues' (00000000ebff1281): kobject_add_internal: parent: 'tunl0', set: '' [ 860.554470][ T9168] kobject: 'queues' (00000000ebff1281): kobject_uevent_env [ 860.561661][ T9168] kobject: 'queues' (00000000ebff1281): kobject_uevent_env: filter function caused the event to drop! [ 860.573010][ T9168] kobject: 'rx-0' (0000000038fd33de): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.583213][ T9168] kobject: 'rx-0' (0000000038fd33de): kobject_uevent_env [ 860.590314][ T9168] kobject: 'rx-0' (0000000038fd33de): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 860.601332][ T9168] kobject: 'tx-0' (000000004a559a1c): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.611554][ T9168] kobject: 'tx-0' (000000004a559a1c): kobject_uevent_env [ 860.618610][ T9168] kobject: 'tx-0' (000000004a559a1c): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 860.630234][ T9168] kobject: 'gre0' (000000008232925e): kobject_add_internal: parent: 'net', set: 'devices' [ 860.640806][ T9168] kobject: 'gre0' (000000008232925e): kobject_uevent_env [ 860.647912][ T9168] kobject: 'gre0' (000000008232925e): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 860.657852][ T9168] kobject: 'queues' (00000000e6cec29a): kobject_add_internal: parent: 'gre0', set: '' [ 860.667956][ T9168] kobject: 'queues' (00000000e6cec29a): kobject_uevent_env [ 860.675185][ T9168] kobject: 'queues' (00000000e6cec29a): kobject_uevent_env: filter function caused the event to drop! [ 860.686179][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.696592][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): kobject_uevent_env [ 860.703610][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 860.714539][ T9168] kobject: 'tx-0' (00000000cd571777): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.724688][ T9168] kobject: 'tx-0' (00000000cd571777): kobject_uevent_env [ 860.731761][ T9168] kobject: 'tx-0' (00000000cd571777): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 860.745415][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): kobject_cleanup, parent (null) [ 860.745721][ T8942] kobject: 'ip_vti0' (00000000224ac692): kobject_add_internal: parent: 'net', set: 'devices' [ 860.754620][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): auto cleanup 'remove' event [ 860.773579][ T8942] kobject: 'ip_vti0' (00000000224ac692): kobject_uevent_env [ 860.792063][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): kobject_uevent_env [ 860.795835][ T8942] kobject: 'ip_vti0' (00000000224ac692): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 860.805975][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 860.813201][ T8942] kobject: 'queues' (00000000f55b71d5): kobject_add_internal: parent: 'ip_vti0', set: '' [ 860.831083][ T7975] kobject: 'ip6gre0' (00000000d77c55b8): calling ktype release [ 860.834877][ T8942] kobject: 'queues' (00000000f55b71d5): kobject_uevent_env [ 860.839050][ T7975] kobject: 'ip6gre0': free name [ 860.845890][ T8942] kobject: 'queues' (00000000f55b71d5): kobject_uevent_env: filter function caused the event to drop! [ 860.861726][ T8942] kobject: 'rx-0' (000000009ed16ea4): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.871861][ T8942] kobject: 'rx-0' (000000009ed16ea4): kobject_uevent_env [ 860.878950][ T8942] kobject: 'rx-0' (000000009ed16ea4): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 860.890155][ T8942] kobject: 'tx-0' (0000000082b65963): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.900332][ T8942] kobject: 'tx-0' (0000000082b65963): kobject_uevent_env [ 860.907418][ T8942] kobject: 'tx-0' (0000000082b65963): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 860.919398][ T9168] kobject: 'gretap0' (000000005bfce939): kobject_add_internal: parent: 'net', set: 'devices' [ 860.931805][ T9168] kobject: 'gretap0' (000000005bfce939): kobject_uevent_env [ 860.939534][ T9168] kobject: 'gretap0' (000000005bfce939): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 860.951469][ T9168] kobject: 'queues' (000000001e928c3a): kobject_add_internal: parent: 'gretap0', set: '' [ 860.962269][ T9168] kobject: 'queues' (000000001e928c3a): kobject_uevent_env [ 860.971014][ T9168] kobject: 'queues' (000000001e928c3a): kobject_uevent_env: filter function caused the event to drop! [ 860.982410][ T9168] kobject: 'rx-0' (00000000a1acf03e): kobject_add_internal: parent: 'queues', set: 'queues' [ 860.994125][ T9168] kobject: 'rx-0' (00000000a1acf03e): kobject_uevent_env [ 861.001602][ T9168] kobject: 'rx-0' (00000000a1acf03e): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 861.014432][ T9168] kobject: 'tx-0' (0000000081c35ed1): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.025101][ T9168] kobject: 'tx-0' (0000000081c35ed1): kobject_uevent_env [ 861.033927][ T9168] kobject: 'tx-0' (0000000081c35ed1): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 861.046042][ T9168] kobject: 'batman_adv' (000000000ffbad69): kobject_add_internal: parent: 'gretap0', set: '' [ 861.058367][ T9168] kobject: 'erspan0' (000000009decefef): kobject_add_internal: parent: 'net', set: 'devices' [ 861.069176][ T9168] kobject: 'erspan0' (000000009decefef): kobject_uevent_env [ 861.076482][ T9168] kobject: 'erspan0' (000000009decefef): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 861.086935][ T9168] kobject: 'queues' (000000002cb751f0): kobject_add_internal: parent: 'erspan0', set: '' [ 861.097332][ T9168] kobject: 'queues' (000000002cb751f0): kobject_uevent_env [ 861.104586][ T9168] kobject: 'queues' (000000002cb751f0): kobject_uevent_env: filter function caused the event to drop! [ 861.115591][ T9168] kobject: 'rx-0' (000000000900c0e0): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.125741][ T9168] kobject: 'rx-0' (000000000900c0e0): kobject_uevent_env [ 861.132840][ T9168] kobject: 'rx-0' (000000000900c0e0): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 861.144157][ T9168] kobject: 'tx-0' (000000007caca011): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.154408][ T9168] kobject: 'tx-0' (000000007caca011): kobject_uevent_env [ 861.162992][ T9168] kobject: 'tx-0' (000000007caca011): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 861.178667][ T9168] kobject: 'batman_adv' (00000000baaa4150): kobject_add_internal: parent: 'erspan0', set: '' [ 861.193588][ T7975] kobject: 'ip6gre0' (0000000018f07574): kobject_cleanup, parent (null) [ 861.203671][ T8942] kobject: 'rx-0' (000000009ed16ea4): kobject_cleanup, parent 00000000f55b71d5 [ 861.216225][ T7975] kobject: 'ip6gre0' (0000000018f07574): auto cleanup 'remove' event [ 861.227507][ T8942] kobject: 'rx-0' (000000009ed16ea4): auto cleanup 'remove' event [ 861.239253][ T8942] kobject: 'rx-0' (000000009ed16ea4): kobject_uevent_env [ 861.246608][ T7975] kobject: 'ip6gre0' (0000000018f07574): kobject_uevent_env [ 861.257686][ T8942] kobject: 'rx-0' (000000009ed16ea4): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 861.264913][ T7975] kobject: 'ip6gre0' (0000000018f07574): kobject_uevent_env: uevent_suppress caused the event to drop! [ 861.269108][ T8942] kobject: 'rx-0' (000000009ed16ea4): auto cleanup kobject_del [ 861.279856][ T7975] kobject: 'ip6gre0' (0000000018f07574): calling ktype release [ 861.279882][ T7975] kobject: 'ip6gre0': free name [ 861.291050][ T8942] kobject: 'rx-0' (000000009ed16ea4): calling ktype release [ 861.308301][ T8942] kobject: 'rx-0': free name [ 861.312975][ T8942] kobject: 'tx-0' (0000000082b65963): kobject_cleanup, parent 00000000f55b71d5 [ 861.321947][ T8942] kobject: 'tx-0' (0000000082b65963): auto cleanup 'remove' event [ 861.329747][ T8942] kobject: 'tx-0' (0000000082b65963): kobject_uevent_env [ 861.336862][ T8942] kobject: 'tx-0' (0000000082b65963): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 861.348086][ T8942] kobject: 'tx-0' (0000000082b65963): auto cleanup kobject_del [ 861.355996][ T8942] kobject: 'tx-0' (0000000082b65963): calling ktype release [ 861.363320][ T8942] kobject: 'tx-0': free name [ 861.367914][ T8942] kobject: 'queues' (00000000f55b71d5): kobject_cleanup, parent (null) [ 861.377030][ T8942] kobject: 'queues' (00000000f55b71d5): calling ktype release [ 861.384593][ T8942] kobject: 'queues' (00000000f55b71d5): kset_release [ 861.391334][ T8942] kobject: 'queues': free name [ 861.396316][ T8942] kobject: 'ip_vti0' (00000000224ac692): kobject_uevent_env [ 861.403652][ T8942] kobject: 'ip_vti0' (00000000224ac692): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 861.414327][ T9168] kobject: 'ip_vti0' (0000000043a45869): kobject_add_internal: parent: 'net', set: 'devices' [ 861.425144][ T9168] kobject: 'ip_vti0' (0000000043a45869): kobject_uevent_env [ 861.434028][ T9168] kobject: 'ip_vti0' (0000000043a45869): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 861.444457][ T9168] kobject: 'queues' (00000000f14dc6aa): kobject_add_internal: parent: 'ip_vti0', set: '' [ 861.454877][ T9168] kobject: 'queues' (00000000f14dc6aa): kobject_uevent_env [ 861.462355][ T9168] kobject: 'queues' (00000000f14dc6aa): kobject_uevent_env: filter function caused the event to drop! [ 861.473378][ T9168] kobject: 'rx-0' (00000000fbda8bdb): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.483530][ T9168] kobject: 'rx-0' (00000000fbda8bdb): kobject_uevent_env [ 861.490558][ T9168] kobject: 'rx-0' (00000000fbda8bdb): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 861.501762][ T9168] kobject: 'tx-0' (00000000e46cbb9d): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.512001][ T9168] kobject: 'tx-0' (00000000e46cbb9d): kobject_uevent_env [ 861.519029][ T9168] kobject: 'tx-0' (00000000e46cbb9d): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 861.530700][ T7975] kobject: 'ip6gre0' (00000000921f05ce): kobject_cleanup, parent (null) [ 861.542036][ T8942] kobject: 'ip_vti0' (00000000224ac692): kobject_cleanup, parent (null) [ 861.551232][ T8942] kobject: 'ip_vti0' (00000000224ac692): calling ktype release [ 861.552355][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): kobject_add_internal: parent: 'net', set: 'devices' [ 861.562176][ T7975] kobject: 'ip6gre0' (00000000921f05ce): auto cleanup 'remove' event [ 861.580933][ T8942] kobject: 'ip_vti0': free name [ 861.586550][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): kobject_uevent_env [ 861.597700][ T7975] kobject: 'ip6gre0' (00000000921f05ce): kobject_uevent_env [ 861.605362][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 861.619984][ T7975] kobject: 'ip6gre0' (00000000921f05ce): kobject_uevent_env: uevent_suppress caused the event to drop! [ 861.624686][ T9168] kobject: 'queues' (000000004130c654): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 861.631379][ T7975] kobject: 'ip6gre0' (00000000921f05ce): calling ktype release [ 861.641481][ T9168] kobject: 'queues' (000000004130c654): kobject_uevent_env [ 861.652598][ T7975] kobject: 'ip6gre0': free name [ 861.656240][ T9168] kobject: 'queues' (000000004130c654): kobject_uevent_env: filter function caused the event to drop! [ 861.656268][ T9168] kobject: 'rx-0' (00000000aaaf2f05): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.682826][ T9168] kobject: 'rx-0' (00000000aaaf2f05): kobject_uevent_env [ 861.689898][ T9168] kobject: 'rx-0' (00000000aaaf2f05): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 861.702108][ T9168] kobject: 'tx-0' (000000002a13c895): kobject_add_internal: parent: 'queues', set: 'queues' [ 861.712722][ T9168] kobject: 'tx-0' (000000002a13c895): kobject_uevent_env [ 861.719781][ T9168] kobject: 'tx-0' (000000002a13c895): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 861.732493][ T8942] kobject: 'batman_adv' (000000000c35bb2f): kobject_uevent_env [ 861.740110][ T8942] kobject: 'batman_adv' (000000000c35bb2f): kobject_uevent_env: filter function caused the event to drop! [ 861.751452][ T8942] kobject: 'batman_adv' (000000000c35bb2f): kobject_cleanup, parent (null) [ 861.760935][ T8942] kobject: 'batman_adv' (000000000c35bb2f): calling ktype release [ 861.768789][ T8942] kobject: (000000000c35bb2f): dynamic_kobj_release [ 861.775417][ T8942] kobject: 'batman_adv': free name [ 861.780623][ T8942] kobject: 'rx-0' (00000000caeb38ba): kobject_cleanup, parent 00000000258bddad [ 861.789633][ T8942] kobject: 'rx-0' (00000000caeb38ba): auto cleanup 'remove' event [ 861.797470][ T8942] kobject: 'rx-0' (00000000caeb38ba): kobject_uevent_env [ 861.804640][ T8942] kobject: 'rx-0' (00000000caeb38ba): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 861.815867][ T8942] kobject: 'rx-0' (00000000caeb38ba): auto cleanup kobject_del [ 861.823420][ T8942] kobject: 'rx-0' (00000000caeb38ba): calling ktype release [ 861.830767][ T8942] kobject: 'rx-0': free name [ 861.835451][ T8942] kobject: 'tx-0' (000000004458b3a3): kobject_cleanup, parent 00000000258bddad [ 861.844708][ T8942] kobject: 'tx-0' (000000004458b3a3): auto cleanup 'remove' event [ 861.852515][ T8942] kobject: 'tx-0' (000000004458b3a3): kobject_uevent_env [ 861.859595][ T8942] kobject: 'tx-0' (000000004458b3a3): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 861.870801][ T8942] kobject: 'tx-0' (000000004458b3a3): auto cleanup kobject_del [ 861.878425][ T8942] kobject: 'tx-0' (000000004458b3a3): calling ktype release [ 861.885742][ T8942] kobject: 'tx-0': free name [ 861.890352][ T8942] kobject: 'queues' (00000000258bddad): kobject_cleanup, parent (null) [ 861.899478][ T8942] kobject: 'queues' (00000000258bddad): calling ktype release [ 861.906961][ T8942] kobject: 'queues' (00000000258bddad): kset_release [ 861.913614][ T8942] kobject: 'queues': free name [ 861.918727][ T8942] kobject: 'erspan0' (00000000f44cd5a3): kobject_uevent_env [ 861.926035][ T8942] kobject: 'erspan0' (00000000f44cd5a3): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 861.937619][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): kobject_cleanup, parent (null) [ 861.946882][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): auto cleanup 'remove' event [ 861.954970][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): kobject_uevent_env [ 861.962340][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): kobject_uevent_env: uevent_suppress caused the event to drop! [ 861.963332][ T9168] kobject: 'rx-0' (00000000aaaf2f05): kobject_cleanup, parent 000000004130c654 [ 861.973532][ T7975] kobject: 'ip6gre0' (000000001d1a44ee): calling ktype release [ 861.990093][ T7975] kobject: 'ip6gre0': free name [ 861.995025][ T9168] kobject: 'rx-0' (00000000aaaf2f05): auto cleanup 'remove' event [ 862.006296][ T9168] kobject: 'rx-0' (00000000aaaf2f05): kobject_uevent_env [ 862.013363][ T9168] kobject: 'rx-0' (00000000aaaf2f05): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 862.024811][ T9168] kobject: 'rx-0' (00000000aaaf2f05): auto cleanup kobject_del [ 862.032447][ T9168] kobject: 'rx-0' (00000000aaaf2f05): calling ktype release [ 862.039778][ T9168] kobject: 'rx-0': free name [ 862.044620][ T9168] kobject: 'tx-0' (000000002a13c895): kobject_cleanup, parent 000000004130c654 [ 862.053590][ T9168] kobject: 'tx-0' (000000002a13c895): auto cleanup 'remove' event [ 862.061408][ T9168] kobject: 'tx-0' (000000002a13c895): kobject_uevent_env [ 862.068499][ T9168] kobject: 'tx-0' (000000002a13c895): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 862.079784][ T9168] kobject: 'tx-0' (000000002a13c895): auto cleanup kobject_del [ 862.087389][ T9168] kobject: 'tx-0' (000000002a13c895): calling ktype release [ 862.094662][ T9168] kobject: 'tx-0': free name [ 862.099325][ T9168] kobject: 'queues' (000000004130c654): kobject_cleanup, parent (null) [ 862.108441][ T9168] kobject: 'queues' (000000004130c654): calling ktype release [ 862.115870][ T9168] kobject: 'queues' (000000004130c654): kset_release [ 862.122555][ T9168] kobject: 'queues': free name [ 862.127555][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): kobject_uevent_env [ 862.134921][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 862.145933][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): kobject_cleanup, parent (null) [ 862.147034][ T8942] kobject: 'erspan0' (00000000f44cd5a3): kobject_cleanup, parent (null) [ 862.155188][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): auto cleanup 'remove' event [ 862.164431][ T8942] kobject: 'erspan0' (00000000f44cd5a3): calling ktype release [ 862.164458][ T8942] kobject: 'erspan0': free name [ 862.176369][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): kobject_uevent_env [ 862.180369][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): kobject_cleanup, parent (null) [ 862.192448][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 862.201926][ T9168] kobject: 'ip6_vti0' (000000000c4604bf): calling ktype release [ 862.216419][ T7975] kobject: 'ip6gre0' (000000007f4c4b7e): calling ktype release [ 862.229472][ T8942] kobject: 'batman_adv' (0000000094a80f49): kobject_uevent_env [ 862.231696][ T7975] kobject: 'ip6gre0': free name [ 862.237018][ T8942] kobject: 'batman_adv' (0000000094a80f49): kobject_uevent_env: filter function caused the event to drop! [ 862.237060][ T8942] kobject: 'batman_adv' (0000000094a80f49): kobject_cleanup, parent (null) [ 862.242180][ T9168] kobject: 'ip6_vti0': free name 09:21:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000a, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) getpid() socket$unix(0x1, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r1, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:17 executing program 2: socket$inet(0x2, 0x4000000000a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = dup3(r0, r0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r2, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="619a1c738b3b9eb0"], 0x3}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)) 09:21:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:21:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x80) r2 = dup3(r1, r1, 0x0) getpid() socket$unix(0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) signalfd4(r3, &(0x7f0000000080)={0x593}, 0x8, 0x800) unshare(0x44000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r4, &(0x7f0000000140)=""/113}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x2d, 0xff, 0x5, 0x3b35, 0x14, 0x5, 0xc75, 0x3, 0xfffffffffffffffb, 0x1f}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfa07, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="619a1c738b3b9eb008001b0000000000"], 0x1}}, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) io_setup(0xce, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 862.265620][ T8942] kobject: 'batman_adv' (0000000094a80f49): calling ktype release [ 862.278127][ T8942] kobject: (0000000094a80f49): dynamic_kobj_release [ 862.284727][ T8942] kobject: 'batman_adv': free name [ 862.293517][ T8942] kobject: 'rx-0' (00000000a8d2df87): kobject_cleanup, parent 00000000f9382d2f [ 862.302541][ T8942] kobject: 'rx-0' (00000000a8d2df87): auto cleanup 'remove' event [ 862.322954][ T3875] kobject: 'loop4' (0000000091c1f7da): kobject_uevent_env [ 862.332426][ T8942] kobject: 'rx-0' (00000000a8d2df87): kobject_uevent_env [ 862.332562][ T3875] kobject: 'loop4' (0000000091c1f7da): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 862.346331][ T8942] kobject: 'rx-0' (00000000a8d2df87): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 862.366350][ T8942] kobject: 'rx-0' (00000000a8d2df87): auto cleanup kobject_del [ 862.371032][ T9298] IPVS: ftp: loaded support on port[0] = 21 [ 862.384664][ T3875] kobject: 'loop1' (0000000034c1f82b): kobject_uevent_env [ 862.395342][ T3875] kobject: 'loop1' (0000000034c1f82b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 862.414609][ T8942] kobject: 'rx-0' (00000000a8d2df87): calling ktype release [ 862.427336][ T8942] kobject: 'rx-0': free name [ 862.431056][ T3875] kobject: 'loop5' (000000000f38d621): kobject_uevent_env [ 862.435219][ T8942] kobject: 'tx-0' (00000000125a2035): kobject_cleanup, parent 00000000f9382d2f [ 862.439056][ T3875] kobject: 'loop5' (000000000f38d621): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 862.448008][ T8942] kobject: 'tx-0' (00000000125a2035): auto cleanup 'remove' event [ 862.448017][ T8942] kobject: 'tx-0' (00000000125a2035): kobject_uevent_env [ 862.480849][ T8942] kobject: 'tx-0' (00000000125a2035): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 862.492221][ T8942] kobject: 'tx-0' (00000000125a2035): auto cleanup kobject_del [ 862.499814][ T8942] kobject: 'tx-0' (00000000125a2035): calling ktype release [ 862.519411][ T8942] kobject: 'tx-0': free name [ 862.524127][ T8942] kobject: 'queues' (00000000f9382d2f): kobject_cleanup, parent (null) [ 862.533317][ T8942] kobject: 'queues' (00000000f9382d2f): calling ktype release [ 862.540894][ T8942] kobject: 'queues' (00000000f9382d2f): kset_release [ 862.547577][ T8942] kobject: 'queues': free name [ 862.554244][ T8942] kobject: 'gretap0' (000000002ed05841): kobject_uevent_env [ 862.563992][ T8942] kobject: 'gretap0' (000000002ed05841): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 862.575749][ T7975] kobject: 'ip6gre0' (0000000078f672a4): kobject_cleanup, parent (null) [ 862.587950][ T9168] kobject: 'rx-0' (00000000fbda8bdb): kobject_cleanup, parent 00000000f14dc6aa [ 862.596950][ T7975] kobject: 'ip6gre0' (0000000078f672a4): auto cleanup 'remove' event [ 862.596968][ T7975] kobject: 'ip6gre0' (0000000078f672a4): kobject_uevent_env [ 862.608295][ T9168] kobject: 'rx-0' (00000000fbda8bdb): auto cleanup 'remove' event [ 862.612925][ T7975] kobject: 'ip6gre0' (0000000078f672a4): kobject_uevent_env: uevent_suppress caused the event to drop! [ 862.620420][ T9168] kobject: 'rx-0' (00000000fbda8bdb): kobject_uevent_env [ 862.620458][ T9168] kobject: 'rx-0' (00000000fbda8bdb): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 862.631759][ T7975] kobject: 'ip6gre0' (0000000078f672a4): calling ktype release [ 862.641208][ T9168] kobject: 'rx-0' (00000000fbda8bdb): auto cleanup kobject_del [ 862.649985][ T7975] kobject: 'ip6gre0': free name [ 862.660282][ T9168] kobject: 'rx-0' (00000000fbda8bdb): calling ktype release [ 862.677005][ T9168] kobject: 'rx-0': free name [ 862.681703][ T9168] kobject: 'tx-0' (00000000e46cbb9d): kobject_cleanup, parent 00000000f14dc6aa [ 862.690625][ T9168] kobject: 'tx-0' (00000000e46cbb9d): auto cleanup 'remove' event [ 862.698452][ T9168] kobject: 'tx-0' (00000000e46cbb9d): kobject_uevent_env [ 862.705513][ T9168] kobject: 'tx-0' (00000000e46cbb9d): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 862.716723][ T9168] kobject: 'tx-0' (00000000e46cbb9d): auto cleanup kobject_del [ 862.724348][ T9168] kobject: 'tx-0' (00000000e46cbb9d): calling ktype release [ 862.731638][ T9168] kobject: 'tx-0': free name [ 862.736267][ T9168] kobject: 'queues' (00000000f14dc6aa): kobject_cleanup, parent (null) [ 862.745432][ T9168] kobject: 'queues' (00000000f14dc6aa): calling ktype release [ 862.752955][ T9168] kobject: 'queues' (00000000f14dc6aa): kset_release [ 862.759626][ T9168] kobject: 'queues': free name [ 862.764823][ T9168] kobject: 'ip_vti0' (0000000043a45869): kobject_uevent_env [ 862.772119][ T9168] kobject: 'ip_vti0' (0000000043a45869): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 862.782876][ T9298] kobject: 'lo' (00000000e15981a5): kobject_add_internal: parent: 'net', set: 'devices' [ 862.793251][ T9298] kobject: 'lo' (00000000e15981a5): kobject_uevent_env [ 862.800116][ T9298] kobject: 'lo' (00000000e15981a5): fill_kobj_path: path = '/devices/virtual/net/lo' [ 862.809697][ T9298] kobject: 'queues' (00000000987081b7): kobject_add_internal: parent: 'lo', set: '' [ 862.819615][ T9298] kobject: 'queues' (00000000987081b7): kobject_uevent_env [ 862.826836][ T9298] kobject: 'queues' (00000000987081b7): kobject_uevent_env: filter function caused the event to drop! [ 862.837885][ T9298] kobject: 'rx-0' (00000000e620fe00): kobject_add_internal: parent: 'queues', set: 'queues' [ 862.848032][ T9298] kobject: 'rx-0' (00000000e620fe00): kobject_uevent_env [ 862.855247][ T9298] kobject: 'rx-0' (00000000e620fe00): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 862.866268][ T9298] kobject: 'tx-0' (00000000e6061957): kobject_add_internal: parent: 'queues', set: 'queues' [ 862.876433][ T9298] kobject: 'tx-0' (00000000e6061957): kobject_uevent_env [ 862.883508][ T9298] kobject: 'tx-0' (00000000e6061957): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 862.895020][ T8942] kobject: 'gretap0' (000000002ed05841): kobject_cleanup, parent (null) [ 862.895209][ T9298] kobject: 'tunl0' (000000002973b657): kobject_add_internal: parent: 'net', set: 'devices' [ 862.914902][ T9298] kobject: 'tunl0' (000000002973b657): kobject_uevent_env [ 862.918381][ T8942] kobject: 'gretap0' (000000002ed05841): calling ktype release [ 862.922060][ T9298] kobject: 'tunl0' (000000002973b657): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 862.922142][ T9298] kobject: 'queues' (000000006d5ed844): kobject_add_internal: parent: 'tunl0', set: '' [ 862.932481][ T8942] kobject: 'gretap0': free name [ 862.939805][ T9298] kobject: 'queues' (000000006d5ed844): kobject_uevent_env [ 862.961981][ T9298] kobject: 'queues' (000000006d5ed844): kobject_uevent_env: filter function caused the event to drop! [ 862.972997][ T9298] kobject: 'rx-0' (0000000051cb4f39): kobject_add_internal: parent: 'queues', set: 'queues' [ 862.983094][ T9298] kobject: 'rx-0' (0000000051cb4f39): kobject_uevent_env [ 862.990162][ T9298] kobject: 'rx-0' (0000000051cb4f39): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 863.001242][ T9298] kobject: 'tx-0' (000000009cdfedd2): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.011482][ T9298] kobject: 'tx-0' (000000009cdfedd2): kobject_uevent_env [ 863.018538][ T9298] kobject: 'tx-0' (000000009cdfedd2): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 863.030034][ T7975] kobject: 'ip6gre0' (0000000053306c8f): kobject_cleanup, parent (null) [ 863.030054][ T9168] kobject: 'ip_vti0' (0000000043a45869): kobject_cleanup, parent (null) [ 863.042934][ T7975] kobject: 'ip6gre0' (0000000053306c8f): auto cleanup 'remove' event [ 863.048509][ T9168] kobject: 'ip_vti0' (0000000043a45869): calling ktype release [ 863.060745][ T7975] kobject: 'ip6gre0' (0000000053306c8f): kobject_uevent_env [ 863.064238][ T9168] kobject: 'ip_vti0': free name [ 863.071804][ T7975] kobject: 'ip6gre0' (0000000053306c8f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 863.087514][ T7975] kobject: 'ip6gre0' (0000000053306c8f): calling ktype release [ 863.088050][ T8942] kobject: 'rx-0' (0000000033870ef9): kobject_cleanup, parent 00000000facea821 [ 863.095114][ T7975] kobject: 'ip6gre0': free name [ 863.109202][ T8942] kobject: 'rx-0' (0000000033870ef9): auto cleanup 'remove' event [ 863.117049][ T8942] kobject: 'rx-0' (0000000033870ef9): kobject_uevent_env [ 863.124095][ T8942] kobject: 'rx-0' (0000000033870ef9): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 863.135119][ T8942] kobject: 'rx-0' (0000000033870ef9): auto cleanup kobject_del [ 863.142766][ T8942] kobject: 'rx-0' (0000000033870ef9): calling ktype release [ 863.150079][ T8942] kobject: 'rx-0': free name [ 863.154684][ T8942] kobject: 'tx-0' (00000000249c9868): kobject_cleanup, parent 00000000facea821 [ 863.163700][ T8942] kobject: 'tx-0' (00000000249c9868): auto cleanup 'remove' event [ 863.171559][ T8942] kobject: 'tx-0' (00000000249c9868): kobject_uevent_env [ 863.178673][ T8942] kobject: 'tx-0' (00000000249c9868): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 863.189627][ T8942] kobject: 'tx-0' (00000000249c9868): auto cleanup kobject_del [ 863.197259][ T8942] kobject: 'tx-0' (00000000249c9868): calling ktype release [ 863.204550][ T8942] kobject: 'tx-0': free name [ 863.209242][ T8942] kobject: 'queues' (00000000facea821): kobject_cleanup, parent (null) [ 863.218425][ T8942] kobject: 'queues' (00000000facea821): calling ktype release [ 863.225876][ T8942] kobject: 'queues' (00000000facea821): kset_release [ 863.232587][ T8942] kobject: 'queues': free name [ 863.237667][ T8942] kobject: 'gre0' (0000000072153bfe): kobject_uevent_env [ 863.244724][ T8942] kobject: 'gre0' (0000000072153bfe): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 863.255205][ T9298] kobject: 'gre0' (00000000985e3ee2): kobject_add_internal: parent: 'net', set: 'devices' [ 863.265726][ T9298] kobject: 'gre0' (00000000985e3ee2): kobject_uevent_env [ 863.272818][ T9298] kobject: 'gre0' (00000000985e3ee2): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 863.282700][ T9298] kobject: 'queues' (0000000098b285c2): kobject_add_internal: parent: 'gre0', set: '' [ 863.292828][ T9298] kobject: 'queues' (0000000098b285c2): kobject_uevent_env [ 863.300042][ T9298] kobject: 'queues' (0000000098b285c2): kobject_uevent_env: filter function caused the event to drop! [ 863.311032][ T9298] kobject: 'rx-0' (00000000043060d7): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.321157][ T9298] kobject: 'rx-0' (00000000043060d7): kobject_uevent_env [ 863.328247][ T9298] kobject: 'rx-0' (00000000043060d7): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 863.339173][ T9298] kobject: 'tx-0' (0000000091fdf243): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.349399][ T9298] kobject: 'tx-0' (0000000091fdf243): kobject_uevent_env [ 863.356438][ T9298] kobject: 'tx-0' (0000000091fdf243): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 863.368051][ T9298] kobject: 'gretap0' (00000000d55bc985): kobject_add_internal: parent: 'net', set: 'devices' [ 863.378870][ T9298] kobject: 'gretap0' (00000000d55bc985): kobject_uevent_env [ 863.386176][ T9298] kobject: 'gretap0' (00000000d55bc985): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 863.396636][ T9298] kobject: 'queues' (00000000207b2123): kobject_add_internal: parent: 'gretap0', set: '' [ 863.407012][ T9298] kobject: 'queues' (00000000207b2123): kobject_uevent_env [ 863.414269][ T9298] kobject: 'queues' (00000000207b2123): kobject_uevent_env: filter function caused the event to drop! [ 863.425270][ T9298] kobject: 'rx-0' (00000000aa545830): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.435432][ T9298] kobject: 'rx-0' (00000000aa545830): kobject_uevent_env [ 863.442514][ T9298] kobject: 'rx-0' (00000000aa545830): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 863.453740][ T9298] kobject: 'tx-0' (00000000859a250c): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.463966][ T9298] kobject: 'tx-0' (00000000859a250c): kobject_uevent_env [ 863.471070][ T9298] kobject: 'tx-0' (00000000859a250c): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 863.482878][ T9298] kobject: 'batman_adv' (000000006122bb58): kobject_add_internal: parent: 'gretap0', set: '' [ 863.494751][ T9168] kobject: 'batman_adv' (00000000baaa4150): kobject_uevent_env [ 863.502429][ T9168] kobject: 'batman_adv' (00000000baaa4150): kobject_uevent_env: filter function caused the event to drop! [ 863.513871][ T9168] kobject: 'batman_adv' (00000000baaa4150): kobject_cleanup, parent (null) [ 863.523345][ T9168] kobject: 'batman_adv' (00000000baaa4150): calling ktype release [ 863.531196][ T9168] kobject: (00000000baaa4150): dynamic_kobj_release [ 863.537784][ T9168] kobject: 'batman_adv': free name [ 863.543077][ T9168] kobject: 'rx-0' (000000000900c0e0): kobject_cleanup, parent 000000002cb751f0 [ 863.552031][ T9168] kobject: 'rx-0' (000000000900c0e0): auto cleanup 'remove' event [ 863.560246][ T9168] kobject: 'rx-0' (000000000900c0e0): kobject_uevent_env [ 863.567302][ T9168] kobject: 'rx-0' (000000000900c0e0): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 863.568868][ C1] net_ratelimit: 18 callbacks suppressed [ 863.568875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 863.578498][ T9168] kobject: 'rx-0' (000000000900c0e0): auto cleanup kobject_del [ 863.584081][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 863.590261][ T9168] kobject: 'rx-0' (000000000900c0e0): calling ktype release [ 863.610477][ T9168] kobject: 'rx-0': free name [ 863.615073][ T9168] kobject: 'tx-0' (000000007caca011): kobject_cleanup, parent 000000002cb751f0 [ 863.624017][ T9168] kobject: 'tx-0' (000000007caca011): auto cleanup 'remove' event [ 863.631834][ T9168] kobject: 'tx-0' (000000007caca011): kobject_uevent_env [ 863.638851][ T9168] kobject: 'tx-0' (000000007caca011): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 863.650028][ T9168] kobject: 'tx-0' (000000007caca011): auto cleanup kobject_del [ 863.657588][ T9168] kobject: 'tx-0' (000000007caca011): calling ktype release [ 863.664881][ T9168] kobject: 'tx-0': free name [ 863.669475][ T9168] kobject: 'queues' (000000002cb751f0): kobject_cleanup, parent (null) [ 863.678598][ T9168] kobject: 'queues' (000000002cb751f0): calling ktype release [ 863.686070][ T9168] kobject: 'queues' (000000002cb751f0): kset_release [ 863.692764][ T9168] kobject: 'queues': free name [ 863.697744][ T9168] kobject: 'erspan0' (000000009decefef): kobject_uevent_env [ 863.705082][ T9168] kobject: 'erspan0' (000000009decefef): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 863.715605][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): kobject_cleanup, parent (null) [ 863.715624][ T8942] kobject: 'gre0' (0000000072153bfe): kobject_cleanup, parent (null) [ 863.725216][ T9298] kobject: 'erspan0' (00000000e457e839): kobject_add_internal: parent: 'net', set: 'devices' [ 863.734312][ T8942] kobject: 'gre0' (0000000072153bfe): calling ktype release [ 863.747632][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): auto cleanup 'remove' event [ 863.751375][ T8942] kobject: 'gre0': free name [ 863.759460][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): kobject_uevent_env [ 863.764727][ T9298] kobject: 'erspan0' (00000000e457e839): kobject_uevent_env [ 863.774665][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 863.778894][ T9298] kobject: 'erspan0' (00000000e457e839): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 863.789917][ T7975] kobject: 'ip6gre0' (00000000d60a5fb8): calling ktype release [ 863.800604][ T9298] kobject: 'queues' (000000007f9b56a6): kobject_add_internal: parent: 'erspan0', set: '' [ 863.811172][ T7975] kobject: 'ip6gre0': free name [ 863.818260][ T9298] kobject: 'queues' (000000007f9b56a6): kobject_uevent_env [ 863.830148][ T9298] kobject: 'queues' (000000007f9b56a6): kobject_uevent_env: filter function caused the event to drop! [ 863.841181][ T9298] kobject: 'rx-0' (000000001d58da1a): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.851334][ T9298] kobject: 'rx-0' (000000001d58da1a): kobject_uevent_env [ 863.858372][ T9298] kobject: 'rx-0' (000000001d58da1a): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 863.869604][ T9298] kobject: 'tx-0' (000000001a8517ef): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.879810][ T9298] kobject: 'tx-0' (000000001a8517ef): kobject_uevent_env [ 863.886934][ T9298] kobject: 'tx-0' (000000001a8517ef): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 863.898574][ T9298] kobject: 'batman_adv' (00000000e7544efa): kobject_add_internal: parent: 'erspan0', set: '' [ 863.909831][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): kobject_add_internal: parent: 'net', set: 'devices' [ 863.920609][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): kobject_uevent_env [ 863.928004][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 863.938426][ T9298] kobject: 'queues' (00000000cd875f76): kobject_add_internal: parent: 'ip_vti0', set: '' [ 863.948813][ T9298] kobject: 'queues' (00000000cd875f76): kobject_uevent_env [ 863.956035][ T9298] kobject: 'queues' (00000000cd875f76): kobject_uevent_env: filter function caused the event to drop! [ 863.967021][ T9298] kobject: 'rx-0' (0000000002c9209d): kobject_add_internal: parent: 'queues', set: 'queues' [ 863.977166][ T9298] kobject: 'rx-0' (0000000002c9209d): kobject_uevent_env [ 863.984266][ T9298] kobject: 'rx-0' (0000000002c9209d): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 863.995476][ T9298] kobject: 'tx-0' (00000000b83ca6b5): kobject_add_internal: parent: 'queues', set: 'queues' [ 864.005713][ T9298] kobject: 'tx-0' (00000000b83ca6b5): kobject_uevent_env [ 864.012794][ T9298] kobject: 'tx-0' (00000000b83ca6b5): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 864.025740][ T8942] kobject: 'rx-0' (000000005c837658): kobject_cleanup, parent 00000000086c25cb [ 864.034714][ T8942] kobject: 'rx-0' (000000005c837658): auto cleanup 'remove' event [ 864.042539][ T8942] kobject: 'rx-0' (000000005c837658): kobject_uevent_env [ 864.049633][ T8942] kobject: 'rx-0' (000000005c837658): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 864.060702][ T8942] kobject: 'rx-0' (000000005c837658): auto cleanup kobject_del [ 864.068593][ T8942] kobject: 'rx-0' (000000005c837658): calling ktype release [ 864.075906][ T8942] kobject: 'rx-0': free name [ 864.080511][ T8942] kobject: 'tx-0' (00000000f2938c03): kobject_cleanup, parent 00000000086c25cb [ 864.089468][ T8942] kobject: 'tx-0' (00000000f2938c03): auto cleanup 'remove' event [ 864.097320][ T8942] kobject: 'tx-0' (00000000f2938c03): kobject_uevent_env [ 864.104391][ T8942] kobject: 'tx-0' (00000000f2938c03): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 864.115419][ T8942] kobject: 'tx-0' (00000000f2938c03): auto cleanup kobject_del [ 864.122979][ T8942] kobject: 'tx-0' (00000000f2938c03): calling ktype release [ 864.130291][ T8942] kobject: 'tx-0': free name [ 864.134931][ T8942] kobject: 'queues' (00000000086c25cb): kobject_cleanup, parent (null) [ 864.144086][ T8942] kobject: 'queues' (00000000086c25cb): calling ktype release [ 864.151569][ T8942] kobject: 'queues' (00000000086c25cb): kset_release [ 864.158261][ T8942] kobject: 'queues': free name [ 864.163235][ T8942] kobject: 'tunl0' (000000007d126f1a): kobject_uevent_env [ 864.170402][ T8942] kobject: 'tunl0' (000000007d126f1a): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 864.180575][ T9168] kobject: 'erspan0' (000000009decefef): kobject_cleanup, parent (null) [ 864.180600][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): kobject_cleanup, parent (null) [ 864.193720][ T9168] kobject: 'erspan0' (000000009decefef): calling ktype release [ 864.199263][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): auto cleanup 'remove' event [ 864.210756][ T9168] kobject: 'erspan0': free name [ 864.214906][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): kobject_uevent_env [ 864.227005][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 864.227569][ T9298] kobject: 'rx-0' (0000000002c9209d): kobject_cleanup, parent 00000000cd875f76 [ 864.244419][ T7975] kobject: 'ip6gre0' (00000000448ae5a1): calling ktype release [ 864.250531][ T9298] kobject: 'rx-0' (0000000002c9209d): auto cleanup 'remove' event [ 864.254602][ T7975] kobject: 'ip6gre0': free name [ 864.263081][ T9298] kobject: 'rx-0' (0000000002c9209d): kobject_uevent_env [ 864.274498][ T9298] kobject: 'rx-0' (0000000002c9209d): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 864.286413][ T9298] kobject: 'rx-0' (0000000002c9209d): auto cleanup kobject_del [ 864.294012][ T9298] kobject: 'rx-0' (0000000002c9209d): calling ktype release [ 864.301355][ T9298] kobject: 'rx-0': free name [ 864.306036][ T9298] kobject: 'tx-0' (00000000b83ca6b5): kobject_cleanup, parent 00000000cd875f76 [ 864.315002][ T9298] kobject: 'tx-0' (00000000b83ca6b5): auto cleanup 'remove' event [ 864.322799][ T9298] kobject: 'tx-0' (00000000b83ca6b5): kobject_uevent_env [ 864.329914][ T9298] kobject: 'tx-0' (00000000b83ca6b5): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 864.341082][ T9298] kobject: 'tx-0' (00000000b83ca6b5): auto cleanup kobject_del [ 864.348692][ T9298] kobject: 'tx-0' (00000000b83ca6b5): calling ktype release [ 864.355986][ T9298] kobject: 'tx-0': free name [ 864.360565][ T9298] kobject: 'queues' (00000000cd875f76): kobject_cleanup, parent (null) [ 864.369693][ T9298] kobject: 'queues' (00000000cd875f76): calling ktype release [ 864.377206][ T9298] kobject: 'queues' (00000000cd875f76): kset_release [ 864.383858][ T9298] kobject: 'queues': free name [ 864.389074][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): kobject_uevent_env [ 864.396395][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 864.407956][ T9168] kobject: 'batman_adv' (000000000ffbad69): kobject_uevent_env [ 864.415516][ T9168] kobject: 'batman_adv' (000000000ffbad69): kobject_uevent_env: filter function caused the event to drop! [ 864.426935][ T9168] kobject: 'batman_adv' (000000000ffbad69): kobject_cleanup, parent (null) [ 864.436497][ T9168] kobject: 'batman_adv' (000000000ffbad69): calling ktype release [ 864.444302][ T9168] kobject: (000000000ffbad69): dynamic_kobj_release [ 864.450985][ T9168] kobject: 'batman_adv': free name [ 864.456335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.456355][ T9168] kobject: 'rx-0' (00000000a1acf03e): kobject_cleanup, parent 000000001e928c3a [ 864.462114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.471002][ T9168] kobject: 'rx-0' (00000000a1acf03e): auto cleanup 'remove' event [ 864.484523][ T9168] kobject: 'rx-0' (00000000a1acf03e): kobject_uevent_env [ 864.491593][ T9168] kobject: 'rx-0' (00000000a1acf03e): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 864.502821][ T9168] kobject: 'rx-0' (00000000a1acf03e): auto cleanup kobject_del [ 864.510431][ T9168] kobject: 'rx-0' (00000000a1acf03e): calling ktype release [ 864.517726][ T9168] kobject: 'rx-0': free name [ 864.522327][ T9168] kobject: 'tx-0' (0000000081c35ed1): kobject_cleanup, parent 000000001e928c3a [ 864.531507][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 864.531553][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 864.543146][ T9168] kobject: 'tx-0' (0000000081c35ed1): auto cleanup 'remove' event [ 864.550994][ T9168] kobject: 'tx-0' (0000000081c35ed1): kobject_uevent_env [ 864.558259][ T9168] kobject: 'tx-0' (0000000081c35ed1): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 864.569484][ T9168] kobject: 'tx-0' (0000000081c35ed1): auto cleanup kobject_del [ 864.577082][ T9168] kobject: 'tx-0' (0000000081c35ed1): calling ktype release [ 864.584392][ T9168] kobject: 'tx-0': free name [ 864.592144][ T9168] kobject: 'queues' (000000001e928c3a): kobject_cleanup, parent (null) [ 864.601263][ T9168] kobject: 'queues' (000000001e928c3a): calling ktype release [ 864.608837][ T9168] kobject: 'queues' (000000001e928c3a): kset_release [ 864.615504][ T9168] kobject: 'queues': free name [ 864.620640][ T9168] kobject: 'gretap0' (000000005bfce939): kobject_uevent_env [ 864.627981][ T9168] kobject: 'gretap0' (000000005bfce939): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 864.638627][ T8942] kobject: 'tunl0' (000000007d126f1a): kobject_cleanup, parent (null) [ 864.640391][ T7975] kobject: 'ip6gre0' (0000000016917e43): kobject_cleanup, parent (null) [ 864.647656][ T8942] kobject: 'tunl0' (000000007d126f1a): calling ktype release [ 864.647681][ T8942] kobject: 'tunl0': free name [ 864.658684][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): kobject_cleanup, parent (null) [ 864.670825][ T7975] kobject: 'ip6gre0' (0000000016917e43): auto cleanup 'remove' event [ 864.684001][ T9298] kobject: 'ip_vti0' (0000000026ac8df5): calling ktype release [ 864.688164][ T7975] kobject: 'ip6gre0' (0000000016917e43): kobject_uevent_env [ 864.695616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.702847][ T7975] kobject: 'ip6gre0' (0000000016917e43): kobject_uevent_env: uevent_suppress caused the event to drop! [ 864.708566][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.719564][ T7975] kobject: 'ip6gre0' (0000000016917e43): calling ktype release [ 864.725363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.733032][ T7975] kobject: 'ip6gre0': free name [ 864.738600][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.749405][ T9298] kobject: 'ip_vti0': free name [ 864.755256][ T8942] kobject: 'rx-0' (00000000d77924f1): kobject_cleanup, parent 0000000042bd9c87 [ 864.764264][ T8942] kobject: 'rx-0' (00000000d77924f1): auto cleanup 'remove' event [ 864.772316][ T8942] kobject: 'rx-0' (00000000d77924f1): kobject_uevent_env [ 864.779502][ T8942] kobject: 'rx-0' (00000000d77924f1): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 864.790226][ T8942] kobject: 'rx-0' (00000000d77924f1): auto cleanup kobject_del [ 864.797810][ T8942] kobject: 'rx-0' (00000000d77924f1): calling ktype release [ 864.805131][ T8942] kobject: 'rx-0': free name [ 864.809774][ T8942] kobject: 'tx-0' (00000000969847d5): kobject_cleanup, parent 0000000042bd9c87 [ 864.818687][ T8942] kobject: 'tx-0' (00000000969847d5): auto cleanup 'remove' event [ 864.826512][ T8942] kobject: 'tx-0' (00000000969847d5): kobject_uevent_env [ 864.833597][ T8942] kobject: 'tx-0' (00000000969847d5): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 864.844363][ T8942] kobject: 'tx-0' (00000000969847d5): auto cleanup kobject_del [ 864.851973][ T8942] kobject: 'tx-0' (00000000969847d5): calling ktype release [ 864.859231][ T8942] kobject: 'tx-0': free name [ 864.863915][ T8942] kobject: 'queues' (0000000042bd9c87): kobject_cleanup, parent (null) [ 864.873149][ T8942] kobject: 'queues' (0000000042bd9c87): calling ktype release [ 864.880641][ T8942] kobject: 'queues' (0000000042bd9c87): kset_release [ 864.887357][ T8942] kobject: 'queues': free name [ 864.892440][ T8942] kobject: 'lo' (000000009269accc): kobject_uevent_env [ 864.899308][ T8942] kobject: 'lo' (000000009269accc): fill_kobj_path: path = '/devices/virtual/net/lo' [ 864.908967][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): kobject_cleanup, parent (null) [ 864.918211][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): auto cleanup 'remove' event [ 864.926358][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): kobject_uevent_env [ 864.933744][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 864.934562][ T9298] kobject: 'batman_adv' (00000000e7544efa): kobject_uevent_env [ 864.944832][ T7975] kobject: 'ip6gre0' (00000000ebb51db1): calling ktype release [ 864.944853][ T7975] kobject: 'ip6gre0': free name [ 864.956452][ T9298] kobject: 'batman_adv' (00000000e7544efa): kobject_uevent_env: filter function caused the event to drop! [ 864.977400][ T9298] kobject: 'batman_adv' (00000000e7544efa): kobject_cleanup, parent (null) [ 864.987054][ T9298] kobject: 'batman_adv' (00000000e7544efa): calling ktype release [ 864.994896][ T9298] kobject: (00000000e7544efa): dynamic_kobj_release [ 865.001581][ T9298] kobject: 'batman_adv': free name [ 865.006824][ T9298] kobject: 'rx-0' (000000001d58da1a): kobject_cleanup, parent 000000007f9b56a6 [ 865.015836][ T9298] kobject: 'rx-0' (000000001d58da1a): auto cleanup 'remove' event [ 865.023698][ T9298] kobject: 'rx-0' (000000001d58da1a): kobject_uevent_env [ 865.030735][ T9298] kobject: 'rx-0' (000000001d58da1a): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 865.041962][ T9298] kobject: 'rx-0' (000000001d58da1a): auto cleanup kobject_del [ 865.049517][ T9298] kobject: 'rx-0' (000000001d58da1a): calling ktype release [ 865.056854][ T9298] kobject: 'rx-0': free name [ 865.061497][ T9298] kobject: 'tx-0' (000000001a8517ef): kobject_cleanup, parent 000000007f9b56a6 [ 865.070405][ T9298] kobject: 'tx-0' (000000001a8517ef): auto cleanup 'remove' event [ 865.078220][ T9298] kobject: 'tx-0' (000000001a8517ef): kobject_uevent_env [ 865.085314][ T9298] kobject: 'tx-0' (000000001a8517ef): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 865.096521][ T9298] kobject: 'tx-0' (000000001a8517ef): auto cleanup kobject_del [ 865.104136][ T9298] kobject: 'tx-0' (000000001a8517ef): calling ktype release [ 865.111395][ T9298] kobject: 'tx-0': free name [ 865.116019][ T9298] kobject: 'queues' (000000007f9b56a6): kobject_cleanup, parent (null) [ 865.125149][ T9298] kobject: 'queues' (000000007f9b56a6): calling ktype release [ 865.132658][ T9298] kobject: 'queues' (000000007f9b56a6): kset_release [ 865.139326][ T9298] kobject: 'queues': free name [ 865.144495][ T9298] kobject: 'erspan0' (00000000e457e839): kobject_uevent_env [ 865.151828][ T9298] kobject: 'erspan0' (00000000e457e839): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 865.162401][ T9168] kobject: 'gretap0' (000000005bfce939): kobject_cleanup, parent (null) [ 865.162475][ T8942] kobject: 'lo' (000000009269accc): kobject_cleanup, parent (null) [ 865.171596][ T9168] kobject: 'gretap0' (000000005bfce939): calling ktype release [ 865.171621][ T9168] kobject: 'gretap0': free name [ 865.184608][ T8942] kobject: 'lo' (000000009269accc): calling ktype release [ 865.188014][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): kobject_cleanup, parent (null) [ 865.196745][ T8942] kobject: 'lo': free name [ 865.200029][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): auto cleanup 'remove' event [ 865.221769][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): kobject_uevent_env [ 865.229092][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): kobject_uevent_env: uevent_suppress caused the event to drop! [ 865.240125][ T7975] kobject: 'ip6gre0' (00000000f27b3c9d): calling ktype release [ 865.247698][ T7975] kobject: 'ip6gre0': free name [ 865.263689][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): kobject_cleanup, parent 00000000e6cec29a [ 865.272692][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): auto cleanup 'remove' event [ 865.280690][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): kobject_uevent_env [ 865.287936][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 865.299043][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): auto cleanup kobject_del [ 865.306867][ T9168] kobject: 'rx-0' (00000000a7dbf3f3): calling ktype release [ 865.314340][ T9168] kobject: 'rx-0': free name [ 865.319040][ T9168] kobject: 'tx-0' (00000000cd571777): kobject_cleanup, parent 00000000e6cec29a [ 865.328149][ T9168] kobject: 'tx-0' (00000000cd571777): auto cleanup 'remove' event [ 865.336120][ T9168] kobject: 'tx-0' (00000000cd571777): kobject_uevent_env [ 865.343233][ T9168] kobject: 'tx-0' (00000000cd571777): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 865.354373][ T9168] kobject: 'tx-0' (00000000cd571777): auto cleanup kobject_del [ 865.362014][ T9168] kobject: 'tx-0' (00000000cd571777): calling ktype release [ 865.369481][ T9168] kobject: 'tx-0': free name [ 865.374248][ T9168] kobject: 'queues' (00000000e6cec29a): kobject_cleanup, parent (null) [ 865.383445][ T9168] kobject: 'queues' (00000000e6cec29a): calling ktype release