25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x54}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xe0bce56ef1a9506a}, 0x1) 11:29:20 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x202002) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x2d4) 11:29:20 executing program 3: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000100)=0x2, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd8b, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x0, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:20 executing program 2: epoll_create(0x9) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @multicast2}, 0x0, 0x3, 0x3}}, 0x26) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r6, r0, 0x0) 11:29:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0xc01, 0x70bd2d, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x806881c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x40, 0x2000) dup3(r0, r3, 0x80000) 11:29:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x5) connect$inet6(r2, &(0x7f0000000000), 0x1c) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x7, 0xc0000000, 0x7}) sendfile(r2, r1, 0x0, 0x1000000000105) 11:29:20 executing program 4: setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x1, 0x9}, 0x18}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000240)={0x2, 0x49837e, "67ba3f026ff2cdcdaa2c37fa1e92be2f965c14e6b8e3f8bf", {0x5}, 0x1}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r4, 0x1, 0x6, @dev={[], 0x13}}, 0x10) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r6, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000200)={r6, 0x0, 0x9, 0x7, 0x5}) getsockname$llc(r5, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x8007ffffffc, 0xfffffffffffffca5) r8 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x101000) mknodat(r8, &(0x7f0000000140)='./file0\x00', 0x1000, 0x5) 11:29:20 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)=""/209, &(0x7f0000000180)=0xd1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000280)={'sit0\x00', 0x7fff}) ftruncate(r1, 0x101) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[], 0xffffffc6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r5, &(0x7f0000000340)=ANY=[], 0xffffffc6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000140)={r8}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x8001}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000380)={r9, 0x3d, "dea0e37911f49ef39f043a8c96c2b090913e0519396c6ba003c1c469eeb7fa93ebf84bc73d93a2519877ae5f93eda36553eec734bd7c9dc51be5ef0364"}, &(0x7f0000000240)=0x45) r10 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r10, 0xc0884123, 0x0) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f00000001c0)=0x2, 0x4) 11:29:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x79f, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) 11:29:23 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000100)=""/69) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x5, &(0x7f0000000500)=[{&(0x7f0000000200)="e7dc67409e8756d97023ee33f2a5e915167d6a90a2878e149fb11840a87e9ceb56d82c8d34223009c45ff2006d06ba7ea01be1b51c4a561aeb12f7ed390e2d927b86c37999c334332400a082135e2dcf9d39e52c220bcdf6b58208f2e40084b2e9b771cadecbea56add9da79d6b5271dba9c3044c3233fe8d6773b1c143a83c5179f5d65443fbc22de", 0x89, 0x80}, {&(0x7f00000002c0), 0x0, 0x9}, {&(0x7f0000000300)="a64d853a29948026463d83d2cea6290146f202aeb6134cf75f0fb48087e45c0fec3adc3447dde6d3c0de30cd0fdf0075d184a3c911c4b5f1ddb5ef65573a201c1064e792", 0x44}, {&(0x7f0000000380)="7917a853e813f23b4de563a1f04259c89a52094637e6912350331b245053be3d6b946125f24a59d738f7db8ad01f73cf0eb74ee2defda9", 0x37, 0x8b}, {&(0x7f0000000400)="4f4873c1abf76d647c47d05820c150e6aecb7748bdff2a666a9e65ac5af6d0dc3162bed60b0a0c454d73048be2a099910ec552d3e7a5b9c0deb48a93c6b5643440cb099cfce5b8690784de0f6cfa0f9a9e33cd6499a17075c2a89eb8c27ccb1b1397248923c9e18889858a7f11c8c87022cd4367961b4f28a8a905a08e0369362b8da3df0afb7a93c2f4fdf0e5b87d3c129e17411fca06f53e96bab35216c5f3d8f100c58ecaa74c9ac4b5071dc4c48b42ceacb5ef08dc0f98e37796d6ce9294409d273949edd7832ce0b2b27e42e00268db984725a0f5614f38d522045a506eeae5da", 0xe3, 0xfffffffffffffffd}], 0x10, &(0x7f0000000580)={[{@discard='discard'}, {@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0xffffffff80000000}}], [{@euid_eq={'euid'}}, {@euid_gt={'euid>'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}, {@subj_type={'subj_type', 0x3d, '$lo/]user'}}, {@obj_role={'obj_role', 0x3d, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}]}) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$BLKRRPART(r4, 0x125f, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x1020}, {r0, 0x8000}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={0x9}, 0x8) 11:29:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010f000000000000000004000500"], 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 717.197870] JFS: discard option not supported on device 11:29:23 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/250, &(0x7f0000000180)=0xfa) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000009600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009280)=[{0x10, 0x10d, 0x5}], 0x10}}], 0x2, 0x0) 11:29:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x9}}, 0x20) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:23 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c40), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x103fffffd, 0x0) getsockname$tipc(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) getpid() r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000080)={{0x1, 0xffff}, {0x0, 0xff}, 0x2, 0x3, 0x6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) readv(r7, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, 0xffffffffffffffff, 0x0) r10 = semget(0x1, 0x4, 0x3) semctl$GETVAL(r10, 0x62d139a32a629361, 0xc, &(0x7f0000000240)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x4001fe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r11, &(0x7f0000000340)=ANY=[], 0xffffffc6) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) 11:29:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 717.690269] IPVS: ftp: loaded support on port[0] = 21 [ 717.695738] net_ratelimit: 20 callbacks suppressed [ 717.695746] protocol 88fb is buggy, dev hsr_slave_0 [ 717.695802] protocol 88fb is buggy, dev hsr_slave_1 [ 717.695891] protocol 88fb is buggy, dev hsr_slave_0 [ 717.695938] protocol 88fb is buggy, dev hsr_slave_1 11:29:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r6}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x1f, &(0x7f0000000100)=""/31, 0x40f00, 0x0, [], r6, 0x3f, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x3, 0x2e68, 0x5}, 0x10}, 0x70) [ 717.773696] protocol 88fb is buggy, dev hsr_slave_0 [ 717.778850] protocol 88fb is buggy, dev hsr_slave_1 11:29:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010f0000000000000000040000001a2dda0101a2741e6d771314ab3a45021efa6428af2552e5046f92462f9c97d9f2"], 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 718.493720] protocol 88fb is buggy, dev hsr_slave_0 [ 718.498826] protocol 88fb is buggy, dev hsr_slave_1 [ 718.503996] protocol 88fb is buggy, dev hsr_slave_0 [ 718.509034] protocol 88fb is buggy, dev hsr_slave_1 11:29:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:26 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffff9, 0x12) 11:29:26 executing program 2: epoll_create(0x9) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6000}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f00000002c0)=""/130, 0x82}], 0x2, &(0x7f00000003c0)=""/90, 0x5a}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltclass={0x30, 0x29, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x44d, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000024000705000000007384e31300000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000"], 0x40}}, 0x0) 11:29:26 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) 11:29:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 720.280068] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:26 executing program 0: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaa0200aaaabb0800450000640000000000889078ac7014bbac14142b0304907800000200420000000000000000000000ac1414aaac141400083400000000000000000000ac1e000100000000ac1414bb000000007f00000100000000ffffffff00000000ac1e000100000000"], 0x0) [ 720.330478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x72) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x1, 0x9, 0x5}, 0xa) r1 = socket$inet6(0xa, 0x8000008000080003, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013003586000000040000000007000000", @ANYRES32=r3, @ANYBLOB="00000005000000fd0b401a000800020000000400364b5b1380808f888fe31f1f97a2430042f343ba65fce962a3d7e1df2857c438c683c0958636a540e7ed3bb4518ee91f3d5cff2c1b517a583006343c1a4ae06a1ac5233e82edb076f9e6a2"], 0x2c}}, 0x0) 11:29:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r6, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x250, r6, 0xe1af283192ed2d3d, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7dd8, @dev={0xfe, 0x80, [], 0x24}, 0xfffffffffffffff9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x1f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7fff, @empty, 0x36e}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe2, @loopback, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100000000, @loopback, 0x8}}}}]}]}, 0x250}}, 0x4004000) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:26 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @multicast1}, &(0x7f0000000300)=0xc) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240)=0xa96e6302bb287242, 0x4) unlink(&(0x7f0000001e00)='./bus\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x1b, r2, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x2, 0x8, 0x4, 0x1}, 0x98) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 721.477058] audit: type=1804 audit(1568460567.863:559): pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092461901/syzkaller.wt3eFK/712/file0/file0" dev="sda1" ino=17314 res=1 [ 721.527219] audit: type=1804 audit(1568460567.903:560): pid=3576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092461901/syzkaller.wt3eFK/712/file0/file0" dev="sda1" ino=17314 res=1 11:29:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="141f0000", @ANYRES16=r1, @ANYBLOB="010f000000000000000004000000"], 0x14}}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x5, 0x30314442, 0x1, @stepwise={0x100000000, 0x3, 0x7268, 0x0, 0x3f, 0x8}}) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r3, 0xdc71227481c28485, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x101000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x56}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 11:29:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000980)=@assoc_value={r5, 0x101}, 0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7}, 0x0, 0x0, &(0x7f0000000300)={0x4, 0xd, 0x3ff, 0x9}, &(0x7f0000000340)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r9, r8, 0x0, 0x12, &(0x7f0000000240)='/dev/input/event#\x00', r10}, 0x30) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=r10, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) r12 = accept4(r0, &(0x7f0000000180)=@alg, &(0x7f0000000100)=0x80, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) recvmsg$kcm(r12, &(0x7f0000001e00)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/183, 0xb7}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000c40)=""/5, 0x5}, {&(0x7f0000000c80)=""/51, 0x33}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x6, &(0x7f0000001d40)=""/131, 0x83}, 0x40002003) setsockopt$inet_mreqn(r15, 0x0, 0x0, &(0x7f0000001e40)={@local, @rand_addr=0x80, r16}, 0xc) sendmsg$sock(r12, &(0x7f00000009c0)={&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="46f42ce290d9566f8e2642f9ceca1c704722a98ffe54440722276929aa7ba474cdcd506294619a3a684025c04f123f9b8e1d55042610215b9f36ec8f2f5a61cedae193a1c65271feca19863b8fe2c7960978b73fc088f5effb9be2d725edb68af4e3953ac9e4", 0x66}, {&(0x7f0000000640)="9ca1809dc3bd2fc4ac805bdb65afccd23212059121508172d4a95bb5f5faf80f0fd0b6ef40d7e90eb576a475b9bbc0b35548be7d0a3ec1407e7b2e6b8507f801deaa48a10fdb60df798cdb08db4d16f69d94a63c248b9f00492783588e7b767235ff40270f4d250a8df2c0c903379d232c1477a5ef693c0fd22a348be318efbef4a65d0e32a8a4d6c2acc59ed638e69d2a8dd0de966c38cafd2a884a17300c936066c27802f30c2fd557b8349231029c646bf637fbef55d606e336bce960201cf4c1de", 0xc3}, {&(0x7f0000000440)="18", 0x1}, {&(0x7f0000000740)="1644cca9a9c7a408d71f95acd01f94f66e2bae5ba57fc568a3f3b058a63856d3e97cd10f60cb7f5efad269f175e24d78193057b495aea63ebdcbfbb818f238b3c6af56f38ea33ae84397982c6e6cea8585ed662a470849f889cfd8f2038527f66319b5bef69d12fa8e00cf3aa9803f7cca3046f5b1ec4685bcfa6064de37d74f29ea9c523b8ee075b0c2c556ede9d87b7113f368355f74545b8847", 0x9b}, {0xffffffffffffffff}, {&(0x7f0000000800)="724c5fea3f967ef81b0331b89cca7fe513778f7f9025e6c3ba32d1502615cd4d43b0e1efa105289d5caaf74d1df3381da4b4760008ebf4799b2a4271e7f8ab33ab63193a66bdfbcf9413c5e2f44a046303fd83207e7f9f42365ab182e23ef45f6a1e9d59aed7c50fd815d389098ffc5f463a0fec5d55a881db825d49657173f11099cabac21ab026ca4730179e9b643963c2d2409d870d792dc4eeda38978cdc766e755fd7bd17cfe9386f6f85e6439a47274a915bcfc9fb3855d733ba8cc2efab950ec1c97df5d928e430a6cce418c9bcb68ab48810", 0xd6}], 0x6, &(0x7f0000000980)}, 0x80) 11:29:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:29 executing program 2: epoll_create(0x9) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:29 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x442000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x20000000000002d6, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x237, 0x0, 0x0, 0x0, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000040)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x3ff}, 0x10}, 0x70) socket$vsock_stream(0x28, 0x1, 0x0) 11:29:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x20, 0x7f}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r4, 0x3ff}, 0x8) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x100) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x103fffffd, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000180)) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000280)="600b42e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0) 11:29:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:29 executing program 5: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x60240, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000400), &(0x7f0000000440)=0x4) clone(0x1010800, &(0x7f0000000240)="82648dab255912f61c154694416bd9b7a4452002f496a7f7744d8356cce22ff8c7b5300c312a723087447a1f1b9d6ad086551099a9b07710b4e97dbe89c1e5d77ef8c595dec799f59775d6a0f0000fc53b5ad699b44423b1088813708a62188f97e3e0c3ecb463a4090ded940ea5932129e444b2b9766f58fa03c1c194a99a71c23ced12f68bb5a5daa64e10a9c7dc7f68c355479863a17ae5c4ad94699bef2c50d05b88e0d90bb737dec1852074", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="bc4e95dd2edb6a3a989408ed6a1eb00198283e14888ced282e07e704f1ab09284630ff1ac97e73ec7eedeaf90552695467c37013a8c33da727b4fd8695a01a1328ae330d87f4e50cb955149b01e070a5b8a3220299a64902a58273ba2b9a811f1962bf7732ca417c2bbfd9fb92362b43a61d6863557fd1b887339805") ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000001000/0x1000)=nil, 0x1000}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x39be7a1c0b1dfc12) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x36, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000000c0)=""/54}, &(0x7f0000000180)=0x78) 11:29:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41001000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x200400a0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xc}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast2, 0xfffffffff10822b4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x118}}, 0x1005) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:30 executing program 0: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000000)={@empty}, &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x20000059) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() r8 = fcntl$dupfd(r1, 0x0, r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000000380)) r9 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r10, 0x10, 0x0) r11 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r10}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = eventfd(0x6) r15 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r15, 0x6611) r16 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r16, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r18, 0x6611) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) r25 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r25, 0x6611) r26 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r27 = getpid() prlimit64(r27, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r29 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r30, @ANYBLOB="2c004ee7fc1942ccf87c66158b2f44f94377676013c3ba6d7fbe78a9fe3b9179bfa39c8c352528bcf042bd11bbff6b6ff98ee93831fbcf7ccde6dd0d79e86f651863c7a18f24995caf5c609ca7698ed404597327b05544226ca94211e4a72c63cbb0fe16d66972ac22998a1799380318cdb4b3cd39ea78126889a506c353c4b3d189426e97f2cf40f49100bb8e760e7e880610b30e34695b57f091b20bba25ded38c834b602fb0c736405b4925291fa99545c894e7d59dcf7059409e6b"]) r31 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = dup3(r32, r31, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) r34 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r35 = socket$inet6_tcp(0xa, 0x1, 0x0) r36 = dup3(r35, r34, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r36, 0x8912, 0x400200) r37 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r38, r37, 0x0) sendmsg$unix(r12, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r10, @ANYRESDEC=r33, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r11, @ANYRES32=r19, @ANYBLOB="00ed2e8dac8bbd0efdf82b5365f7438c00001400", @ANYRES32=r20, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r21, @ANYRES32=r37, @ANYRES32=r22, @ANYRES32=r9, @ANYRES32=r24, @ANYRES32, @ANYRES32=r25, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r26, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r20, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR64, @ANYRES64=r36, @ANYPTR64], @ANYRES32=r23], @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00'], 0xd4, 0x20064044}, 0x0) ptrace$setopts(0x4206, r7, 0xfffffffffffffffc, 0x54) r39 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r39, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") tkill(0xffffffffffffffff, 0x2b) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 11:29:30 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040)) 11:29:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xb1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r4, 0xffffffffffffffff) ioctl$KDADDIO(r5, 0x4b34, 0x9) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4bbedd11bccce1aa1d6433670636260778f4f74e3ef6caaff8eec23253532978bd4ba55390a6c9dfcb2627a097edda630bc3d47bf5c304adc9f76cd46189d40600122a92f9e17d4a285b0", @ANYRES16=r1, @ANYBLOB="010f000000000000000004000000"], 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 723.714522] hfs: gid requires an argument [ 723.732389] hfs: unable to parse mount options 11:29:30 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x14) bind$can_raw(r0, &(0x7f0000000080), 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x103fffffd, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x6, 0x299) [ 723.853077] hfs: gid requires an argument [ 723.862870] hfs: unable to parse mount options [ 723.933719] net_ratelimit: 20 callbacks suppressed [ 723.933726] protocol 88fb is buggy, dev hsr_slave_0 [ 723.943860] protocol 88fb is buggy, dev hsr_slave_1 [ 723.949016] protocol 88fb is buggy, dev hsr_slave_0 [ 723.954164] protocol 88fb is buggy, dev hsr_slave_1 [ 724.013691] protocol 88fb is buggy, dev hsr_slave_0 [ 724.018852] protocol 88fb is buggy, dev hsr_slave_1 11:29:30 executing program 2: epoll_create(0x9) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:30 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x1a, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x28}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x2fd, 0x0, 0x0, 0x0, [0xff5ffe5f], r1}, 0x48) 11:29:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_OPEN(r4, &(0x7f0000000100)={0x20, 0x0, 0x1, {0x0, 0xa}}, 0x20) 11:29:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r2, 0x0) r4 = gettid() r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r6, 0x10, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r6}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x6) r11 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) r12 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r12, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r14, 0x6611) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r20, 0x6611) r21 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r22 = getpid() prlimit64(r22, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r24 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r25}}]}) sendmsg$unix(r8, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r9, r10, r6, r11, r12, r13, r14, r7, r15]}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x30, 0x1, 0x1, [r6, r17, r6, r18, r5, r19, 0xffffffffffffffff, r20]}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}], 0xd0, 0x20064044}, 0x0) r26 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r27 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r27, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r27, 0x10, 0x0) r28 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r27}) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = eventfd(0x6) r32 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r32, 0x6611) r33 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r33, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) r35 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r35, 0x6611) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r40, 0x8912, 0x400200) r41 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r41, 0x6611) r42 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r43 = getpid() prlimit64(r43, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r45 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r46}}]}) sendmsg$unix(r29, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r30, r31, r27, r32, r33, r34, r35, r28, r36]}}, @rights={{0x14, 0x1, 0x1, [r37]}}, @rights={{0x30, 0x1, 0x1, [r27, r38, r27, r39, r26, r40, 0xffffffffffffffff, r41]}}, @rights={{0x14, 0x1, 0x1, [r42]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r43, r44, r46}}}], 0xd0, 0x20064044}, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={r4, r23, r46}, 0xc) [ 724.189370] hfs: gid requires an argument [ 724.194042] hfs: unable to parse mount options [ 724.359341] hfs: gid requires an argument [ 724.367924] hfs: unable to parse mount options [ 724.470148] hfs: gid requires an argument [ 724.474701] hfs: unable to parse mount options [ 724.557325] hfs: gid requires an argument [ 724.561526] hfs: unable to parse mount options [ 724.733745] protocol 88fb is buggy, dev hsr_slave_0 [ 724.738876] protocol 88fb is buggy, dev hsr_slave_1 [ 724.744048] protocol 88fb is buggy, dev hsr_slave_0 [ 724.749097] protocol 88fb is buggy, dev hsr_slave_1 11:29:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x8, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x192375c3, 0x4000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x2, 0x1c4b}, 0x0, 0x7, 0x10020000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xffffffc6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[]}}, 0x4040000) fcntl$getown(0xffffffffffffffff, 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x40802, 0x41) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x7, 0x10}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000680)={r8, 0x26dc8}, &(0x7f00000006c0)=0xfff1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$kcm(0x29, 0x2, 0x0) splice(r11, 0x0, r12, 0x0, 0x103fffffd, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r13, 0x805, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r11, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1100480}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) setxattr$security_selinux(&(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)='security.selinux\x00', &(0x7f0000000800)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r15 = socket$kcm(0x29, 0x2, 0x0) splice(r14, 0x0, r15, 0x0, 0x103fffffd, 0x0) fremovexattr(r15, &(0x7f0000000b40)=@known='trusted.overlay.impure\x00\x95\x88\xe4\x11<8BJ\xa7\x16O{\xca\xd8\x87\xc6\x87I[\xe2\xcd\x947G\xc0\x95\xc7\xb5U\x9d^\xd2I$\xa6\xf7\x90\x91\x94\nI\xb5\x11\x9f\xf0\xee\xac\x8fH+\xcb\xedC\xc5**\x9dXZ.\xc6\"\xbeJ\xbe\x8b\xec\x85Ex\"\xab\xdb\x0f\xf8\x19k:R\xf9\x9bSx\x0e\xbbu\x86\x06\xd3?U6\xee$\xbf\xe8\x89\x1f\x96\x10\xf97\xc3\x91\xcf\xf2\xb5%\xb9:\x80\x94') openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r16 = dup3(r10, r9, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001100)=ANY=[@ANYBLOB="66696c7465720001000000000000eeffffffffffffff000000400000000000000e040000002004000008010000000000000000080008010000080100005003fc0050030000500350030000500300000400000059908317212a8cb3a08eee938965f81327ddc7b6ea070094f5f0d672a9a6c747e20700000000000000f33385dac17eba444e62201477eb0e7fdca16233f2897c3ba1bb4fe0998e18c1dc5e0688498c768c02a89b7671e449c92ed255f8", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040004c4f47000000000000000000000000000000000000000000000000000000074224405f262b67e24777c0832a6a8c4584c0eca603db274c751bcbb1a6d09d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001480100000000000000000000000000000000000000000000000030007372680000000000000000000000000000000000000000000000000000005e0309042000213e7000000000000000280069636d70360000000000000000000000000000000000000000000000000005ff000000000000280052454a4543540000000000000000000000000000000000000000000000000400000000000000012d171b88b2c37f592351bbf2f632ee00000000000000000000ffffac1414bb000000ffffffff00ffffff00ff000000ff000000ff000000ff000000ffffffff69666230000000000000000000000000626f6e645f736c6176655f3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003b00010058000000000000000000000000000000c800000100000000000000000000000000000000000000000000000038005345540000000000000000000000000000000000000000000000000000030010020003007100008080007f000000c3140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x480) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r16, 0xc0505405, &(0x7f0000000700)={{0x1, 0x1, 0xffffffff, 0x1}, 0x4, 0x5, 0x4800}) 11:29:32 executing program 2: epoll_create(0x9) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:32 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4001}, 0x4004001) write$FUSE_ENTRY(r1, &(0x7f0000000080)={0x90, 0xfffffffffffffff5, 0x7, {0x2, 0x0, 0x1, 0xde0f, 0x7ff, 0xe0ef, {0x2, 0x16, 0x3, 0x20, 0x80000001, 0x9, 0x7, 0x9, 0x100000000, 0x0, 0x8, 0xffffffffffffffff, 0xee00, 0xcc, 0x5}}}, 0x90) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 11:29:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:32 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010005000000000000190e000600000000010000000153b4", 0x2e}], 0x1}, 0x0) 11:29:32 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:33 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='\x05\x8c\x00\x00\xff\x01\x02\x0f\x00', 0x400, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x9, 0x1, 0x3, 0x8, 0xfffffffffffffffb, 0x7}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000400)={0x1, 0x0, 0x2080, {0x1000, 0xd000, 0x1}, [], "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", "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"}) 11:29:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:33 executing program 3: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r2, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7d, 0x100102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000ba99d567c35433e403a285d41db0c63b118fe9d15dbc331663db25962e3faa8d1f6d5d9d6ea85bd3eef6f8df24c313080081effc2d2e810da1e10938b34ef44b560abba2b71af4cc906ef56dff6898c53f0eab21a0dd1e6b66387b3c5c71d52e63a9ea0bb4e77fd6f445243422a1ef6516ce9e915124dea664de99a03f194f1fcfb29d5efe43221aa837674611c4603349a26c17772842b775a16d710f8d", @ANYRES16=r5, @ANYRES16=r3], 0x3}, 0x1, 0x0, 0x0, 0x12000804}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0xdc, 0x1}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0xffffffffffffffff) 11:29:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:33 executing program 2: epoll_create(0x9) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x24b) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 11:29:34 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x7) 11:29:34 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x101000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000000c0)={0x8, 0x7fffffff, 0x2, 0x80, 0x2, [{0x3, 0x9, 0x8, 0x0, 0x0, 0xc}, {0x1, 0xb5a, 0x4, 0x0, 0x0, 0x400}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r2, &(0x7f0000000080)=0x8007fffffff, 0xff57) [ 727.845618] device nr0 entered promiscuous mode 11:29:34 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x3aaa51b93d4e6bbb, 0x0) getsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:34 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x80, 0x0) r2 = dup3(r1, r0, 0x180000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb10100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = socket$kcm(0x29, 0x2, 0x0) splice(r4, 0x0, r6, 0x0, 0x103fffffd, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000140)='veth1_to_hsr\x00', 0x0}, 0x30) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000140)={r10}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={r10, 0x7fffffff}, &(0x7f0000000400)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r0, 0x0, 0x5, &(0x7f0000000100)='proc\x00', r7}, 0x30) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x8000}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 11:29:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) gettid() clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="03860cb63c0e8d1c8f1770744e904af022fdfac4f264b3c8dff881eaa0f23069e050b410a459c3bd21794027375dfdf63ad3f607aafdb548ef1165f70df5efb2e9158ea0d1892f71110bccc8470f2e32f81cbe7947ecff44df"], &(0x7f0000000180)='./file0\x00', 0x0, 0x5010, 0x0) 11:29:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f0000001180)=0x1008) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000011c0)={r3, @in6={{0xa, 0x4e22, 0xb6, @local, 0x921400000}}, [0x1, 0x212, 0x0, 0x2a5, 0x7f, 0xfffffffffffffffd, 0x4, 0x7, 0x7fffffff, 0x0, 0x0, 0xffffffffffffffe1, 0x800, 0x5]}, &(0x7f00000012c0)=0x100) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/153) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 11:29:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 728.584049] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 728.610084] FAT-fs (loop2): Filesystem has been set read-only [ 730.173781] net_ratelimit: 20 callbacks suppressed [ 730.173790] protocol 88fb is buggy, dev hsr_slave_0 [ 730.184180] protocol 88fb is buggy, dev hsr_slave_1 [ 730.189276] protocol 88fb is buggy, dev hsr_slave_0 [ 730.194380] protocol 88fb is buggy, dev hsr_slave_1 [ 730.253746] protocol 88fb is buggy, dev hsr_slave_0 [ 730.258948] protocol 88fb is buggy, dev hsr_slave_1 11:29:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:36 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x4, {0xfffffffffffffbff, 0x5, 0xff, 0x1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) 11:29:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:36 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = socket$inet6(0xa, 0x2, 0x2000000009d3) syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) sendfile(r0, r2, 0x0, 0x7) socket$pppoe(0x18, 0x1, 0x0) 11:29:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) close(r2) socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x10) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180)=0x9143, 0x4) splice(r5, 0x0, r6, 0x0, 0x103fffffd, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x9) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r9, 0x401}, &(0x7f0000000100)=0x8) write$cgroup_int(r4, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 730.411990] audit: type=1804 audit(1568460576.803:561): pid=3804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1114/bus" dev="sda1" ino=17387 res=1 11:29:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$TCSBRK(r0, 0x5409, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x103fffffd, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000100)) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 730.503406] audit: type=1804 audit(1568460576.843:562): pid=3804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1114/bus" dev="sda1" ino=17387 res=1 11:29:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 730.973694] protocol 88fb is buggy, dev hsr_slave_0 [ 730.978799] protocol 88fb is buggy, dev hsr_slave_1 [ 730.983939] protocol 88fb is buggy, dev hsr_slave_0 [ 730.989020] protocol 88fb is buggy, dev hsr_slave_1 11:29:37 executing program 5: creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = getuid() lstat(&(0x7f0000000600)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./bus\x00', 0xf519119, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="ea7105a222e8bc5c2da3e84e3a17fbad43adea313ca98e9be29204f49ab51c3eb79f74771e6a1e47836add48ffe6ed561fe93cfa914a94", 0x37, 0x100000000}, {&(0x7f0000000240)="e9eeadd716e82927824a1f377e0f2c535c30b1f7f4544fe224efe1c0af5b431bf6eb3e60ee962a35acf15fcb5799b5f839e98c2a74b24f887f741076bd3b4d1b53c6c87bad70c1688832fb39ad4f4d4ea063ba7aad779b417a29a9489dc1e9fd1a4e64b46a9c379ca35e09b6b9ef11", 0x6f, 0x40}, {&(0x7f00000002c0)="bbdcef6ebfe813c4332f36df0b385b5b3f6be872f3a32e1f2b1333a63751c7f45af7", 0x22, 0x2}, {&(0x7f0000000300)="6446022948c3f4ba797804677d0cfa7aa1362c04697ba2842c31357490c5fab40140d5e5470ba054041dfd13080144fbe9c6b02cd0fe40825b2d0376557f3ee9686c5bd005e6fbacdf53eaad6e0254231cb3261857b190ce7a1429de0ccd2d5752b69b535eaa00e07d748be7aa6d4b7cba777fe4e24b045d66fe6c14dd4a95228cb5401be34a7e1540367a40c91b5704e79caff2a226952d47a2445e7cb31ddf5d476e2e95ccc1bd704fd0285ac90c5fa352f3d0ffb385eb81135bb953cccfda27f57396c0a915d9", 0xc8, 0xfb}], 0x80000, &(0x7f0000000540)={[{@nodecompose='nodecompose'}, {@uid={'uid', 0x3d, r0}}, {@type={'type', 0x3d, "1b6daf39"}}, {@type={'type', 0x3d, "633e4a8f"}}, {@uid={'uid', 0x3d, r1}}, {@creator={'creator', 0x3d, "3f9cef26"}}, {@session={'session', 0x3d, 0xffffffffffffff38}}], [{@dont_hash='dont_hash'}]}) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0x20, 0x8, "931c762ae5f0c6217adc7d9189222363f65f12e753f9dc6fe8ee8f2f7a260e86a84b3de989595c955fe7211c72709b00c6a3b421a9e973ba639abfbcfaf0b9", 0x2a}, 0x60) [ 731.155144] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 731.162483] FAT-fs (loop2): Filesystem has been set read-only 11:29:37 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:37 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x4, {0xfffffffffffffbff, 0x5, 0xff, 0x1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) 11:29:37 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10500, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xd8b9, 0xfffffffffffffff9, 0x400, 0xe57, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x374}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) [ 731.296109] audit: type=1804 audit(1568460577.693:563): pid=3838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1115/bus" dev="sda1" ino=17381 res=1 [ 731.374633] audit: type=1804 audit(1568460577.723:564): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092461901/syzkaller.wt3eFK/723/bus" dev="sda1" ino=17379 res=1 [ 731.541984] audit: type=1804 audit(1568460577.733:565): pid=3838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1115/bus" dev="sda1" ino=17381 res=1 [ 731.570719] audit: type=1804 audit(1568460577.803:566): pid=3835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092461901/syzkaller.wt3eFK/723/bus" dev="sda1" ino=17379 res=1 11:29:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x318082, 0x0) ioctl$int_in(r0, 0x80000000005008, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x180, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf68}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc07c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 11:29:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x831e}, 0x80) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) getpgrp(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:39 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:39 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x4, {0xfffffffffffffbff, 0x5, 0xff, 0x1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) [ 733.487062] audit: type=1804 audit(1568460579.883:567): pid=3872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1116/bus" dev="sda1" ino=17402 res=1 11:29:39 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r3, 0x3}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x103fffffd, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) getgid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getgroups(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r3, 0xffffffffffffffff}) 11:29:39 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") r2 = memfd_create(&(0x7f0000000040)='\xb3', 0x0) pwrite64(r2, &(0x7f0000000380)="fc", 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000280)) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 733.534039] audit: type=1804 audit(1568460579.883:568): pid=3872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1116/bus" dev="sda1" ino=17402 res=1 11:29:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8007ffffffc, 0xfffffeee) 11:29:40 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) ioctl(r1, 0x6, &(0x7f0000000140)="36c70427b45ccd5a291d11ca2badc4ac2ac04927833c6eb88c1d9e493b42b42aca3ab86c92fcca89c53a974504") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d0000300000000af005ed05eef3e4c4fd800b94becda1683bd85f2895b324cb9add8ee3e937df52f6605bd9031c9f55ee74a4767d5c656c8d1f833e07630b0a04f31566a48831026d19b9dc7dc11b95c49188f3a52d22fec3ce31c3eae25ed62ab8ae9b300000000"], 0x68, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:40 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x3, 0x2, 0x83c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) dup3(r0, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 736.423755] net_ratelimit: 20 callbacks suppressed [ 736.423761] protocol 88fb is buggy, dev hsr_slave_0 [ 736.433896] protocol 88fb is buggy, dev hsr_slave_1 [ 736.439037] protocol 88fb is buggy, dev hsr_slave_0 [ 736.444115] protocol 88fb is buggy, dev hsr_slave_1 11:29:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:42 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x4, {0xfffffffffffffbff, 0x5, 0xff, 0x1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) 11:29:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xffffffc6) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="010f000000000000000004000000"], 0x3}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:42 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffff7c) listen(r0, 0xfffffffffffffffa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:dhcp_etc_t:s0\x00', 0x6d, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x103fffffd, 0x0) r5 = accept4(r3, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000000)=0x80, 0x80000) accept4$x25(r5, 0x0, &(0x7f0000000200), 0x0) dup3(r2, r1, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x90) 11:29:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:42 executing program 4: getrlimit(0x5, &(0x7f0000000040)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 736.493708] protocol 88fb is buggy, dev hsr_slave_0 [ 736.500050] protocol 88fb is buggy, dev hsr_slave_1 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 736.554410] audit: type=1400 audit(1568460582.943:569): avc: denied { mac_admin } for pid=3924 comm="syz-executor.5" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 736.580631] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). 11:29:43 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x5) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x1000) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 736.647260] audit: type=1804 audit(1568460582.953:570): pid=3936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1117/bus" dev="sda1" ino=17422 res=1 [ 736.727499] audit: type=1804 audit(1568460582.973:571): pid=3936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1117/bus" dev="sda1" ino=17422 res=1 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 736.763324] audit: type=1400 audit(1568460583.043:572): avc: denied { relabelto } for pid=3924 comm="syz-executor.5" name="RAWv6" dev="sockfs" ino=143947 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=rawip_socket permissive=1 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 737.213709] protocol 88fb is buggy, dev hsr_slave_0 [ 737.218929] protocol 88fb is buggy, dev hsr_slave_1 [ 737.224094] protocol 88fb is buggy, dev hsr_slave_0 [ 737.229161] protocol 88fb is buggy, dev hsr_slave_1 [ 737.330150] audit: type=1400 audit(1568460583.723:573): avc: denied { relabelto } for pid=3924 comm="syz-executor.5" name="TCPv6" dev="sockfs" ino=143165 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 11:29:43 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x4, {0xfffffffffffffbff, 0x5, 0xff, 0x1}}) lseek(r0, 0x0, 0x4) 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x280) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:43 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r3, 0x10, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r3}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x6) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) r9 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r17, 0x6611) r18 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r19 = getpid() prlimit64(r19, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r21 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r22}}]}) sendmsg$unix(r5, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r6, r7, r3, r8, r9, r10, r11, r4, r12]}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x30, 0x1, 0x1, [r3, r14, r3, r15, r2, r16, 0xffffffffffffffff, r17]}}, @rights={{0x14, 0x1, 0x1, [r18]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r22}}}], 0xd0, 0x20064044}, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./file0\x00', r20, r23) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r1, 0xf14, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000001) timer_create(0x200000003, 0x0, &(0x7f0000000000)) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) timer_delete(0x0) 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 737.606323] hfs: gid requires an argument 11:29:44 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8007ffffffc, 0xffffffee) 11:29:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030f00000416241e000000000000"], 0x14}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000140)=""/207) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 737.630793] audit: type=1804 audit(1568460584.023:574): pid=3986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1118/bus" dev="sda1" ino=16611 res=1 [ 737.631139] hfs: unable to parse mount options 11:29:44 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 737.753725] audit: type=1804 audit(1568460584.053:575): pid=3986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1118/bus" dev="sda1" ino=16611 res=1 11:29:44 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 737.816745] ptrace attach of "/root/syz-executor.1"[4001] was attempted by "/root/syz-executor.1"[4003] [ 737.833274] audit: type=1326 audit(1568460584.223:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3974 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 11:29:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:44 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 738.002464] ptrace attach of "/root/syz-executor.1"[4018] was attempted by "/root/syz-executor.1"[4019] [ 738.352692] hfs: gid requires an argument [ 738.357678] hfs: unable to parse mount options 11:29:44 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) lseek(r0, 0x0, 0x4) 11:29:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x103fffffd, 0x0) getsockopt$inet6_opts(r4, 0x29, 0xc, &(0x7f0000000100)=""/175, &(0x7f00000001c0)=0xaf) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r6, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 738.400202] audit: type=1326 audit(1568460584.793:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3974 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 11:29:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 738.539359] audit: type=1804 audit(1568460584.933:578): pid=4037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1119/bus" dev="sda1" ino=16866 res=1 11:29:45 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x200, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) 11:29:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:45 executing program 5: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capa\a\x00lity\x00', &(0x7f0000000200)=@v2, 0x14, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x4) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 11:29:45 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) 11:29:45 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0xef, 0x209e21, 0x100008000000001, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 11:29:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:45 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)) lseek(r0, 0x0, 0x4) 11:29:45 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8007fbffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xffffffc6) recvfrom$rxrpc(r2, &(0x7f00000000c0)=""/40, 0x28, 0x40000000, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10041) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc32b}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8020) 11:29:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:45 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046d00, &(0x7f0000000140)={{0x7fff}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$RTC_AIE_OFF(r0, 0x7002) 11:29:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/88, &(0x7f0000000180)=0x58) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x442, 0x0) [ 739.396047] FAT-fs (loop2): bogus number of reserved sectors [ 739.421935] FAT-fs (loop2): Can't find a valid FAT filesystem 11:29:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="0300000028252c037cb97de23da76cf990753ea1939890e5c2ac15acb5d7f84ac26abee41dd9ede0803733d254df12aad7417f4a92a9441e3e77cd8d1938b2750a966c64ab709bc4b7a0aaa9b17ba5fd1f94c14c2bbea9fd1245bb570f207d5e117dda425173db27e7a019b9f3c52b9efa19f539a8c632686a1eaed067173817438ea1991532b878ea7c88766df4362c72127e575aa0b0c60ef182cba0fd61b62c5109580a5f6f9c19a55bc4cd07e1b70000000000000000000001000000000000000000"]}) 11:29:45 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x107fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) lseek(r0, 0x0, 0x4) 11:29:46 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r2, 0x10, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x6) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r13, 0x6611) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r15 = getpid() prlimit64(r15, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r18, @ANYBLOB="000000285e3ab61c47344b2c73ef1b8700d1191f2c2874fa35797234feb9ef68a097b1f3b62e54bd278f66194f56df34bef5698cca7ae44287283704a452d0f98400556d912cc88b445ce1a47b1ffa69e2c544fc48166f1be37a72d0b5ad1d112ce1dbe9e0ef712033a69fdac6ecbf10c78b8057718463b55156510d78a2c3f1fdcf4350"]) r19 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = dup3(r20, r19, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r23 = socket$kcm(0x29, 0x2, 0x0) splice(r22, 0x0, r23, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r24, &(0x7f0000000340)=ANY=[], 0xffffffc6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r25, &(0x7f0000000340)=ANY=[], 0xffffffc6) sendmsg$unix(r21, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000a00)=ANY=[@ANYRES64=r7, @ANYRES32=r4, @ANYRES16=r8, @ANYRES32=r2, @ANYRES64=r25, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT], @ANYRES32=r7, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=r23, @ANYRES32=r24], @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32, @ANYRES32=r13, @ANYBLOB="1400000000000000010000ffff000000", @ANYRES32=r14, @ANYBLOB="0000000014000000000000000100000001002000", @ANYRES64=r20, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r18, @ANYBLOB="c0ebff00"], 0xd6, 0x20064044}, 0x0) r26 = syz_open_procfs(r15, &(0x7f0000000000)='projid_map\x00') ioctl$LOOP_GET_STATUS(r26, 0x4c03, &(0x7f0000000140)) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r27 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400001, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r27, 0x6, 0x21, &(0x7f0000000100)="cdcbe084ab173877e86c13a5438ae248", 0x10) [ 740.037802] hfs: gid requires an argument [ 740.042081] hfs: unable to parse mount options 11:29:46 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r2, 0x10, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x6) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40802, 0x54) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r16, 0x6611) r17 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r18 = getpid() prlimit64(r18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r20 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r21}}]}) sendmsg$unix(r4, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r5, r6, r2, r7, r8, r9, r10, r3, r11]}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x30, 0x1, 0x1, [r2, r13, r2, r14, r1, r15, 0xffffffffffffffff, r16]}}, @rights={{0x335, 0x1, 0x1, [r17]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r21}}}], 0xd0, 0x20064044}, 0x0) tkill(r18, 0x37) 11:29:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:46 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x4) 11:29:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 740.265001] FAT-fs (loop2): bogus number of reserved sectors [ 740.293812] FAT-fs (loop2): Can't find a valid FAT filesystem 11:29:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r2, 0x10, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x6) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r13, 0x6611) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r15 = getpid() prlimit64(r15, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r18, @ANYBLOB="000000285e3ab61c47344b2c73ef1b8700d1191f2c2874fa35797234feb9ef68a097b1f3b62e54bd278f66194f56df34bef5698cca7ae44287283704a452d0f98400556d912cc88b445ce1a47b1ffa69e2c544fc48166f1be37a72d0b5ad1d112ce1dbe9e0ef712033a69fdac6ecbf10c78b8057718463b55156510d78a2c3f1fdcf4350"]) r19 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = dup3(r20, r19, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r23 = socket$kcm(0x29, 0x2, 0x0) splice(r22, 0x0, r23, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r24, &(0x7f0000000340)=ANY=[], 0xffffffc6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r25, &(0x7f0000000340)=ANY=[], 0xffffffc6) sendmsg$unix(r21, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000a00)=ANY=[@ANYRES64=r7, @ANYRES32=r4, @ANYRES16=r8, @ANYRES32=r2, @ANYRES64=r25, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT], @ANYRES32=r7, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=r23, @ANYRES32=r24], @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32, @ANYRES32=r13, @ANYBLOB="1400000000000000010000ffff000000", @ANYRES32=r14, @ANYBLOB="0000000014000000000000000100000001002000", @ANYRES64=r20, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r18, @ANYBLOB="c0ebff00"], 0xd6, 0x20064044}, 0x0) r26 = syz_open_procfs(r15, &(0x7f0000000000)='projid_map\x00') ioctl$LOOP_GET_STATUS(r26, 0x4c03, &(0x7f0000000140)) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r27 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400001, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r27, 0x6, 0x21, &(0x7f0000000100)="cdcbe084ab173877e86c13a5438ae248", 0x10) 11:29:46 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x4) [ 740.322765] hfs: gid requires an argument [ 740.334507] hfs: unable to parse mount options 11:29:46 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x160000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) 11:29:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:49 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x4) 11:29:49 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x5cee, 0x12) 11:29:49 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x2ec) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:iptables_conf_t:s0:\x84\xb7,t\x10{\xbb\xf34`7\xc3\xf8Gr\xfd_\x9bv\xfe\xd4?L\x15\xda\x98\xfaz\x8e\x95I\xc1=\xda\x8c)\x10\x985\r\xef%\x8a=\xa5\xb8\x19\xf6\xd1`\a\xdf\xef\xa7Z\x86s\xf6\xdb\x01\xc8\x81`\x90q\xa3\xf6\xe6\xf5\xf4\xe7\xc0=\n\xf7\xff>2\xfc\x856\x88\xb6\xc8\xe2\xac\x8c\xc7!\x87-\xf0\xd1\xadj0\x9e^\t\x96\x82\x9e]\x1a\n\xec\xf5)\xe2\xa6.m1\xfc\x14\xffn\x9d\x13.\xa2\x9c\x18[\xb6\x12R6\xb9a\xb8\xd2N\x8b!\xbe.\xc8\x8dK\x9e\x84\xda\x8d\x93\xc5\xf7\xf8\xa1\x00\xfb\n', 0xbd, 0x0) 11:29:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 742.653720] net_ratelimit: 20 callbacks suppressed [ 742.653728] protocol 88fb is buggy, dev hsr_slave_0 [ 742.663828] protocol 88fb is buggy, dev hsr_slave_1 [ 742.668991] protocol 88fb is buggy, dev hsr_slave_0 [ 742.674108] protocol 88fb is buggy, dev hsr_slave_1 [ 742.710680] FAT-fs (loop2): bogus number of reserved sectors [ 742.731763] FAT-fs (loop2): Can't find a valid FAT filesystem [ 742.743725] protocol 88fb is buggy, dev hsr_slave_0 [ 742.748885] protocol 88fb is buggy, dev hsr_slave_1 [ 742.754096] kauditd_printk_skb: 11 callbacks suppressed 11:29:49 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:49 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x975, 0x6, [], &(0x7f0000000180)=0x80000000}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x5, 0x0, 0x10001, 0x1870}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000140)={0xffffffffffffffc0, r5}) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'veth0\x00', {0x2, 0x4e21, @multicast2}}) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x6, 0x0, 0x1}, 0x10) splice(r0, 0x0, r6, 0x0, 0x103fffffd, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x80080000000, 0x12) [ 742.754108] audit: type=1804 audit(1568460589.143:590): pid=4195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1125/bus" dev="sda1" ino=17429 res=1 [ 742.804557] SELinux: Context system_u:object_r:iptables_conf_t:s0:„·,t{»ó4`7ÃøGrý_›vþÔ?LÚ˜úzŽ•IÁ=ÚŒ)˜5 ï%Š=¥¸öÑ`ßï§Z†söÛÈ`q£öæõôçÀ= [ 742.804557] ÷ÿ>2ü…6ˆ¶È⬌Ç!‡-ðÑ­j0ž^ –‚ž] [ 742.804557] ìõ)â¦.m1üÿn.¢œ[¶R6¹a¸ÒN‹!¾.ÈKž„Ú“Å÷ø¡ is not valid (left unmapped). [ 742.911390] audit: type=1804 audit(1568460589.143:591): pid=4195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1125/bus" dev="sda1" ino=17429 res=1 11:29:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010f000000000000000007000000"], 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r3, 0xdc71227481c28485, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x104, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x34}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) 11:29:49 executing program 5: r0 = userfaultfd(0x0) userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce2002}}) 11:29:49 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) [ 742.999244] audit: type=1804 audit(1568460589.363:592): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1126/bus" dev="sda1" ino=17430 res=1 11:29:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7f64, 0x40000) recvfrom$ax25(r0, &(0x7f0000000140)=""/78, 0x4e, 0x12f496ee5b102d01, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000240)={0xfff, 0x7, 0x4, 0x42d, 0x0, 0x78d404fa}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010716ee5d0000000000000000007ca18faac1d3fc047a990f1536950d79039a4b651b3db7634cb25daef2bab6899a8a05a1d0823e8e60e12bc7d96735317c5b7d2286439703b54f2002b324d91e3de5f1d966e2d166d987ac694658a3f6463a120f91886bddca5f6ea86ad57ed1567ac94a6d801ac274b0ffbecaefe208a11e9d4dccee42ae20f8ed878851587d81930b2e5b3a2fd1d0f12b476e742b3876e6e7506155008f24c68bfa5760d247ce7fbcdcb40e457e104ce257fd00f43526c3c89656e37abcb33e3b645d2ab453712f15285bc5a47136803cc70cf4ce7c25dc3273cc0b6ce1b0d6fe8bf94b18ba02ca90e5ff9b715e244ae8e62e754bd864d82da23e1c"], 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 743.171217] audit: type=1804 audit(1568460589.563:593): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1127/bus" dev="sda1" ino=17429 res=1 [ 743.453699] protocol 88fb is buggy, dev hsr_slave_0 [ 743.458894] protocol 88fb is buggy, dev hsr_slave_1 [ 743.464056] protocol 88fb is buggy, dev hsr_slave_0 [ 743.469144] protocol 88fb is buggy, dev hsr_slave_1 11:29:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:52 executing program 5: prctl$PR_SET_FPEXC(0xc, 0x585a89967a55c1ab) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00@\x00', 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:29:52 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/ne\x03\x00\x00\x00v4/vs/l~lc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/168) [ 745.731383] FAT-fs (loop2): bogus number of reserved sectors [ 745.754936] FAT-fs (loop2): Can't find a valid FAT filesystem 11:29:52 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) [ 745.764754] audit: type=1804 audit(1568460592.163:594): pid=4244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir077476599/syzkaller.Ux8viB/1128/bus" dev="sda1" ino=17446 res=1 11:29:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2400000014008110ff0100000060005f01546f6c9245f99714685fabca9b4e7d06a6bd00", 0x24}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r5}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000080)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$kcm(0x29, 0x2, 0x0) splice(r8, 0x0, r9, 0x0, 0x103fffffd, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r7, r8, 0x0, 0x2, &(0x7f00000001c0)='/\x00'}, 0x30) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r10, &(0x7f0000000340)=ANY=[], 0xffffffc6) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000100)={r6, 0x4, 0x8, [0x10000, 0x9, 0xff, 0xffffffffffffffff, 0x9, 0x7fffffff, 0x3, 0x7]}, 0x18) 11:29:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:52 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x107fff) lseek(0xffffffffffffffff, 0x0, 0x4) 11:29:52 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x107fff) lseek(0xffffffffffffffff, 0x0, 0x4) 11:29:52 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x107fff) lseek(0xffffffffffffffff, 0x0, 0x4) 11:29:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:55 executing program 0: r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:55 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x444bb3e9580b7f35) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r8}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000640)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r11}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r12, &(0x7f0000000640)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r14}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r15, &(0x7f0000000640)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r17}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@multicast1, @empty, 0x0}, &(0x7f0000000440)=0xc) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r19, &(0x7f0000000640)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r21}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r22 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r22, &(0x7f0000000640)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r24}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r25 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r25, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r25, &(0x7f0000000640)={0x11, 0x0, r26, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r27}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000800)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x60, &(0x7f0000000840)={@dev, @dev, 0x0}, &(0x7f0000000880)=0xc) r32 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r32, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r32, &(0x7f0000000640)={0x11, 0x0, r33, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r34}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) r36 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r36, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r36, &(0x7f0000000640)={0x11, 0x0, r37, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r36, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r38}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r39 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r39, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r39, &(0x7f0000000640)={0x11, 0x0, r40, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r41}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r42 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r42, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r42, &(0x7f0000000640)={0x11, 0x0, r43, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r42, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r44}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xe8) r46 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r46, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r46, &(0x7f0000000640)={0x11, 0x0, r47, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r46, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r48}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r49 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r49, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r49, &(0x7f0000000640)={0x11, 0x0, r50, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r49, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r51}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000b40)=0xe8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r53, &(0x7f0000000340)=ANY=[], 0xffffffc6) accept4$packet(r53, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14, 0x800) r55 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r55, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r55, &(0x7f0000000640)={0x11, 0x0, r56, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r55, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r57}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3516313a9303e0ff}, 0xc, &(0x7f00000016c0)={&(0x7f0000000c00)={0xa88, r4, 0x984, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x108, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x1b4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x2f8, 0x80000000, 0x83, 0x6}, {0x321, 0x1f, 0x6, 0x20000000000000}, {0x2, 0x53fc, 0x2, 0xfffffffffffffe01}, {0x1, 0x2, 0x4, 0xfffffffffffffffe}, {0x7fff, 0x2, 0x0, 0x9d}, {0x4, 0x7c, 0x1, 0x8}, {0x7, 0x8, 0x1f, 0x1}, {0x6, 0x1f, 0x4, 0x7ff}, {0x2, 0x1c02, 0xffff, 0x71}]}}}]}}, {{0x8, 0x1, r18}, {0x1f8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x7, 0x10001, 0x100000000, 0x1}, {0x4, 0x5, 0x0, 0x8}, {0xfffffffffffeffff, 0xfff, 0x9, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x6, 0x40, 0x100000001}, {0x7fffffff, 0x3, 0x9}, {0x0, 0x4, 0x1, 0xb4c}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4306eed5}}}]}}, {{0x8, 0x1, r28}, {0xbc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r30}}, {0x8}}}]}}, {{0x8, 0x1, r31}, {0xf8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x0, 0xfffffffffffffef0, 0x7, 0x5}, {0xe4, 0x7, 0xffff, 0x2}, {0x7, 0x9, 0x5, 0xa00}, {0x1, 0x2, 0x101, 0x96}, {0x7f, 0x8, 0x12e, 0x1f}, {0x5, 0xe327, 0x4, 0x8}, {0x9, 0x2, 0x9, 0x7fffffff}, {0x2f, 0x0, 0x0, 0x7}, {0x8, 0xfffffffffffffffe, 0x2, 0x80000001}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r34}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r35}, {0xec, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r41}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x48000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r44}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r45}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r48}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x7c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r51}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r52}}}]}}, {{0x8, 0x1, r54}, {0xb0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r57}}}]}}]}, 0xa88}, 0x1, 0x0, 0x0, 0x80}, 0x40820) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r59 = socket$kcm(0x29, 0x2, 0x0) splice(r58, 0x0, r59, 0x0, 0x103fffffd, 0x0) r60 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r61 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) dup3(r61, r60, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r58, 0xc028660f, &(0x7f0000000080)={0x0, r61, 0x401, 0x4, 0x10001, 0xd3a}) 11:29:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010f000000000000000004000000"], 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 11:29:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x24a, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYRESDEC=0x0]) 11:29:55 executing program 0: r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:55 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000047, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0x90d3, @rand_addr="bd1c8740142118d7a3b67a1ec3f3d797", 0x361e95ac}}, 0x0, 0x3ff, 0x0, "3d3c733de85cf31570ca727010cd224ac06c1b263472c5bb152d1610c6418f1ec97997854feaf95ca5d714c5df56bfae3468b67d20bab6247ef231a84fc5c4ed671e71a4dc18442ba32a91c84c87a288"}, 0xd8) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) 11:29:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef}, 0x0, 0x400000000000d, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={0x0, 0x1d8, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="add299feaa6ca8ab6e6b0cae541de46e84f50c194079ee0d53dd4fc6734b17f8f88fc47652b6d45187610aa978216d83ae3286e1b6c14d416247f40401b3c33bd86cc26eed6de34fd9c2a2d8148f79af2ddd7c9a5bda331a869dfa2f4372a28ef978218810aae406495cc56e2cab94a15a06d2404047ea855cc0df4e4bffa9d92a24dc99842714912d034e03fb2efcd917a1895ff6ee3805aedf333b8a1db7591b66cc43d3f0d9b8db5e6f13b7ebb183cfe623d28b6c3a42985ddc6b1764e59982e3a8743048508b1205b5fb343e693d75469089b603a27c10df5ab7042cc8a1ce6978ca", @ANYPTR, @ANYRESOCT=r1, @ANYRES64, @ANYBLOB="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", @ANYBLOB="60028f1922d85ce73e55dcbfa754a238af60"], 0x14}}, 0x80) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff6042, 0x2000) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000100)=@null) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 748.818008] FAT-fs (loop2): bogus number of reserved sectors [ 748.844857] FAT-fs (loop2): Can't find a valid FAT filesystem [ 748.893726] net_ratelimit: 20 callbacks suppressed [ 748.893733] protocol 88fb is buggy, dev hsr_slave_0 [ 748.903820] protocol 88fb is buggy, dev hsr_slave_1 [ 748.908966] protocol 88fb is buggy, dev hsr_slave_0 [ 748.914088] protocol 88fb is buggy, dev hsr_slave_1 [ 748.973687] protocol 88fb is buggy, dev hsr_slave_0 [ 748.978853] protocol 88fb is buggy, dev hsr_slave_1 11:29:55 executing program 0: r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:55 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) bind$packet(r0, &(0x7f0000000180)={0x11, 0x7, r1, 0x1, 0xffff, 0x6, @broadcast}, 0x14) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000001c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x581000, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000300)={0xf000, &(0x7f0000000280), 0x8, r3}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x16f9, 0x6, 0xffffffff, 0xae}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000400)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file0\x00', 0x8, 0x1) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$rds(r5, &(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0xa7}, 0x10) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x10100, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000540)=r3) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000580)={0x140000000, 0x3, "16878d97f4e23b934bdae8791d59f550553df65fd21b9d17c9dc42fa44c26191", 0xffff, 0x8000, 0x9, 0x7ff, 0x7ff, 0x4, 0x8, 0x0, [0x3, 0x9, 0xfffffffffffffff7, 0x6]}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x400280, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000006c0)={0x6, {0x6, 0xfffffffffffffe01, 0x4, 0x697b, 0x80000000, 0xa89}}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ubi_ctrl\x00', 0x32800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xe8) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vsock\x00', 0x111000, 0x0) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000940)={0x0, &(0x7f00000008c0), 0x0, r10, 0xf}) setxattr$security_capability(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='security.capability\x00', &(0x7f0000000a00)=@v1={0x1000000, [{0x8, 0x400}]}, 0xc, 0x1) open(&(0x7f0000000a40)='./file0\x00', 0x200, 0x14) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r11, 0x40045730, &(0x7f0000000ac0)=0x1) syz_mount_image$bfs(&(0x7f0000000b00)='bfs\x00', &(0x7f0000000b40)='./file0\x00', 0x2, 0x2, &(0x7f0000000c40)=[{&(0x7f0000000b80)="c68fe87d9fd8527caa4774317f5a4816b10f529f41a34729f0da56af4d", 0x1d, 0xff}, {&(0x7f0000000bc0)="75a5e6f91a37dc5bd8c83f11b246cac8ab4da49909c67bbb5a636d09e509796ed05290defb8d3aec277cc0336ac0cf867f5b2fd4202bed3d028c9ad680592ef45346e2912f599b66b20cff216134cba8c7b5b2b112ce0f", 0x57, 0x3963}], 0x800000, 0x0) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r12, 0x4020565b, &(0x7f0000000cc0)={0x0, 0x6}) 11:29:55 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) [ 749.234612] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 11:29:55 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 749.693700] protocol 88fb is buggy, dev hsr_slave_0 [ 749.698890] protocol 88fb is buggy, dev hsr_slave_1 [ 749.704078] protocol 88fb is buggy, dev hsr_slave_0 [ 749.709148] protocol 88fb is buggy, dev hsr_slave_1 [ 749.796442] FAT-fs (loop2): bogus number of reserved sectors [ 749.810559] FAT-fs (loop2): Can't find a valid FAT filesystem 11:29:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="640ef26616d42f7a44aadb9217ad9b762e14b8e9c3f736ef8243c80bf7ee498d4c9c5ef483d88850a460df7027f72dd4c209701fb35c4747944fcdcf38884c76f0f68df583b2e183c66c19269bed91d1bd3134bc2cb9f2b4bb722310eab23bf6c7a06981d5973e75842af0b60a808a24349db841a94215ac1087e56c7edeccc55fc9370b32bf98f29f9237c850749a8e2ef093d7f64a3aeb80463345bed5", 0x9e) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r6, 0x10, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r6}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x6) r11 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) r12 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r12, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r14, 0x6611) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r20, 0x6611) r21 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r22 = getpid() prlimit64(r22, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r24 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r25}}]}) sendmsg$unix(r8, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r9, r10, r6, r11, r12, r13, r14, r7, r15]}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x30, 0x1, 0x1, [r6, r17, r6, r18, r5, r19, 0xffffffffffffffff, r20]}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}], 0xd0, 0x20064044}, 0x0) r26 = getpgrp(r22) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)={0x168, 0x10, 0x200, 0x8, 0x25dfdbfc, "", [@generic="dcf3b5336751c55dc753e7c6fa909a85ddcc97f9f69eb8a36d0c0d6d48d0c4b47f63bd535aedd354a1f11a545ab41f83af424ba25921f7fc48bab5ed24baec9b83e2297c0eb7e6e3aa6e4532e0bdef71d9728ce72d5d2a2ee8c52c7c6b58729d4bac64876fb08800", @typed={0x8, 0x73, @u32=0x8001}, @generic="16b30631f72f277be227062f2b6995a376b409783395da31e92bc2380698f7337db51026b37074cdcd3fb04762e7e40a9181d4982f9a9cdaf5c85c5fa0fc72e2d86cb44ab3e4b3f0a983f136b8208e2ddf223209c6249407c63c1310c9d3fde50b983b80f0cb997e21cfdde661b430ff4d296f26584f82053669f50d6cb49bcd0c51a25901ff4a116e8a9a5ed9ccc63b5d4a42927b0d3ee4974d18a07037ced636243a57d98c28c0caf313b929087973f48b689c1cf0f0a2bd654aee316d2d8295456037ebe4791e15f457a17b832bc8f0816ba0d6ccbbab69853fb83aae1a0f4006ea234d1177"]}, 0x168}, {&(0x7f0000000000)={0x70, 0x1a, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x4, 0x86}, @typed={0x8, 0x40, @pid=r26}, @nested={0x4, 0x8d}, @generic="085d1602a32b1aca3afb4ed30a9f975dddec080d3d7eb5f8d50ce3e6695b953e7b26aae4ac2f23fa9ff567520b2c3219f5172f149b4586406430fa1580f7e26d2cf0d1", @typed={0x4, 0x85}, @typed={0x8, 0x0, @ipv4=@empty}]}, 0x70}, {&(0x7f0000000600)={0x28, 0x25, 0x300, 0x70bd25, 0x25dfdbff, "", [@typed={0x14, 0x3c, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @nested={0x4, 0x46}]}, 0x28}, {&(0x7f0000000800)=ANY=[@ANYBLOB="700000003200100025bd7000fcdbdf255513a7df0c0dea88bf6aa0c305606220c45d3baf5791ef89b62300199de1f26f0b561a9c534b905106ec335a7d03506176f5c7064397d588c67cdbce79fdb2b46e2d41ab23f43e773ccf2dfa886caded1a1462bbe52570ba3ea31451f58c8400"], 0x70}, {&(0x7f00000013c0)={0x1280, 0x26, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xe0, 0x67, [@typed={0x8, 0x88, @ipv4=@multicast2}, @generic="acfcccd942746d4446b1f50dd7bedc94d1b8098f479c4dc888b81c8ad044e948915cf2a436835f42e3335c87533b4ce8fad08002723f3101a35ff71c55685acb3cd9be7c0cdca1a2e28c9a5a46cdcc327ee6cd6cb51a8dc79598eb05e06cd4b2375e0dbe04dd075ad3e8428e3d63feed5f430860ebdbf652fa7977e7b7942dd8a02fc0c5f62e5c24f65718dd482ae59955000015729b57b903e858cdcff6bc8fa0efdf1fe9dc978bfa8f95f157b5c2336be0395476e0cec0aedbc82679c724efe37d369f18eaea6ef6", @typed={0x8, 0x1d, @pid=r22}]}, @nested={0x1168, 0x87, [@generic="50457c7da49e5e42fb01fd1a46e4a150c113dfa505aa7363e8ef19e2c222ceb067ba9d93ae9cbab775a15db39838f188168f1f8b132edefa2bb590c55a09863cbf5475425c00cbc1da688e1709b67736ecdd62238b2ea4592719d2749362dba8bffc37ee3f74ef4ace93b442ec20b3b1c2729ac062f01045162cf1565ab22b3562956280cf89d1702538e3ceb3e177cde88c98438749dfa1a38ef3024e133afbc4c933081a7e7d7009be57f5c928b7b34b8970e9cafed3b09194a22f7ad3322d4d9bd9fd95f2681be115c68f1e9e13e783bd78d2143f87c6bf73db30dcce58d431da6b3ca140dcef", @typed={0x8, 0x50, @ipv4=@multicast2}, @generic="cafa1a6c12a92ab3ec232dfb0f73bc9b82747879ff347e3e9772af578814532d65db1eca7afacdfa52ce916c36d3e3", @generic="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", @generic="23f1d2c99a25dee3aec61d66c448192880af39193b39e7d9eb6d41bad54884eadc610914810362c1573b77572b75adb8426f87879eb0bd938b5a76049100d10e72753f"]}, @typed={0x8, 0x7, @u32=0x3}, @typed={0x8, 0x67, @u32=0x3}, @typed={0xc, 0x9, @u64=0xe1fd}, @typed={0xc, 0x2a, @u64=0x2}]}, 0x1280}, {&(0x7f0000000880)={0x118, 0x20, 0x800, 0x70bd25, 0x25dfdbff, "", [@nested={0xf4, 0x33, [@typed={0x8, 0x61, @ipv4=@remote}, @generic="946c850201afb685a5d9cd72008650838f1cbad3ef4afe9241c2d2923bd55ba3c77d065388b29ff7541b79b4f3527bcff2220d437c435338df4d474f0e364868da695649461e3a4302af26877a0262a2f590a2526b5e727df9af5922171bf39d1bc0001c886ce79cce", @generic="c8061054067b94c721ebecc38400f7d7c7338fd43afcf3eed7a4257d7feb998212", @typed={0x8, 0x88, @str='gid'}, @generic="1a578a759989cb2814c2568dac9642739741f5d7b8197bb62737ad976fb53f1012d7dbc8d32daee3cdf250e5db8222a510c6404de46074af2c831a3e08dd8a85a1679049daca", @typed={0x4, 0x1b}, @generic="d936b9ca2304921e3bc7"]}, @typed={0x8, 0x21, @ipv4=@multicast2}, @typed={0xc, 0x67, @u64=0x401}]}, 0x118}, {&(0x7f00000009c0)={0x38c, 0x28, 0x0, 0x70bd25, 0x25dfdbfb, "", [@nested={0x1b8, 0x7b, [@generic="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", @generic="71c1b53fe57aef8fd53ee879faefde30acb0c71e23a0b5d5f3345731a72b1600014e7e12fa896d3b007f1f13baf5f36353deef03a61b4e6e2710a7115284073255eabdb504b0cad75bf8c4a270077d8443e2fea15a1151f7906494da2cf7f19c4ca90408ae39547761c5208c0db619098f5d522e2713c4051f529ff38e6031df8153ad224123e45416bd49b33c9ecbd017294cf0f8338adf29a969ea5aa6282ef0ac18df4ba3da14849d2fe3ff6d6653e8c658dfd6eaa63fa1"]}, @typed={0x4, 0x45}, @generic="963880ad8e3d80e349873cf128ae047496ea0d063acb055c6b14ff7f66d6bbae3f640890b4d9fb5f7ea4cd54fc27f7b5d9693d2e70213bcd777d64b339b38a8b4d1d4df32c93bb3e9c784449beb1a85af943", @generic="b6c70be549981def615ce900fb0c7c5863709648cb3832d17fcbf8a3d76e27b5a0375a93da0734f392310761a64cfaa6b523f3cfbd", @nested={0x138, 0x92, [@generic="7f0cd0c6e253d83ad544a4148facaed9a18cc633b52fbda70d15f9208667ddd9307f3297a792ea5e12e7256611541f3003d43a788788fd3f795dde4612", @typed={0x8, 0x7d, @str='gid'}, @generic="8bf6caa2110c1588c19d85ea236cfaa75ace15749bff45698c002f3be0cd9440e357f376a9f137222d1c627bb10e456c5160513e7a98dbe48ed36c6719c901a6563c2248c8e0356e6df500f9bcbf91cb1aee92ac5da26f49fb319a3d85a8161a6d1c1cf3a36569d1c8f3345f646a17dccee76ac274263c26fb9afbf74a3e358aba47133737018b0cab50da160e8d4067f1a1c87e3b52b0fd033ef62df5be0bc11b876be47cb99ef60eb95d7fab", @generic="6026e5a80ea2d39d456d5ede4a1b6c9547dd0e645ca2ac869bd588306b7d70ba1591fb2dec9c15336fb6aedcbbc80aed84da45cdddd69b8006cfa39270646b"]}]}, 0x38c}], 0x7, &(0x7f0000000100)=ANY=[]}, 0x0) recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 11:29:56 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:56 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x640000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) write$cgroup_int(r1, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000100)=""/132) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x103fffffd, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000001c0)={0x2d, 0xfffffffffffffe00, 0xa, 0x6, 0x3, 0x102}) 11:29:56 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) [ 750.282201] hfs: gid requires an argument [ 750.297997] hfs: unable to parse mount options [ 750.469434] hfs: gid requires an argument [ 750.478324] hfs: unable to parse mount options 11:29:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:58 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001300)=""/4096, 0x0, 0x1000, 0x1}, 0x20) 11:29:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:29:58 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x268) 11:29:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xcf0b3f7098353009) recvmmsg(r0, 0x0, 0xfffffffffffffff8, 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) r2 = fcntl$dupfd(r1, 0x0, r1) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x28e) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r2, 0x0, 0x0) 11:29:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r2 = dup(r1) dup3(r2, r0, 0x0) 11:29:58 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x6002, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="5372a7164812e3329321692d688056071c9604bcdc0ab13f2a62cb77591d3e53b9dc296a65027e5777070fa9d9eec15c62d4855129ddb0b30302b4e91eafaf4081052b76dcd5d7d15a512495567a6cd5ca4969566a42725b63626ee86a71dc3bbd91c5d68bacf9638a80147daa1974e8896884512b2d24d52640e8bfee91b82943d0118338191794db95c03dad4ce7981f79b59fc16d48c1836c8a2b7f896ffa26b63a278de1fc6aa94e80abd18a167b98b7") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/prxc/sys/net/ipv4/vs/sy\xb8_\xc3\\efresh_period\x00.\xd3\xd01\xdc\xec\xebu', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 751.958985] FAT-fs (loop2): bogus number of reserved sectors [ 751.985385] FAT-fs (loop2): Can't find a valid FAT filesystem 11:29:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 11:29:58 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x4) 11:29:58 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0xfffffffffffffe63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e7", @ANYRES16=0x0, @ANYPTR64, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad030000b87bcf64d4b94bf51cc48c4320f211f355daf25d45ffd2cc78e8545936019a85c923850eeb141702a621bbf397d3b7883b5b1c6972cc", @ANYRESDEC], 0x0, 0x169}, 0x20) socket$key(0xf, 0x3, 0x2) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 11:29:58 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 11:30:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:01 executing program 5: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) syz_emit_ethernet(0x0, 0x0, 0x0) 11:30:01 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x103fffffd, 0x0) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80800) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r8}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@setlink={0x168, 0x13, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x80, 0x20}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast}, @IFLA_LINKINFO={0x12c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x11c, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0x4, 0x2c}, @IFLA_IPTUN_LINK={0x8, 0x2, r8}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x10, 0xffffffffffff7fff}], @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x9}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0xfffffffffffffffd}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_SPORT={0x8, 0x11, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x8}]], @tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2a}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x15}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0xf6d}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x9649}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="f1c8d9a9ee5f3efa79f94a87db382e65"}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x4}]]}}}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x7fff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x20009840}, 0x40) 11:30:01 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 11:30:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c934992", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:01 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 755.032392] FAT-fs (loop2): bogus number of reserved sectors [ 755.055475] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:01 executing program 5: 11:30:01 executing program 3: [ 755.143751] net_ratelimit: 22 callbacks suppressed [ 755.143759] protocol 88fb is buggy, dev hsr_slave_0 [ 755.153849] protocol 88fb is buggy, dev hsr_slave_1 [ 755.158998] protocol 88fb is buggy, dev hsr_slave_0 [ 755.164147] protocol 88fb is buggy, dev hsr_slave_1 11:30:01 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x107fff) lseek(0xffffffffffffffff, 0x0, 0x4) [ 755.213708] protocol 88fb is buggy, dev hsr_slave_0 [ 755.218852] protocol 88fb is buggy, dev hsr_slave_1 11:30:01 executing program 3: 11:30:01 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000000100000018"], 0x46040) [ 755.371892] audit: type=1800 audit(1568460601.763:595): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="sda1" ino=24 res=0 [ 755.943685] protocol 88fb is buggy, dev hsr_slave_0 [ 755.948820] protocol 88fb is buggy, dev hsr_slave_1 [ 755.953976] protocol 88fb is buggy, dev hsr_slave_0 [ 755.959058] protocol 88fb is buggy, dev hsr_slave_1 11:30:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:04 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:30:04 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x107fff) lseek(0xffffffffffffffff, 0x0, 0x4) 11:30:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x1, 0x400) 11:30:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x3f, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000000c0)='@[\x00', 0x3, 0x1) splice(r1, 0x0, r3, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x103fffffd, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_int(r8, &(0x7f0000000080)=0xfffffffffffffffb, 0x12) 11:30:04 executing program 5: 11:30:04 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x107fff) lseek(0xffffffffffffffff, 0x0, 0x4) [ 758.224745] FAT-fs (loop2): bogus number of reserved sectors 11:30:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4) [ 758.298468] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:04 executing program 5: 11:30:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x1, 0x400) 11:30:04 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x0) 11:30:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x1, 0x400) 11:30:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/spv4/vs/lblc_expiraqion\x00\x90xx\x9c\x95\'-\rrM\xa4aT\xa2O\xef\x98\x1d\xd7\xf9\x9e\t:\xce\x81\xf9\b\xf9b\xb5\xee\xbcb\xc1\xf7\x19\xd5\x86\x17\x94\x81\x00\x00\x00\x00\x00\x00\x00\x00\xa1\x97\x83A\xdf4\x7f\x1a*\xbe\xf66\x00\xde2b\xaf5\x94\x11\xc6W\x0f[\xb0\xd6|!\xfb\xa7d4\x8a\x82\xa4\xeb\x06Xh+\x112{=\xd2\xa6UVp\xeb\x01fb.\xbc\xf9j\xc9\xe1\x94\xbf\x80\xf5i\xc3c\x1f6\xa1\xaa\xea\x13\xf6t\xa7\x11\x11\a\x02\xbc\x1c', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) fchdir(r2) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r3, 0xe51) 11:30:05 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x0) 11:30:05 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x1, 0x400) 11:30:05 executing program 3: 11:30:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:05 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x107fff) lseek(r0, 0x0, 0x0) [ 759.227181] FAT-fs (loop2): bogus number of reserved sectors [ 759.273996] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:07 executing program 3: 11:30:07 executing program 0: 11:30:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x1, 0x400) 11:30:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xff, 0x12) 11:30:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 761.373720] net_ratelimit: 20 callbacks suppressed [ 761.373729] protocol 88fb is buggy, dev hsr_slave_0 [ 761.383855] protocol 88fb is buggy, dev hsr_slave_1 [ 761.389021] protocol 88fb is buggy, dev hsr_slave_0 [ 761.394159] protocol 88fb is buggy, dev hsr_slave_1 11:30:07 executing program 0: [ 761.431000] FAT-fs (loop2): bogus number of reserved sectors [ 761.446322] FAT-fs (loop2): Can't find a valid FAT filesystem [ 761.453714] protocol 88fb is buggy, dev hsr_slave_0 [ 761.458844] protocol 88fb is buggy, dev hsr_slave_1 11:30:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) fcntl$setflags(r1, 0x2, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x840) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 11:30:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009000c000000", 0x24) 11:30:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) 11:30:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 762.173744] protocol 88fb is buggy, dev hsr_slave_0 [ 762.178888] protocol 88fb is buggy, dev hsr_slave_1 [ 762.184033] protocol 88fb is buggy, dev hsr_slave_0 [ 762.189170] protocol 88fb is buggy, dev hsr_slave_1 11:30:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) 11:30:10 executing program 0: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8002}], 0x1) semop(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x04', 0x175d900f) creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x04', 0xfffffffffffffd92) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$usbmon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) write$cgroup_type(r2, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) 11:30:10 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x2, 0x6, 'queue1\x00', 0xffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 764.479451] FAT-fs (loop2): bogus number of reserved sectors [ 764.491001] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) 11:30:11 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:30:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) 11:30:11 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:30:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) 11:30:11 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:30:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 11:30:13 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0xce) 11:30:13 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:13 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:13 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8407ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="08c1b9ea0cefb6794959061c097a535769b24f4ea017951a020cf1995f31988ae858f86e2e0c1c2be3e6ad6f4df5ca41d987142abfbcd0fc9f430f92d49480bbb4e6a0e4bd3e2057e794b93ee3d47946b9709cb722d447cf12e557a7a122b89e9a704f9c75d80e734ccd293bd71a9f555a58ec1a7f5cedb49a8404daa8e549be", 0x87}, {&(0x7f0000000100)="15cda3fd61a5bbddfd5800d1172dbdbe6bcb3eb52bac6e0203d34c9195e0540aefd140f021433f7f5ef4be85861352dee23a078af2566c660c2841eda13d6d1ee5067ca4e8b14875dfaadcaaa3b698dc64fde3f1fbfe824e44d765c8611002c268bdaebac7499d405b067026c20efb87ebdd76f07cbd982f0bd3991537107e267e4c9e25a5f400041be0c5ddd60bbff37ca1d3b79093e35b586e805a", 0x9c}, {&(0x7f00000001c0)="b8f4dc355a7998613374e2c9f449768e7fd15ca884534666055aee00"/40, 0x28}, {&(0x7f0000000200)="d6a1861741635defc3cc85befc934c4a831a2905085dd6682540e664c9e60e709ecbbc0a1172a76f0548d9b4751bacc26ee3e39fefc5ccc82919d09916b3", 0x3e}, {&(0x7f0000000240)="caa421f36640f8627e5c990777ca3c4789bcf6", 0xfffffffffffffe74}], 0x5}, 0x885) [ 767.613723] net_ratelimit: 20 callbacks suppressed [ 767.613731] protocol 88fb is buggy, dev hsr_slave_0 [ 767.623836] protocol 88fb is buggy, dev hsr_slave_1 [ 767.624160] FAT-fs (loop2): bogus number of reserved sectors [ 767.628957] protocol 88fb is buggy, dev hsr_slave_0 [ 767.639837] protocol 88fb is buggy, dev hsr_slave_1 11:30:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) [ 767.693745] protocol 88fb is buggy, dev hsr_slave_0 [ 767.698898] protocol 88fb is buggy, dev hsr_slave_1 11:30:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 11:30:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 767.761466] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 768.413695] protocol 88fb is buggy, dev hsr_slave_0 [ 768.418896] protocol 88fb is buggy, dev hsr_slave_1 [ 768.424055] protocol 88fb is buggy, dev hsr_slave_0 [ 768.429288] protocol 88fb is buggy, dev hsr_slave_1 11:30:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f69173", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) 11:30:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:16 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r3}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in6=@mcast1, 0x4e20, 0x10000, 0x4e22, 0x7, 0x2, 0x0, 0x20, 0x84, r3, r7}, {0x2, 0x2a, 0x800, 0x101, 0x401, 0x80000000, 0x7fffffff, 0x9}, {0x3, 0x4, 0x1176, 0x9}, 0xfe000000, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x26}, 0x4d3, 0xff}, 0x8, @in=@multicast1, 0x0, 0x0, 0x0, 0xfff, 0x100000000, 0x9, 0xa3e9}}, 0xe8) [ 770.588489] FAT-fs (loop2): bogus number of reserved sectors [ 770.600115] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f69173", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) 11:30:17 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x3, 0xfffffffffffffe69) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x101}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 11:30:17 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:17 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:17 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 771.666400] FAT-fs (loop2): bogus number of reserved sectors [ 771.677973] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f69173", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:20 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4f6283, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@empty, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x16}, r2}, 0x14) 11:30:20 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 773.742381] FAT-fs (loop2): bogus number of reserved sectors 11:30:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 773.793526] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:20 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 773.853684] net_ratelimit: 20 callbacks suppressed [ 773.853694] protocol 88fb is buggy, dev hsr_slave_0 [ 773.863831] protocol 88fb is buggy, dev hsr_slave_1 [ 773.868952] protocol 88fb is buggy, dev hsr_slave_0 [ 773.874086] protocol 88fb is buggy, dev hsr_slave_1 [ 773.933737] protocol 88fb is buggy, dev hsr_slave_0 [ 773.938877] protocol 88fb is buggy, dev hsr_slave_1 11:30:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, r10, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:20 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:30:20 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) 11:30:20 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 774.663700] protocol 88fb is buggy, dev hsr_slave_0 [ 774.668866] protocol 88fb is buggy, dev hsr_slave_1 [ 774.674048] protocol 88fb is buggy, dev hsr_slave_0 [ 774.679119] protocol 88fb is buggy, dev hsr_slave_1 11:30:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 774.882437] FAT-fs (loop2): bogus number of reserved sectors [ 774.904839] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:23 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x7, 0x12) 11:30:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:23 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) 11:30:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 777.038423] FAT-fs (loop2): bogus number of reserved sectors [ 777.064293] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) 11:30:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:23 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:23 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:24 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) 11:30:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:26 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:26 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x40000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r4, 0x7, 0xa92d0d752915895}, &(0x7f0000000080)=0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x103fffffd, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:26 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) 11:30:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 780.093723] net_ratelimit: 20 callbacks suppressed [ 780.093732] protocol 88fb is buggy, dev hsr_slave_0 [ 780.103897] protocol 88fb is buggy, dev hsr_slave_1 [ 780.109047] protocol 88fb is buggy, dev hsr_slave_0 [ 780.114174] protocol 88fb is buggy, dev hsr_slave_1 [ 780.174632] protocol 88fb is buggy, dev hsr_slave_0 [ 780.180954] protocol 88fb is buggy, dev hsr_slave_1 11:30:26 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:26 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) 11:30:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:26 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) [ 780.865606] FAT-fs (loop2): invalid media value (0x00) [ 780.871006] FAT-fs (loop2): Can't find a valid FAT filesystem [ 780.893699] protocol 88fb is buggy, dev hsr_slave_0 [ 780.898845] protocol 88fb is buggy, dev hsr_slave_1 [ 780.904024] protocol 88fb is buggy, dev hsr_slave_0 [ 780.909082] protocol 88fb is buggy, dev hsr_slave_1 11:30:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:29 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:29 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:30:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x95, 0x209e1e, 0x3, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x546c, 0x30}, 0xc) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 783.199971] FAT-fs (loop2): invalid media value (0x00) 11:30:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000040)=0x7, 0x4) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 783.243255] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:29 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:29 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) 11:30:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioprio_get$pid(0x2, r1) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:30 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r4, &(0x7f0000000040)=0x8007ffffffa, 0xfffffffffffffffd) 11:30:30 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) 11:30:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:30 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:30 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) 11:30:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 784.254076] FAT-fs (loop2): invalid media value (0x00) [ 784.282457] FAT-fs (loop2): Can't find a valid FAT filesystem [ 786.333738] net_ratelimit: 20 callbacks suppressed [ 786.338873] protocol 88fb is buggy, dev hsr_slave_0 [ 786.343983] protocol 88fb is buggy, dev hsr_slave_1 [ 786.349151] protocol 88fb is buggy, dev hsr_slave_0 [ 786.354365] protocol 88fb is buggy, dev hsr_slave_1 11:30:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:32 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:32 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) 11:30:32 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) getsockname$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1d2) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) setsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000040)="5e345e6caead2dd9f4f70a4c4aa4c8bfc07e916b2c12a58379c3004e7da7fd9065d1cf955a6a85c1048cefb14d9dacc1b8491bda98f39f151e31adefbd7183f48df11194a55cb6d49821643145facf1cd348d4090ea2bd9646beeef346d0de256491", 0x62) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 786.413701] protocol 88fb is buggy, dev hsr_slave_0 [ 786.418832] protocol 88fb is buggy, dev hsr_slave_1 11:30:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:33 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 786.623217] FAT-fs (loop2): invalid media value (0x00) 11:30:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 786.679083] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:33 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) 11:30:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:33 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 787.133701] protocol 88fb is buggy, dev hsr_slave_0 [ 787.138853] protocol 88fb is buggy, dev hsr_slave_1 [ 787.144038] protocol 88fb is buggy, dev hsr_slave_0 [ 787.149131] protocol 88fb is buggy, dev hsr_slave_1 11:30:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c934992", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:35 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r3, 0x0) 11:30:35 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x105000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:35 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000000c0)={0x1, 0x7}) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xffffffffa418d0bd, 0x14200) fcntl$dupfd(r1, 0x406, r0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x103fffffd, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240), 0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) mq_timedreceive(r5, &(0x7f0000000400)=""/4096, 0x1000, 0x8000, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000180)=0x1c, 0x80000) [ 789.623221] FAT-fs (loop2): invalid media value (0x00) 11:30:36 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r3, 0x400, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) [ 789.664318] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:36 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c934992", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x0, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:36 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x0, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:36 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r3, 0x400, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) 11:30:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x0, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x0, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:36 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:36 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r3, 0x400, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) 11:30:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:36 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80080) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0) getsockopt$rose(r5, 0x104, 0x6, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000014, &(0x7f0000000100)=0x8000000000000002, 0x4) sendmmsg(r4, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880), 0x2}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x240ee712, 0x200400) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={r9}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x6}}}, 0x84) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000000c0)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) [ 790.644378] FAT-fs (loop2): invalid media value (0x00) [ 790.649899] FAT-fs (loop2): Can't find a valid FAT filesystem [ 792.573752] net_ratelimit: 20 callbacks suppressed [ 792.573758] protocol 88fb is buggy, dev hsr_slave_0 [ 792.583961] protocol 88fb is buggy, dev hsr_slave_1 [ 792.589069] protocol 88fb is buggy, dev hsr_slave_0 [ 792.594195] protocol 88fb is buggy, dev hsr_slave_1 [ 792.653728] protocol 88fb is buggy, dev hsr_slave_0 [ 792.658880] protocol 88fb is buggy, dev hsr_slave_1 11:30:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c934992", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x0, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:39 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 11:30:39 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:39 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='Fpro\\/sys/d\x00\x00\x00\x00\x00\x00\x00\x03\xffxpiratZ\xc8[\x87\xe9\x95\xc780\xdf\x11\xa4\xedZ\xb5\xe8', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x0, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:39 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x40, 0x12) 11:30:39 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) dup3(0xffffffffffffffff, r3, 0x0) 11:30:39 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 793.068953] FAT-fs (loop2): invalid media value (0x00) 11:30:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:39 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000180)={0x5, 0x1, 0x3, 0x3b29, 0x100000000008}) [ 793.114752] FAT-fs (loop2): Can't find a valid FAT filesystem [ 793.373715] protocol 88fb is buggy, dev hsr_slave_0 [ 793.378830] protocol 88fb is buggy, dev hsr_slave_1 [ 793.384021] protocol 88fb is buggy, dev hsr_slave_0 [ 793.389107] protocol 88fb is buggy, dev hsr_slave_1 11:30:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:42 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:42 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) dup3(0xffffffffffffffff, r3, 0x0) 11:30:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:42 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x80000000, 0x5, 0xf52, 0x9, 0x61f3, 0x1ff, 0x0, 0x95f, 0x0, 0x3, 0x3, 0x6, 0x200, 0xfff, 0x0, 0x7f, 0x0, 0x1ff, 0x24fd, 0x77c, 0x100000000, 0x5, 0x7, 0x100000001, 0x0, 0xc01, 0x9, 0x8, 0x101, 0x4, 0x2, 0x3]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x80, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 796.011472] FAT-fs (loop2): invalid media value (0x00) [ 796.029863] FAT-fs (loop2): Can't find a valid FAT filesystem 11:30:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblc_expiration\x00\x9b\xc1R#\xfe\xd02:@\x88\x03\xebX\xb4vv^/]/\x01\x8f&\x1fk9\x9e\xb65\x8b\x1bO\xfa\xec<\x90\xb0f3\xe1\xd0\xec\xd9M\xfeA01\x16\fD\x86\x88\xf3\xd7\x96C\xa9\x954\xb0li\xbe\xabX\x12\xf2+A\xef9\x182\xbdW\x04\xdf\xd2jh}m\xf1\xde%\x1eA\x95]\xd2=\xdc\xf8e\xce\x94\xb9g9\x94\xc2G\x16#\xf5\xcd\x81\t\xb2:b\x19\x88\x92\x17\xd3\xc1\'\xb2\x1e:\xbe\x9b\xef\x13\xce\xf5D\'3', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:42 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:42 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 11:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r2, 0x10, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x6) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r16 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r17 = getpid() prlimit64(r17, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r19 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r20}}]}) sendmsg$unix(r4, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r5, r6, r2, r7, r8, r9, r10, r3, r11]}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x30, 0x1, 0x1, [r2, r13, r2, r14, r1, r15, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r20}}}], 0xd0, 0x20064044}, 0x0) wait4(r17, 0x0, 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r22 = socket$kcm(0x29, 0x2, 0x0) splice(r21, 0x0, r22, 0x0, 0x103fffffd, 0x0) ioctl$VIDIOC_S_AUDIO(r21, 0x40345622, &(0x7f0000000080)={0x100000001, "fd2216b7003b26de4b03f2b0b0aa18fae77a824c5060b68d154b3dddd72f3169", 0xe40cb7384d2560d4, 0x1}) ioctl$VIDIOC_G_STD(r21, 0x80085617, &(0x7f0000000040)) 11:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:42 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:42 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 11:30:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:43 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:43 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) [ 797.070115] FAT-fs (loop2): invalid media value (0x00) [ 797.103893] FAT-fs (loop2): Can't find a valid FAT filesystem [ 797.315851] hfs: gid requires an argument [ 797.320159] hfs: unable to parse mount options [ 798.813747] net_ratelimit: 20 callbacks suppressed [ 798.813755] protocol 88fb is buggy, dev hsr_slave_0 [ 798.824075] protocol 88fb is buggy, dev hsr_slave_1 [ 798.829183] protocol 88fb is buggy, dev hsr_slave_0 [ 798.834359] protocol 88fb is buggy, dev hsr_slave_1 [ 798.893728] protocol 88fb is buggy, dev hsr_slave_0 [ 798.898821] protocol 88fb is buggy, dev hsr_slave_1 11:30:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:45 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:45 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, r3, 0x0) 11:30:45 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x18}, 0x7, 0x0, 0xfe, 0x2, 0xcb91, 0x7}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:45 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:45 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) dup3(0xffffffffffffffff, r3, 0x0) 11:30:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:30:46 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 799.613687] protocol 88fb is buggy, dev hsr_slave_0 [ 799.618896] protocol 88fb is buggy, dev hsr_slave_1 [ 799.624071] protocol 88fb is buggy, dev hsr_slave_0 [ 799.629147] protocol 88fb is buggy, dev hsr_slave_1 11:30:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be93", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:48 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) dup3(0xffffffffffffffff, r3, 0x0) 11:30:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:30:48 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:48 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) 11:30:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:30:48 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) 11:30:48 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:48 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) dup3(0xffffffffffffffff, r3, 0x0) 11:30:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:48 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) socket(0x2, 0x4, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) [ 805.053755] net_ratelimit: 20 callbacks suppressed [ 805.053764] protocol 88fb is buggy, dev hsr_slave_0 [ 805.063944] protocol 88fb is buggy, dev hsr_slave_1 [ 805.069042] protocol 88fb is buggy, dev hsr_slave_0 [ 805.074144] protocol 88fb is buggy, dev hsr_slave_1 [ 805.133679] protocol 88fb is buggy, dev hsr_slave_0 [ 805.138778] protocol 88fb is buggy, dev hsr_slave_1 11:30:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be93", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:51 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:51 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, r3, 0x0) 11:30:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:51 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000000)) r2 = socket$kcm(0x29, 0x5, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0xf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[], 0xffffffc6) r5 = dup3(r3, r1, 0x0) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r7, 0x10, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r7}) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x6) r9 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r12, 0x6611) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r16, 0x6611) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r17 = getpid() prlimit64(r17, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0), &(0x7f00000007c0)=0x0, &(0x7f0000000640)) r19 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r20}}]}) r21 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r22 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r22, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r22, 0x10, 0x0) r23 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r22}) r25 = socket$inet6_tcp(0xa, 0x1, 0x0) r26 = eventfd(0x6) r27 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r27, 0x6611) r28 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r28, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) r30 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r30, 0x6611) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r35, 0x8912, 0x400200) r36 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r36, 0x6611) r37 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r38 = getpid() prlimit64(r38, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r40 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r41}}]}) sendmsg$unix(r24, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r25, r26, r22, r27, r28, r29, r30, r23, r31]}}, @rights={{0x14, 0x1, 0x1, [r32]}}, @rights={{0x30, 0x1, 0x1, [r22, r33, r22, r34, r21, r35, 0xffffffffffffffff, r36]}}, @rights={{0x14, 0x1, 0x1, [r37]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r38, r39, r41}}}], 0xd0, 0x20064044}, 0x0) r42 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r43 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r43, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r43, 0x10, 0x0) r44 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r43}) r46 = socket$inet6_tcp(0xa, 0x1, 0x0) r47 = eventfd(0x6) r48 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r48, 0x6611) r49 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r49, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r50, 0x8912, 0x400200) r51 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r51, 0x6611) r52 = socket$nl_route(0x10, 0x3, 0x0) r53 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r54, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r55, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r56, 0x8912, 0x400200) r57 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r57, 0x6611) r58 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r59 = getpid() prlimit64(r59, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r61 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r61, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r63}}]}) sendmsg$unix(r45, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r46, r47, r43, r48, r49, r50, r51, r44, r52]}}, @rights={{0x14, 0x1, 0x1, [r53]}}, @rights={{0x30, 0x1, 0x1, [r43, r54, r43, r55, r42, r56, 0xffffffffffffffff, r57]}}, @rights={{0x14, 0x1, 0x1, [r58]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r59, r60, r63}}}], 0xd0, 0x20064044}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r65 = socket$kcm(0x29, 0x2, 0x0) splice(r64, 0x0, r65, 0x0, 0x103fffffd, 0x0) r66 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r67 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r67, r66, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r69 = socket$kcm(0x29, 0x2, 0x0) splice(r68, 0x0, r69, 0x0, 0x103fffffd, 0x0) r70 = creat(&(0x7f00000001c0)='./file0\x00', 0x23) r71 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x40080, 0x0) r72 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x600000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r59, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)='\x00', 0xffffffffffffffff}, 0x30) r74 = getuid() r75 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r76 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r76, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r76, 0x10, 0x0) r77 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r76}) r79 = socket$inet6_tcp(0xa, 0x1, 0x0) r80 = eventfd(0x6) r81 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r81, 0x6611) r82 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r82, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r83, 0x8912, 0x400200) r84 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r84, 0x6611) r85 = socket$nl_route(0x10, 0x3, 0x0) r86 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r87, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r88, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r89, 0x8912, 0x400200) r90 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r90, 0x6611) r91 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r92 = getpid() prlimit64(r92, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r94 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r95}}]}) sendmsg$unix(r78, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r79, r80, r76, r81, r82, r83, r84, r77, r85]}}, @rights={{0x14, 0x1, 0x1, [r86]}}, @rights={{0x30, 0x1, 0x1, [r76, r87, r76, r88, r75, r89, 0xffffffffffffffff, r90]}}, @rights={{0x14, 0x1, 0x1, [r91]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r92, r93, r95}}}], 0xd0, 0x20064044}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r97 = socket$kcm(0x29, 0x2, 0x0) splice(r96, 0x0, r97, 0x0, 0x103fffffd, 0x0) r98 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/context\x00', 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r99, &(0x7f0000000340)=ANY=[], 0xffffffc6) pipe2(&(0x7f0000000940), 0x3000) r100 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20800, 0x0) r101 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r101, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) fcntl$getownex(r101, 0x10, 0x0) r102 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xf026, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x4, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r101}) r104 = socket$inet6_tcp(0xa, 0x1, 0x0) r105 = eventfd(0x6) r106 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r106, 0x6611) r107 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r107, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r108, 0x8912, 0x400200) r109 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r109, 0x6611) r110 = socket$nl_route(0x10, 0x3, 0x0) r111 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r112, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r113, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r114, 0x8912, 0x400200) r115 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r115, 0x6611) r116 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r117 = getpid() prlimit64(r117, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000007c0), &(0x7f0000000640)) r119 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r119, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r120}}]}) sendmsg$unix(r103, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0x31}, {&(0x7f0000000440)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [r104, r105, r101, r106, r107, r108, r109, r102, r110]}}, @rights={{0x14, 0x1, 0x1, [r111]}}, @rights={{0x30, 0x1, 0x1, [r101, r112, r101, r113, r100, r114, 0xffffffffffffffff, r115]}}, @rights={{0x14, 0x1, 0x1, [r116]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r117, r118, r120}}}], 0xd0, 0x20064044}, 0x0) sendmsg$unix(r8, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="aaf890760093fee9223e9a6782f8db1a15daf999841da1fb79a808438b3fa3274c9ae0252734355b85641b3e45d2c3103aa6455cb148f064cd013c7a5a00673041bd78bcb67465787ca2f9230eaa0f35218421456add06a25b24d8da26a738efc1de2d43fbde6aa760b31f4cfc4c8b5fab4892bee327da92b3ab5f63a957e6d6eb270b6708", 0x85}, {&(0x7f0000000300)="1263c5bec599ba48a53c18b883b6b60897f4bf26575ca6e3db8b072c7a9f39d1ec83237adb8911dd964f1ad0b51ceafa76", 0xffffffffffffff36}, {&(0x7f0000000a80)="4d721fd1ccd77348384298941046a7b16fe273937a9e09e9fd30235be19112a44c4bb3739300afdfa3024a945c1bc4e4c4ff93369f3e9b4f3849089ac8d48b48c07887206d89db7d53503a631a910e69b048158a08a865e8291bab8f054d11df1b64553fcf4d6f45676f7243676e6024ac56e8717abd0965f36094df4a90b780fbf21cf47cfe95335cc75a33bfc83d3643096962ed2159d726b57b0127552f591d71f19e2dfb6b4f6bf5b89f9c", 0xad}, {&(0x7f0000000500)="8dc71d9c7877387039412005843a40c28b381820f3dc56a429867cc88caa45b3352d3807075e95d1963c3d07d2914295510db70daca2c23fd9fb25a58a2965cc85a566492857e9f4a099ef3687ad3e76e444b1757fd060f53a07b0934069844e3aaa2da882269e01f0003482335b1dd1a50b7a887a7b", 0x76}], 0x4, &(0x7f0000000980)=[@cred={{0x0, 0x1, 0x2, {r59, r18, r20}}}, @rights={{0x0, 0x1, 0x1, [r11, r11, r64, 0xffffffffffffffff, r66, r69, r70, r2]}}, @rights={{0x0, 0x1, 0x1, [r71]}}, @rights={{0x1ed, 0x1, 0x1, [r72, r6]}}, @cred={{0x0, 0x1, 0x2, {r73, r74, r95}}}, @rights={{0x0, 0x1, 0x1, [r96, r98]}}, @rights, @cred={{0x0, 0x1, 0x2, {r62, r118}}}], 0xffffffffffffff72, 0x800}, 0x0) ptrace$setregs(0xffffffffffffffff, r17, 0x1000, &(0x7f0000000040)="9ffe80429ac3b946434eaca0720c14d80f428fbf5aa7281a2b7ed9430edd7e561426fb0c70b7d9ae948aba98a952937cd8c1424c3f0b5efc3e") ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r5, 0x0, 0x3, 0x4) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r121 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r121, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:51 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 11:30:51 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, r3, 0x0) 11:30:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20) 11:30:52 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20) [ 805.853703] protocol 88fb is buggy, dev hsr_slave_0 [ 805.858884] protocol 88fb is buggy, dev hsr_slave_1 [ 805.864430] protocol 88fb is buggy, dev hsr_slave_0 [ 805.869514] protocol 88fb is buggy, dev hsr_slave_1 [ 806.150406] hfs: gid requires an argument [ 806.164154] hfs: unable to parse mount options [ 806.384202] hfs: gid requires an argument [ 806.388485] hfs: unable to parse mount options 11:30:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be93", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:54 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20) 11:30:54 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:54 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) sendfile(r2, r3, &(0x7f0000000040), 0x3) r4 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x98902) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000100)={0xc0003, 0x0, [0x2, 0x0, 0x1ff, 0x4, 0x2a, 0x3, 0x6, 0x6]}) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:54 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) 11:30:55 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:55 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) 11:30:55 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 811.293777] net_ratelimit: 20 callbacks suppressed [ 811.293786] protocol 88fb is buggy, dev hsr_slave_0 [ 811.303907] protocol 88fb is buggy, dev hsr_slave_1 [ 811.308997] protocol 88fb is buggy, dev hsr_slave_0 [ 811.314090] protocol 88fb is buggy, dev hsr_slave_1 [ 811.373690] protocol 88fb is buggy, dev hsr_slave_0 [ 811.378777] protocol 88fb is buggy, dev hsr_slave_1 11:30:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939d", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) 11:30:57 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:57 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:57 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0xc9cd, 0x4, 0x5, 0x2, 0x3, 0x0, 0x28f, 0x38, 0x375, 0x2, 0x1, 0x20, 0x2, 0x380000000000000, 0x6, 0x5}, [{0x3, 0x8, 0x1, 0x4, 0x259, 0x9, 0x1000, 0x2}], "b13084f160656baae7ac77263fd41b510d0d3478f5607a57e46dce36586cb55dd0e876d7a83c2de6267dfedb0154c01807f791eb295fb409d45cdfd9bcd78026aedada5c65594fdded298c3556ea2bd07e", [[], [], [], [], [], [], [], [], [], []]}, 0xaa9) 11:30:58 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:58 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x37, &(0x7f0000000040)="a87f0a4518e4142b59a9ffeee43538914ab44b84e00032fb007aa2cf7d21c739ab32c5373668757225dd4e6ea5b7ca282a3ed68f35537d3024450b2a6054cc1b80c0f293e413e49504759d1b004ba8e25e99abb471758d497190d53e9e962f3080fe4417914b36c869c8d4ea87205f93f4055e87d62d792c324a0d002fc6e5e833377f5c1976966d30fd", 0x8a) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:30:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939d", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:58 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:58 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:58 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000080)) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) write$cgroup_int(r0, &(0x7f0000000000), 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r5, &(0x7f0000000340)=ANY=[], 0xffffffc6) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x1207c29aa9785701) 11:30:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939d", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:30:58 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:58 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 812.094859] protocol 88fb is buggy, dev hsr_slave_0 [ 812.101237] protocol 88fb is buggy, dev hsr_slave_1 [ 812.108650] protocol 88fb is buggy, dev hsr_slave_0 [ 812.113995] protocol 88fb is buggy, dev hsr_slave_1 11:30:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:30:58 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:58 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:58 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:58 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:58 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:30:59 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:30:59 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:01 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x1cb1b02908b87e41) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x2, 0x5, 0x7, 0x8434}, {0x0, 0xa65, 0x4000000000000000, 0x4}, {0x84, 0x100000000, 0x7, 0x3}, {0x7ff, 0x401, 0x7f}, {0xff00000000000000, 0x7fff, 0x7f, 0x4f}]}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:01 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:01 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:01 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:01 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:01 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 817.533766] net_ratelimit: 20 callbacks suppressed [ 817.538777] protocol 88fb is buggy, dev hsr_slave_0 [ 817.543890] protocol 88fb is buggy, dev hsr_slave_1 [ 817.549032] protocol 88fb is buggy, dev hsr_slave_0 [ 817.554157] protocol 88fb is buggy, dev hsr_slave_1 [ 817.613728] protocol 88fb is buggy, dev hsr_slave_0 [ 817.618860] protocol 88fb is buggy, dev hsr_slave_1 11:31:04 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:04 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x1ee) 11:31:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:04 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x7d1680, 0x0) 11:31:04 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={[], [], @remote}, 0x24, r1}) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 818.333699] protocol 88fb is buggy, dev hsr_slave_0 [ 818.338862] protocol 88fb is buggy, dev hsr_slave_1 [ 818.344053] protocol 88fb is buggy, dev hsr_slave_0 [ 818.349131] protocol 88fb is buggy, dev hsr_slave_1 11:31:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:07 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:07 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8007ffffffc, 0x12) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) 11:31:07 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:07 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x8000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x1ff, {{0xa, 0x4e23, 0x0, @local, 0x1}}, {{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x108) 11:31:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:07 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:07 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:07 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:07 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:07 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/qb\x82\x14<\xdaj\x00\x8bpv4/\x82s_mode\x00\xc4\xc6\x02\xfb\xe5\x06M\x9dP\xb2\xdcZS?J4\xb3\x97r\xe7\xf4:s\xaf\xa9\xf60\x98\x7f\xc8\xf3p\xf4\fj\xe3\x02\xa0\xd5_\xa7\xbe\x99\a\x96t\x9d&6\xf28k\x10{\xcdM\xc0\x97\xa8T\xd5\xd4\x85\xc6_\xdaY^\xa5S\xcb\xb6\xd0\xd3\xe0\xa8\x99a\xf0\xb6\xc5<\xe9\x0e\x02\xb2);\x05L\xcaOy\xe4)3\xfc%\'o\x9b\x1a\x96\xc6\xc0\x89\xe8\x19\xfa\xf4\xf3t\xf9\xd1\x00\"\xdf\xc6H.6\xafa\xd5\x94J\xe9\xd6\xd7z\xe9\x85E\xf5\xc4\x1cx ?\x90\xd7mZ\x7f\xa7\xa9\x03', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xffd, 0xffffffffffffffa3) 11:31:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:08 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r2 = syz_open_dev$mouse(&(0x7f0000000680)='/dev/input/mouse#\x00', 0x8cd1, 0x8000) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000006c0)='trusted.overlay.nlink\x00', &(0x7f0000000700)={'L+', 0x2}, 0x28, 0x2) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x300, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}]}]}, @TIPC_NLA_LINK={0x154, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6f7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x700}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x101}}}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x70b0}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x6000090}, 0x40000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbfe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x8000818) 11:31:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:08 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:08 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:08 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 823.783763] net_ratelimit: 20 callbacks suppressed [ 823.783777] protocol 88fb is buggy, dev hsr_slave_0 [ 823.793921] protocol 88fb is buggy, dev hsr_slave_1 [ 823.799097] protocol 88fb is buggy, dev hsr_slave_0 [ 823.804181] protocol 88fb is buggy, dev hsr_slave_1 [ 823.853765] protocol 88fb is buggy, dev hsr_slave_0 [ 823.858906] protocol 88fb is buggy, dev hsr_slave_1 11:31:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:10 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc\x19s\x02\x80\x00\x00\x00\x00\x00\x00pv\x16/vs\xd9\a\x00\x00\x00_envry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x400) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 824.573707] protocol 88fb is buggy, dev hsr_slave_0 [ 824.578825] protocol 88fb is buggy, dev hsr_slave_1 [ 824.584002] protocol 88fb is buggy, dev hsr_slave_0 [ 824.589107] protocol 88fb is buggy, dev hsr_slave_1 11:31:11 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:11 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000400)={"9f30f8217d34bd7997fe4e82a29394e297061094c94a611c00fb5131e3368e5d184217907acbfd7033176161e0a920b65df3bc1ada78a25f7f131a30d15e5ee7dcebeaea76f024da862ffdc2b99d14ead4c4cea3966780f218edddbe826931370ec138abe27cc7aeba66de8123c0264a2804422e05027a5f98b74ae0cce31806024fc2a746d432ceecbd148473d22e4a348ac0503307f957e378b6b849b13a7bb5a459f355f2b730555c05a9db8f2bc7c939c00ccef947ab37ad03771488db82cad02ed8f18f639e29f12dd6b23b8aea29d1c8b35281ce6b0332d5ebb838e3d97483aabefcf0f5f18b1bcaf4b5ba1201962656925dcb1a317f333dd2c2a684757bf1dc24c6aa72f00fa9c676252210fff9fc0356938919a2db6224dbd71238d779c428588911b02b46767e7c6bc3e807b5c188ef2600628af1aed652131b0bee30ec83d5178bc135ee5ed3b2034f8e92748fe8d260b5ef2ae5374c948bff52eab4ea8b9569b9987ce86ee2eb1cb748922c8d0356abcc4fffa4344e4b63807c187d9ac8b4c376d735e2aef4729a3278433e79e30661d337791f091b5e3da5eebccd8e2428771f292228e1f4ac862b095594f5a1c468200b5599a272034157951f181e84bcd6a9c96c00baefb8cc21c03a4760672ec5344fdf1d2b7e63f8351240c5a0860e34a473d40dea8eae7d07436904748b25ce35f8f733e67450af197c4b8efffc5bb397509892bb55fa47d8e663f72e4a25d21571b1ebfdf3f1979a94713eb1c4c856a5acd35fd7d5a13ab1617b93ac58d01b7f8a7be29699f28170d003ec15a031cf88b50dea0bf5df763a9bd5398fb8aefe48a8778008c37207407b2dc36db065071d2e862934baee281fe2eaf1c47e54dfcbd598773a9fc621aa1460d4431e7e21a83d831705952ff48337da0c3ab4a32c65d65649fddec6d0f91a542e286459f785aebea81dcbd5fb518fc3819b31bb90f8124210069f7715b8621817cda184402fcfc6bb772395c467a2be245b4d8abf500861234a9abb9be528c2890908ae02f7023b9d32b0f235277f46cb86f1ba152dfb574dc4a2d75fb782f90e5e68e11886664d54388f50dfdbe145844e0cca55fa43884596326982235ab03326063cb436b39ba218d3a52c2285be42066416492510af0534c38dd91e8bd6fe3d6b54c110701596ac8a4ead9371662942a8fdfdeaba344128ddb786fbb017c715b47e587138b821477fe99417407429c7c344ef21c009e94e10920061f65cae1a1d076690f71b0ef5b60b8a09b2c9215c32447f84332e32ed57a94a007267c68f0fcc2eed9bc4b51dafe2155f8b8ee417fbc40ee7b094f5f5b157d44e3c44ad0c309b752874fab0f2f1bc2e5e4a8ea61b234c50902f73fa0ac3861641801f58ec0f10009786eb1017bd34ee1428663c6c106a8139712245b890ed9724e34d"}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:11 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @default, @bpq0='bpq0\x00', 0x10001, 'syz1\x00', @default, 0x10001, 0x4, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11:31:11 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:14 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:14 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xffffffc6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000040)) 11:31:14 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:14 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) 11:31:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 828.069502] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 828.076922] FAT-fs (loop2): Filesystem has been set read-only [ 830.013762] net_ratelimit: 20 callbacks suppressed [ 830.018750] protocol 88fb is buggy, dev hsr_slave_0 [ 830.023879] protocol 88fb is buggy, dev hsr_slave_1 [ 830.029011] protocol 88fb is buggy, dev hsr_slave_0 [ 830.034187] protocol 88fb is buggy, dev hsr_slave_1 [ 830.093756] protocol 88fb is buggy, dev hsr_slave_0 [ 830.098858] protocol 88fb is buggy, dev hsr_slave_1 11:31:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:17 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) 11:31:17 executing program 4: msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0xd, 0x0, 0x9}, &(0x7f0000000340)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r2, 0x0, 0x12, &(0x7f0000000240)='/dev/input/event#\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r4, 0x4) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7f) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 11:31:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:17 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:17 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xfd) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x6, r2}) [ 830.813705] protocol 88fb is buggy, dev hsr_slave_0 [ 830.818831] protocol 88fb is buggy, dev hsr_slave_1 [ 830.824041] protocol 88fb is buggy, dev hsr_slave_0 [ 830.829126] protocol 88fb is buggy, dev hsr_slave_1 11:31:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:17 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 831.164384] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 831.182072] FAT-fs (loop2): Filesystem has been set read-only 11:31:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:20 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:20 executing program 0: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 11:31:20 executing program 4: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x0, 0x80000000, 0x0, 0x9e, 0xfffffffffffffffa, 0x4}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x81}, 0x4) 11:31:20 executing program 0: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:20 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xa007ffffffd, 0xffffffffffffffb0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x8, 0x1000, [{0x8001, 0x0, 0x9cc}, {0x39c}, {0x5, 0x0, 0x401}, {0xfffffffffffffff9, 0x0, 0x9}, {0x400, 0x0, 0x6}, {0x5, 0x0, 0x100000000}, {0x7, 0x0, 0x4}, {0x75c, 0x0, 0x3}]}) 11:31:20 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:20 executing program 5: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000007c0), 0xa3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 11:31:20 executing program 0: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:20 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 836.253735] net_ratelimit: 20 callbacks suppressed [ 836.253742] protocol 88fb is buggy, dev hsr_slave_0 [ 836.263847] protocol 88fb is buggy, dev hsr_slave_1 [ 836.268959] protocol 88fb is buggy, dev hsr_slave_0 [ 836.274069] protocol 88fb is buggy, dev hsr_slave_1 [ 836.333707] protocol 88fb is buggy, dev hsr_slave_0 [ 836.338845] protocol 88fb is buggy, dev hsr_slave_1 11:31:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:23 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:23 executing program 5: pipe2(0x0, 0x4000) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x0, 0x80800) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="ce03110075000100ff901efc67195c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d045871d6fe30032b46ec4b52a4245f456142304a7821d1c6c8689f4ac12c50cc25534655ee7b237c7a5ba6dcc956757bf80f7146faaefba7f62928a83b54c10bd50c4ea9709367ee58afd37f6f9a0a92decda7d3e5dabe32ba34964ae3278f4c1c443f92eb36c74609cc828c5e2", 0xad, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x6, 0x6}, 0xa}, 0x10) keyctl$read(0xb, 0x0, &(0x7f00000004c0)=""/8, 0x8) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x9200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)=[0x6]) 11:31:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:23 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x103fffffd, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:23 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 837.053683] protocol 88fb is buggy, dev hsr_slave_0 [ 837.058855] protocol 88fb is buggy, dev hsr_slave_1 [ 837.064055] protocol 88fb is buggy, dev hsr_slave_0 [ 837.069150] protocol 88fb is buggy, dev hsr_slave_1 11:31:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:23 executing program 5: syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000e1fc5ef71a11ea7c5ef2462214e72339d2287ab0ea6b4e953772efda351b9e31c9d46e5da3f4c04e2222df0f124b779587222400729c26df96e87d77a1258f5ab1cf3442094480f9f5833a0c73e7dcaab017e955d1f29158b452518d536ab3430189d3cbbdc3d9bab578bf01dbff24854c979a40c87496bd99b5e9e8e38f", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r8}, 0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x84) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x7b453da) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8, 0x0, 0xfffffffffffffff9}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:31:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x500000000000000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 837.278198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:31:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:24 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:24 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) close(r2) 11:31:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:24 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:31:24 executing program 5: syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000e1fc5ef71a11ea7c5ef2462214e72339d2287ab0ea6b4e953772efda351b9e31c9d46e5da3f4c04e2222df0f124b779587222400729c26df96e87d77a1258f5ab1cf3442094480f9f5833a0c73e7dcaab017e955d1f29158b452518d536ab3430189d3cbbdc3d9bab578bf01dbff24854c979a40c87496bd99b5e9e8e38f", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r8}, 0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x84) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x7b453da) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8, 0x0, 0xfffffffffffffff9}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:31:24 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:24 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001300)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 11:31:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = accept(r0, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80) sendto$isdn(r2, &(0x7f0000000100)={0xdc35227, 0x3ff, "91db3449500a2257c6f4028e966be638fe134dd89af528bf64f68922e9f7191332f2f487ecb057e1b88ee97effa96e0df4d8c88025c1f27123cc8a24d2"}, 0x45, 0x8000, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x8007ffffffc, 0x12) 11:31:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 839.047348] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 839.054592] FAT-fs (loop2): Filesystem has been set read-only 11:31:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:27 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:27 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x5, 0x3, 0x1000}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x103fffffd, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000300)="5e3d2917da0d5a43099323fa4e09a83cb438764fed5ffa7e54bba49ec4142440f2bfd1ed211741b9b057c35e00ccd77eaea2877c8dee51c9c57ad634d27c6b39f49b4fb9c24ec70c12fd03797bde1e7074afccccbe3182d66689e170e7a434451cc57e4d7c4c4b120bee85056a1b145cabf7ccb3d738e2060f30293925a1f94d5fa8614a81c0249c99b266326dd561ca372d41e6f848c1d3d371389d49d38c4b2e8c81f345c0a622e1e1c2562f368689a78add9170e68dd219") ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x7, 0x3f, 0x100}) socket$rxrpc(0x21, 0x2, 0xa) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000400)=0x7, &(0x7f0000000440)=0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v2={0x2000000, [{0x8, 0x2}, {0x4, 0x6}]}, 0x14, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8007ffffffc, 0x12) socket(0x8, 0x2, 0x60000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x3, 0xe, 0x2}, &(0x7f0000000140)=0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x81}}, 0x10) 11:31:27 executing program 5: syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000e1fc5ef71a11ea7c5ef2462214e72339d2287ab0ea6b4e953772efda351b9e31c9d46e5da3f4c04e2222df0f124b779587222400729c26df96e87d77a1258f5ab1cf3442094480f9f5833a0c73e7dcaab017e955d1f29158b452518d536ab3430189d3cbbdc3d9bab578bf01dbff24854c979a40c87496bd99b5e9e8e38f", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r8}, 0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x84) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x7b453da) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8, 0x0, 0xfffffffffffffff9}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:31:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:27 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:27 executing program 5: msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0xd, 0x0, 0x9}, &(0x7f0000000340)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r2, 0x0, 0x12, &(0x7f0000000240)='/dev/input/event#\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r4, 0x4) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7f) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 11:31:27 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 842.493847] net_ratelimit: 20 callbacks suppressed [ 842.498985] protocol 88fb is buggy, dev hsr_slave_0 [ 842.504123] protocol 88fb is buggy, dev hsr_slave_1 [ 842.509279] protocol 88fb is buggy, dev hsr_slave_0 [ 842.514372] protocol 88fb is buggy, dev hsr_slave_1 [ 842.573705] protocol 88fb is buggy, dev hsr_slave_0 [ 842.579012] protocol 88fb is buggy, dev hsr_slave_1 [ 843.293707] protocol 88fb is buggy, dev hsr_slave_0 [ 843.298875] protocol 88fb is buggy, dev hsr_slave_1 [ 843.304037] protocol 88fb is buggy, dev hsr_slave_0 [ 843.309089] protocol 88fb is buggy, dev hsr_slave_1 11:31:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:30 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x109000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080)=""/229) 11:31:30 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) dup3(0xffffffffffffffff, r3, 0x0) 11:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0xffffffc6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syz_tun\x00', 0x20}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xffffffff, 0x12) 11:31:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000180)={0x5, 0x1, 0x3, 0x3b29, 0x100000000008}) 11:31:30 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 844.321319] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 844.328598] FAT-fs (loop2): Filesystem has been set read-only 11:31:30 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:30 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:31 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:31 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x41002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x8, 0x1, 0x8, 0x81, 0xfffffffffffffffe, 0x9, 0x3, r5}, &(0x7f0000000200)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xb) r6 = msgget$private(0x0, 0x10) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000080)=""/28) write$binfmt_misc(r3, &(0x7f00000000c0)={'syz1', "916dd145dfaff78cbfda9d471fd1bf8f441d58a506fa"}, 0x1a) [ 844.954737] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 844.962117] FAT-fs (loop2): Filesystem has been set read-only 11:31:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:33 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:33 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) 11:31:33 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000180)={0x5, 0x1, 0x3, 0x3b29, 0x100000000008}) 11:31:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:33 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) 11:31:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:33 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) 11:31:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:33 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) [ 848.733820] net_ratelimit: 20 callbacks suppressed [ 848.738942] protocol 88fb is buggy, dev hsr_slave_0 [ 848.744120] protocol 88fb is buggy, dev hsr_slave_1 [ 848.749272] protocol 88fb is buggy, dev hsr_slave_0 [ 848.754379] protocol 88fb is buggy, dev hsr_slave_1 [ 848.813712] protocol 88fb is buggy, dev hsr_slave_0 [ 848.818802] protocol 88fb is buggy, dev hsr_slave_1 [ 849.533724] protocol 88fb is buggy, dev hsr_slave_0 [ 849.538844] protocol 88fb is buggy, dev hsr_slave_1 [ 849.544075] protocol 88fb is buggy, dev hsr_slave_0 [ 849.549140] protocol 88fb is buggy, dev hsr_slave_1 11:31:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:36 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:36 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) 11:31:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:36 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000180)={0x5, 0x1, 0x3, 0x3b29, 0x100000000008}) 11:31:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) 11:31:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:36 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:36 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) 11:31:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) 11:31:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:37 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:37 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:37 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 11:31:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:39 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:39 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) 11:31:39 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x10) 11:31:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:39 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:39 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) 11:31:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) 11:31:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:40 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) 11:31:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) 11:31:40 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x10) [ 854.973782] net_ratelimit: 20 callbacks suppressed [ 854.973796] protocol 88fb is buggy, dev hsr_slave_0 [ 854.983971] protocol 88fb is buggy, dev hsr_slave_1 [ 854.989310] protocol 88fb is buggy, dev hsr_slave_0 [ 854.994415] protocol 88fb is buggy, dev hsr_slave_1 [ 855.053690] protocol 88fb is buggy, dev hsr_slave_0 [ 855.059031] protocol 88fb is buggy, dev hsr_slave_1 [ 855.773706] protocol 88fb is buggy, dev hsr_slave_0 [ 855.778818] protocol 88fb is buggy, dev hsr_slave_1 [ 855.783990] protocol 88fb is buggy, dev hsr_slave_0 [ 855.789055] protocol 88fb is buggy, dev hsr_slave_1 11:31:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) 11:31:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:42 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:42 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x10) 11:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:43 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:43 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) 11:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:43 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:43 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:31:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x103fffffd, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x10) 11:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:43 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:43 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 857.509675] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 857.524220] FAT-fs (loop2): Filesystem has been set read-only 11:31:43 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:44 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:31:44 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:46 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:46 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111, 0x8}}, 0x20) 11:31:46 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x10) 11:31:46 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) pipe(&(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x10) 11:31:46 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:46 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:46 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:46 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8007ffffffc, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x10) 11:31:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 860.518249] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 860.552330] FAT-fs (loop2): Filesystem has been set read-only [ 861.223719] net_ratelimit: 20 callbacks suppressed [ 861.223726] protocol 88fb is buggy, dev hsr_slave_0 [ 861.233817] protocol 88fb is buggy, dev hsr_slave_1 [ 861.238955] protocol 88fb is buggy, dev hsr_slave_0 [ 861.244042] protocol 88fb is buggy, dev hsr_slave_1 [ 861.293710] protocol 88fb is buggy, dev hsr_slave_0 [ 861.298876] protocol 88fb is buggy, dev hsr_slave_1 [ 862.013703] protocol 88fb is buggy, dev hsr_slave_0 [ 862.018794] protocol 88fb is buggy, dev hsr_slave_1 [ 862.023941] protocol 88fb is buggy, dev hsr_slave_0 [ 862.029096] protocol 88fb is buggy, dev hsr_slave_1 11:31:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:49 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) 11:31:49 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/s}s/net/ipv4V^\xccT\xe3\xc7\bi\xec\x8ba\xb7\x18\x01\xd1C/vs/nat_icmp_send\x00P\x02f_a\xfbp\xd5\xea\xf6\x86\xdb\xdb\x1d\x1ef\xed\xc8T\xa0K_\x17\xab3\xe3\x0f\xe7\xed\x1ab\xaa\xdb\xd3GdfR\xdf\xef\xfd\x14\x91\xa2\'\xc0\x05\xb4]\x10\xd69W\xa8\xcbk\t&\x8dp\xdd\x7f3~\xa1H\xd4\xffatT\x8d\xc5Zo\xa9f\xb5\xab\x14\xc2\x9f\xec3R1dNT!\xce0\xd3D\xd3\x87-[\xd2mCHf\x19\xff\x8b\x80\xa6O\xb6\xe1H~\xc4BW\x04Pn\xca^m\xd0\xc7\xb2\xf3V\x89\f\xb1E\xba\xe2|z\xb4CB.\xd7\xae\xb2$\x82e\x17\xab\xcc\xdd5\x89)\x92\xc2\xce\xad\x9f\x17\xe9\x1d\xd6\x1b\xc6L\xe0\xbc\x87!\x14\xa3\xc5I\xf1', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:49 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:49 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:49 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:49 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:49 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:50 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:50 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:50 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 863.941320] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 863.959590] FAT-fs (loop2): Filesystem has been set read-only 11:31:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:52 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x4}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:52 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:53 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:53 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 867.463750] net_ratelimit: 20 callbacks suppressed [ 867.463759] protocol 88fb is buggy, dev hsr_slave_0 [ 867.474009] protocol 88fb is buggy, dev hsr_slave_1 [ 867.479102] protocol 88fb is buggy, dev hsr_slave_0 [ 867.484194] protocol 88fb is buggy, dev hsr_slave_1 [ 867.533714] protocol 88fb is buggy, dev hsr_slave_0 [ 867.538844] protocol 88fb is buggy, dev hsr_slave_1 [ 868.253721] protocol 88fb is buggy, dev hsr_slave_0 [ 868.258860] protocol 88fb is buggy, dev hsr_slave_1 [ 868.264134] protocol 88fb is buggy, dev hsr_slave_0 [ 868.269239] protocol 88fb is buggy, dev hsr_slave_1 11:31:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:55 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x0, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:55 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r6, 0x400, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = dup3(0xffffffffffffffff, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000700)=0xf347f067d9e2a5b1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000007c0)=0x2, 0xa3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x5}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r9, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 869.478907] FAULT_INJECTION: forcing a failure. [ 869.478907] name failslab, interval 1, probability 0, space 0, times 0 [ 869.493094] CPU: 1 PID: 6793 Comm: syz-executor.4 Not tainted 4.19.72 #0 [ 869.499974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.509342] Call Trace: [ 869.511954] dump_stack+0x172/0x1f0 [ 869.515639] should_fail.cold+0xa/0x1b [ 869.519675] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 869.524808] ? lock_downgrade+0x810/0x810 [ 869.528968] __should_failslab+0x121/0x190 [ 869.533218] should_failslab+0x9/0x14 [ 869.537017] kmem_cache_alloc_trace+0x2cc/0x760 [ 869.541683] ? __lockdep_init_map+0x10c/0x5b0 [ 869.546280] ? loop_info64_to_compat+0x6d0/0x6d0 [ 869.551032] __kthread_create_on_node+0xf2/0x460 [ 869.555777] ? lock_acquire+0x16f/0x3f0 [ 869.559746] ? __kthread_parkme+0x1b0/0x1b0 [ 869.564065] ? lo_ioctl+0x1c4/0x20e0 [ 869.567768] ? lock_downgrade+0x810/0x810 [ 869.571913] ? mutex_trylock+0x1e0/0x1e0 [ 869.575967] ? loop_info64_to_compat+0x6d0/0x6d0 [ 869.580717] kthread_create_on_node+0xbb/0xf0 [ 869.585203] ? __kthread_create_on_node+0x460/0x460 [ 869.590214] ? __lockdep_init_map+0x10c/0x5b0 [ 869.594712] ? __lockdep_init_map+0x10c/0x5b0 [ 869.599237] lo_ioctl+0xaf2/0x20e0 [ 869.602771] ? lo_rw_aio+0x1470/0x1470 [ 869.606756] blkdev_ioctl+0xc38/0x1ab6 [ 869.610634] ? blkpg_ioctl+0xa90/0xa90 [ 869.614519] ? __fget+0x340/0x540 [ 869.618000] block_ioctl+0xee/0x130 [ 869.621614] ? blkdev_fallocate+0x410/0x410 [ 869.625927] do_vfs_ioctl+0xd5f/0x1380 [ 869.629806] ? selinux_file_ioctl+0x46f/0x5e0 [ 869.634293] ? selinux_file_ioctl+0x125/0x5e0 [ 869.638781] ? ioctl_preallocate+0x210/0x210 [ 869.643264] ? selinux_file_mprotect+0x620/0x620 [ 869.648017] ? iterate_fd+0x360/0x360 [ 869.651827] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 869.657354] ? fput+0x128/0x1a0 [ 869.660639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 869.666166] ? security_file_ioctl+0x8d/0xc0 [ 869.670570] ksys_ioctl+0xab/0xd0 [ 869.674020] __x64_sys_ioctl+0x73/0xb0 [ 869.677901] do_syscall_64+0xfd/0x620 [ 869.681710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.686890] RIP: 0033:0x4598e9 [ 869.690074] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 869.708965] RSP: 002b:00007fa69133ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.716665] RAX: ffffffffffffffda RBX: 00007fa69133ac90 RCX: 00000000004598e9 [ 869.723932] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000003 [ 869.731193] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 869.738458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa69133b6d4 [ 869.745717] R13: 00000000004c2fb9 R14: 00000000004d6738 R15: 0000000000000005 11:31:56 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x0, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:56 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:31:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x0, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x2, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:56 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r4, 0x400, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x0, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 870.536538] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 870.553044] FAT-fs (loop2): Filesystem has been set read-only 11:31:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 11:31:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x0, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x125d, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:59 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:59 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) io_cancel(0x0, 0x0, 0x0) 11:31:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r2, r3) 11:31:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x0, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x125e, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:31:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:31:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:31:59 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 873.438945] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 873.467860] FAT-fs (loop2): Filesystem has been set read-only [ 873.693808] net_ratelimit: 20 callbacks suppressed [ 873.693817] protocol 88fb is buggy, dev hsr_slave_0 [ 873.703954] protocol 88fb is buggy, dev hsr_slave_1 [ 873.709031] protocol 88fb is buggy, dev hsr_slave_0 [ 873.714090] protocol 88fb is buggy, dev hsr_slave_1 [ 873.853727] protocol 88fb is buggy, dev hsr_slave_0 [ 873.858823] protocol 88fb is buggy, dev hsr_slave_1 [ 874.493729] protocol 88fb is buggy, dev hsr_slave_0 [ 874.498822] protocol 88fb is buggy, dev hsr_slave_1 [ 874.504028] protocol 88fb is buggy, dev hsr_slave_0 [ 874.509080] protocol 88fb is buggy, dev hsr_slave_1 11:32:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 11:32:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x125f, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r2, r3) 11:32:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 11:32:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:02 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1260, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) [ 876.199974] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 876.211178] FAT-fs (loop2): Filesystem has been set read-only 11:32:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r2, r3) 11:32:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 11:32:02 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 876.596957] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 876.628820] FAT-fs (loop2): Filesystem has been set read-only 11:32:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 11:32:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1261, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r2, r3) 11:32:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 11:32:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:05 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 11:32:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1262, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) dup2(r2, 0xffffffffffffffff) [ 879.306176] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 879.313343] FAT-fs (loop2): Filesystem has been set read-only 11:32:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x10) 11:32:05 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 879.650525] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 879.671413] FAT-fs (loop2): Filesystem has been set read-only [ 879.933741] net_ratelimit: 20 callbacks suppressed [ 879.938832] protocol 88fb is buggy, dev hsr_slave_0 [ 879.943995] protocol 88fb is buggy, dev hsr_slave_1 [ 879.949148] protocol 88fb is buggy, dev hsr_slave_0 [ 879.954305] protocol 88fb is buggy, dev hsr_slave_1 [ 880.093706] protocol 88fb is buggy, dev hsr_slave_0 [ 880.098839] protocol 88fb is buggy, dev hsr_slave_1 [ 880.733717] protocol 88fb is buggy, dev hsr_slave_0 [ 880.739124] protocol 88fb is buggy, dev hsr_slave_1 [ 880.744429] protocol 88fb is buggy, dev hsr_slave_0 [ 880.749605] protocol 88fb is buggy, dev hsr_slave_1 11:32:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 11:32:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) dup2(r2, 0xffffffffffffffff) 11:32:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1263, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x10) 11:32:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:08 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x10) 11:32:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1264, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x48000028, r1, 0x0) dup2(r2, 0xffffffffffffffff) 11:32:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x10) 11:32:08 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 11:32:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1265, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r1, r2) 11:32:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x10) 11:32:11 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x7, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x10) 11:32:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1267, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r1, r2) 11:32:12 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r1, r2) 11:32:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 886.173731] net_ratelimit: 20 callbacks suppressed [ 886.173741] protocol 88fb is buggy, dev hsr_slave_0 [ 886.183967] protocol 88fb is buggy, dev hsr_slave_1 [ 886.189063] protocol 88fb is buggy, dev hsr_slave_0 [ 886.194274] protocol 88fb is buggy, dev hsr_slave_1 [ 886.333708] protocol 88fb is buggy, dev hsr_slave_0 [ 886.338916] protocol 88fb is buggy, dev hsr_slave_1 [ 886.973714] protocol 88fb is buggy, dev hsr_slave_0 [ 886.978801] protocol 88fb is buggy, dev hsr_slave_1 [ 886.983940] protocol 88fb is buggy, dev hsr_slave_0 [ 886.988975] protocol 88fb is buggy, dev hsr_slave_1 11:32:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 11:32:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1268, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 11:32:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0xd, 0x48000028, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(0xffffffffffffffff, r2) 11:32:14 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:14 executing program 0: socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) listen(0xffffffffffffffff, 0x4) setuid(0x0) wait4(0x0, &(0x7f00000000c0), 0x6000000a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x114) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000fc0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002480)={{{@in6=@remote, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002580)=0xe8) getpeername$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002600)=0x14) getsockname(r3, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002980)={'ip6gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000002b40)={@loopback}, &(0x7f0000002b80)=0x14) getpeername$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002fc0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000032c0)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003400)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000003600)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000038c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0x0) getpeername$packet(r1, &(0x7f0000003a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003a40)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000004200)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004240)={'team0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004280)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in=@initdev}}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000045c0), 0x800) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x24000000) sendto$inet(r3, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3dd) setsockopt$sock_int(r3, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 11:32:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0xd, 0x48000028, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(0xffffffffffffffff, r2) 11:32:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1269, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0xd, 0x48000028, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(0xffffffffffffffff, r2) 11:32:15 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 11:32:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1274, r1) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0xd, 0x48000028, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r1, r2) 11:32:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) 11:32:17 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) 11:32:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:32:18 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000006c0)=0x800000078, 0x7211275ea55e100f) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) fcntl$setlease(r5, 0x400, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000e1000000000800000000000000037acadb81c596a3f63be2862b15fb7ec9f4cddbf4e75ffff3a70e8e93745b309e1d4667834f1c090000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x1, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 892.413723] net_ratelimit: 14 callbacks suppressed [ 892.413731] protocol 88fb is buggy, dev hsr_slave_0 [ 892.423846] protocol 88fb is buggy, dev hsr_slave_1 [ 892.428950] protocol 88fb is buggy, dev hsr_slave_0 [ 892.434079] protocol 88fb is buggy, dev hsr_slave_1 11:32:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0xd, 0x48000028, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r1, r2) 11:32:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={[{@session={'session'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:32:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESHEX=r4, @ANYBLOB="97991e84ab78f2492e0a50dd8ad8cbd3812189ad66e28ed5f485652272aeec1e9001f21895ed9b6bafb96f06a0d38919e4962b877912a7820e62da3b27b036215f4fb4fac913825d55967c5b74d0effbf33a5fd6637ae2d9fd5e698c524802ad61cc2864c00c4f0300d80f1890e078a69d256f014dc82db658e938eeb2617b2125d9aafc6a487df7fbe3c05aa554eee2", @ANYPTR, @ANYRESDEC], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT]]], 0xfffffefc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000002440)='./file0\x00', 0x0) [ 894.493719] protocol 88fb is buggy, dev hsr_slave_0 [ 894.498894] protocol 88fb is buggy, dev hsr_slave_1 [ 894.504054] protocol 88fb is buggy, dev hsr_slave_0 [ 894.509117] protocol 88fb is buggy, dev hsr_slave_1 11:32:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x2b5}, {0x0, 0xffffff05}, {0x0, 0xfffffffffffffe9a}, {&(0x7f0000000180)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf8eebb1fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571feffffffffffffffa64adc47d97fe76d5f4c535104b305732295b47c6e954a54eb8457dc083b569c88915a3730fe1a4b3191b91b18ee6e53fd1311ab0334c7c05a3a016314664c9349925917413e8039d8be939df2", 0xb3}], 0x10000000000002fa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 896.573751] protocol 88fb is buggy, dev hsr_slave_0 [ 896.578897] protocol 88fb is buggy, dev hsr_slave_1 [ 898.653722] net_ratelimit: 2 callbacks suppressed [ 898.653732] protocol 88fb is buggy, dev hsr_slave_0 [ 898.663724] protocol 88fb is buggy, dev hsr_slave_1 [ 898.668870] protocol 88fb is buggy, dev hsr_slave_0 [ 898.673949] protocol 88fb is buggy, dev hsr_slave_1 [ 900.733797] protocol 88fb is buggy, dev hsr_slave_0 [ 900.738927] protocol 88fb is buggy, dev hsr_slave_1 [ 900.744120] protocol 88fb is buggy, dev hsr_slave_0 [ 900.749187] protocol 88fb is buggy, dev hsr_slave_1 [ 902.813723] protocol 88fb is buggy, dev hsr_slave_0 [ 902.818860] protocol 88fb is buggy, dev hsr_slave_1 [ 904.893753] net_ratelimit: 2 callbacks suppressed [ 904.893762] protocol 88fb is buggy, dev hsr_slave_0 [ 904.903761] protocol 88fb is buggy, dev hsr_slave_1 [ 904.908889] protocol 88fb is buggy, dev hsr_slave_0 [ 904.913977] protocol 88fb is buggy, dev hsr_slave_1 [ 906.973721] protocol 88fb is buggy, dev hsr_slave_0 [ 906.978846] protocol 88fb is buggy, dev hsr_slave_1 [ 906.984017] protocol 88fb is buggy, dev hsr_slave_0 [ 906.989080] protocol 88fb is buggy, dev hsr_slave_1 [ 909.053749] protocol 88fb is buggy, dev hsr_slave_0 [ 909.058878] protocol 88fb is buggy, dev hsr_slave_1 [ 911.133720] net_ratelimit: 2 callbacks suppressed [ 911.133729] protocol 88fb is buggy, dev hsr_slave_0 [ 911.143814] protocol 88fb is buggy, dev hsr_slave_1 [ 911.148932] protocol 88fb is buggy, dev hsr_slave_0 [ 911.154011] protocol 88fb is buggy, dev hsr_slave_1 [ 913.213782] protocol 88fb is buggy, dev hsr_slave_0 [ 913.218925] protocol 88fb is buggy, dev hsr_slave_1 [ 913.224119] protocol 88fb is buggy, dev hsr_slave_0 [ 913.229190] protocol 88fb is buggy, dev hsr_slave_1 [ 915.293775] protocol 88fb is buggy, dev hsr_slave_0 [ 915.299183] protocol 88fb is buggy, dev hsr_slave_1 [ 917.373803] net_ratelimit: 2 callbacks suppressed [ 917.373813] protocol 88fb is buggy, dev hsr_slave_0 [ 917.383973] protocol 88fb is buggy, dev hsr_slave_1 [ 917.389203] protocol 88fb is buggy, dev hsr_slave_0 [ 917.394302] protocol 88fb is buggy, dev hsr_slave_1 [ 919.453722] protocol 88fb is buggy, dev hsr_slave_0 [ 919.458868] protocol 88fb is buggy, dev hsr_slave_1 [ 919.464022] protocol 88fb is buggy, dev hsr_slave_0 [ 919.469075] protocol 88fb is buggy, dev hsr_slave_1 [ 921.533752] protocol 88fb is buggy, dev hsr_slave_0 [ 921.538871] protocol 88fb is buggy, dev hsr_slave_1 [ 923.613734] net_ratelimit: 2 callbacks suppressed [ 923.613743] protocol 88fb is buggy, dev hsr_slave_0 [ 923.623741] protocol 88fb is buggy, dev hsr_slave_1 [ 923.628864] protocol 88fb is buggy, dev hsr_slave_0 [ 923.633950] protocol 88fb is buggy, dev hsr_slave_1 [ 925.693791] protocol 88fb is buggy, dev hsr_slave_0 [ 925.698906] protocol 88fb is buggy, dev hsr_slave_1 [ 925.704065] protocol 88fb is buggy, dev hsr_slave_0 [ 925.709134] protocol 88fb is buggy, dev hsr_slave_1 [ 927.773723] protocol 88fb is buggy, dev hsr_slave_0 [ 927.778855] protocol 88fb is buggy, dev hsr_slave_1 [ 929.853751] net_ratelimit: 2 callbacks suppressed [ 929.853760] protocol 88fb is buggy, dev hsr_slave_0 [ 929.863867] protocol 88fb is buggy, dev hsr_slave_1 [ 929.868988] protocol 88fb is buggy, dev hsr_slave_0 [ 929.874075] protocol 88fb is buggy, dev hsr_slave_1 [ 931.933742] protocol 88fb is buggy, dev hsr_slave_0 [ 931.938858] protocol 88fb is buggy, dev hsr_slave_1 [ 931.944022] protocol 88fb is buggy, dev hsr_slave_0 [ 931.949078] protocol 88fb is buggy, dev hsr_slave_1 [ 934.013760] protocol 88fb is buggy, dev hsr_slave_0 [ 934.018883] protocol 88fb is buggy, dev hsr_slave_1 [ 936.093725] net_ratelimit: 2 callbacks suppressed [ 936.093735] protocol 88fb is buggy, dev hsr_slave_0 [ 936.103729] protocol 88fb is buggy, dev hsr_slave_1 [ 936.108936] protocol 88fb is buggy, dev hsr_slave_0 [ 936.114719] protocol 88fb is buggy, dev hsr_slave_1 [ 938.173747] protocol 88fb is buggy, dev hsr_slave_0 [ 938.178865] protocol 88fb is buggy, dev hsr_slave_1 [ 938.184020] protocol 88fb is buggy, dev hsr_slave_0 [ 938.189078] protocol 88fb is buggy, dev hsr_slave_1 [ 940.253725] protocol 88fb is buggy, dev hsr_slave_0 [ 940.258936] protocol 88fb is buggy, dev hsr_slave_1 [ 995.423594] rcu: INFO: rcu_preempt self-detected stall on CPU [ 995.429837] rcu: 1-...!: (10548 ticks this GP) idle=4f2/1/0x4000000000000002 softirq=122466/122468 fqs=2543 [ 995.440261] rcu: (t=10501 jiffies g=121325 q=1089) [ 995.445376] rcu: rcu_preempt kthread starved for 5384 jiffies! g121325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 995.456015] rcu: RCU grace-period kthread stack dump: [ 995.461186] rcu_preempt I29008 10 2 0x80000000 [ 995.466813] Call Trace: [ 995.469404] __schedule+0x866/0x1dc0 [ 995.473111] ? pci_mmcfg_check_reserved+0x170/0x170 [ 995.478114] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 995.483215] ? lockdep_hardirqs_on+0x415/0x5d0 [ 995.487789] ? trace_hardirqs_on+0x67/0x220 [ 995.492106] schedule+0x92/0x1c0 [ 995.495460] schedule_timeout+0x4db/0xfc0 [ 995.499600] ? usleep_range+0x170/0x170 [ 995.503561] ? trace_hardirqs_on+0x67/0x220 [ 995.507872] ? kasan_check_read+0x11/0x20 [ 995.512087] ? __next_timer_interrupt+0x1a0/0x1a0 [ 995.516922] ? prepare_to_swait_exclusive+0x120/0x120 [ 995.522103] rcu_gp_kthread+0xd5c/0x2190 [ 995.526172] ? rcu_blocking_is_gp+0x90/0x90 [ 995.530484] ? trace_hardirqs_on+0x67/0x220 [ 995.534795] ? kasan_check_read+0x11/0x20 [ 995.538942] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 995.544046] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 995.549573] ? __kthread_parkme+0xfb/0x1b0 [ 995.553799] kthread+0x354/0x420 [ 995.557154] ? rcu_blocking_is_gp+0x90/0x90 [ 995.561460] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 995.566987] ret_from_fork+0x24/0x30 [ 995.570722] NMI backtrace for cpu 1 [ 995.574343] CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 4.19.72 #0 [ 995.580729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.590074] Call Trace: [ 995.592641] [ 995.594783] dump_stack+0x172/0x1f0 [ 995.598403] nmi_cpu_backtrace.cold+0x63/0xa4 [ 995.602936] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 995.607856] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 995.613126] arch_trigger_cpumask_backtrace+0x14/0x20 [ 995.618304] rcu_dump_cpu_stacks+0x189/0x1d5 [ 995.622697] ? wake_up_process+0x10/0x20 [ 995.626752] rcu_check_callbacks.cold+0x5e3/0xd90 [ 995.631586] ? trace_hardirqs_off+0x62/0x220 [ 995.636032] update_process_times+0x32/0x80 [ 995.640370] tick_sched_handle+0xa2/0x190 [ 995.644515] tick_sched_timer+0x47/0x130 [ 995.648565] __hrtimer_run_queues+0x33b/0xdc0 [ 995.653050] ? tick_sched_do_timer+0x1b0/0x1b0 [ 995.657624] ? hrtimer_fixup_activate+0x30/0x30 [ 995.662326] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 995.667330] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 995.672687] hrtimer_interrupt+0x314/0x770 [ 995.676925] smp_apic_timer_interrupt+0x111/0x550 [ 995.681758] apic_timer_interrupt+0xf/0x20 [ 995.685978] [ 995.688204] RIP: 0010:__sanitizer_cov_trace_pc+0x4c/0x50 [ 995.694959] Code: d0 12 00 00 83 fa 02 75 20 48 8b 88 d8 12 00 00 8b 80 d4 12 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 5d 0f 1f 00 65 4c 8b 04 25 40 ee 01 00 65 8b 05 e0 96 96 7e a9 00 [ 995.713849] RSP: 0018:ffff8880aa2a6990 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 995.721546] RAX: ffff8880aa2944c0 RBX: ffff8880a9b8ebf8 RCX: ffffffff858e7e8e [ 995.729244] RDX: 0000000000000100 RSI: ffffffff858e7881 RDI: ffff8880a9b8ec00 [ 995.736515] RBP: ffff8880aa2a69e8 R08: ffff8880aa2944c0 R09: 0000000000000006 [ 995.743773] R10: ffff8880aa294e30 R11: 00000000b076a24f R12: dffffc0000000000 [ 995.751030] R13: ffff8880a9b8e940 R14: ffff8880a9b8ec98 R15: ffff8880a9b8ec90 [ 995.758313] ? hhf_dequeue+0x65e/0xa00 [ 995.762194] ? hhf_dequeue+0x51/0xa00 [ 995.765987] ? hhf_dequeue+0x51/0xa00 [ 995.769914] __qdisc_run+0x1e7/0x1960 [ 995.773764] __dev_queue_xmit+0x165c/0x2fe0 [ 995.778168] ? deliver_clone+0x61/0xc0 [ 995.782071] ? br_flood+0x5fa/0x710 [ 995.785692] ? br_handle_frame_finish+0xf72/0x1510 [ 995.790624] ? netdev_pick_tx+0x300/0x300 [ 995.794809] ? run_ksoftirqd+0x8e/0x110 [ 995.798771] ? smpboot_thread_fn+0x6a3/0xa30 [ 995.803167] ? kthread+0x354/0x420 [ 995.806863] ? entry_SYSCALL_64_after_hwframe+0xbc/0xbe [ 995.812266] ? __lock_is_held+0xb6/0x140 [ 995.816359] dev_queue_xmit+0x18/0x20 [ 995.820167] ? dev_queue_xmit+0x18/0x20 [ 995.824138] br_dev_queue_push_xmit+0x405/0x5d0 [ 995.828858] ? br_nf_dev_queue_xmit+0x38c/0x1610 [ 995.833620] br_nf_dev_queue_xmit+0x365/0x1610 [ 995.838202] br_nf_post_routing+0x76f/0x12f0 [ 995.842603] ? find_inlist_lock.constprop.0+0x22a/0x230 [ 995.847959] ? br_nf_dev_queue_xmit+0x1610/0x1610 [ 995.852832] ? ipv6_skip_exthdr+0x5b0/0x5c0 [ 995.857146] ? br_nf_pre_routing_finish_bridge+0xaa0/0xaa0 [ 995.862779] nf_hook_slow+0xbc/0x1e0 [ 995.866488] br_forward_finish+0x215/0x400 [ 995.870715] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 995.875588] ? br_fdb_add.cold+0x8a/0x8a [ 995.879651] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 995.884665] ? nf_hook_slow+0xf0/0x1e0 [ 995.888551] br_nf_hook_thresh+0x2e9/0x370 [ 995.892785] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 995.897620] ? setup_pre_routing+0x470/0x470 [ 995.902027] ? find_held_lock+0x35/0x130 [ 995.906080] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 995.910941] br_nf_forward_finish+0x356/0x700 [ 995.915427] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 995.920269] br_nf_forward_ip+0x6b4/0x17c0 [ 995.924498] ? br_nf_forward_finish+0x700/0x700 [ 995.929168] ? refcount_inc_not_zero_checked+0x147/0x200 [ 995.934735] ? br_nf_hook_thresh+0x370/0x370 [ 995.939168] nf_hook_slow+0xbc/0x1e0 [ 995.942886] __br_forward+0x393/0xb30 [ 995.946694] ? br_forward_finish+0x400/0x400 [ 995.951102] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 995.955951] deliver_clone+0x61/0xc0 [ 995.959655] br_flood+0x5fa/0x710 [ 995.963103] br_handle_frame_finish+0xf72/0x1510 [ 995.967852] ? br_handle_local_finish+0x20/0x20 [ 995.972514] ? __lock_is_held+0xb6/0x140 [ 995.976591] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 995.981605] ? nf_hook_slow+0xf0/0x1e0 [ 995.985492] br_nf_hook_thresh+0x2e9/0x370 [ 995.989725] ? br_handle_local_finish+0x20/0x20 [ 995.994387] ? setup_pre_routing+0x470/0x470 [ 995.998786] ? br_handle_local_finish+0x20/0x20 [ 996.003446] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 996.008629] br_nf_pre_routing_finish_ipv6+0x6ed/0xd70 [ 996.013894] ? br_handle_local_finish+0x20/0x20 [ 996.018553] ? kasan_check_read+0x11/0x20 [ 996.022752] br_nf_pre_routing_ipv6+0x4a5/0x8ca [ 996.027413] ? br_validate_ipv6+0xb90/0xb90 [ 996.031739] ? br_nf_pre_routing_finish.cold+0x11d/0x11d [ 996.037181] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 996.042706] ? skb_pull_rcsum+0x164/0x340 [ 996.046849] br_nf_pre_routing+0x1016/0x159c [ 996.051254] ? br_nf_pre_routing_finish+0x1960/0x1960 [ 996.056438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.061963] ? ebt_broute+0x127/0x190 [ 996.065758] nf_hook_slow+0xbc/0x1e0 [ 996.069464] br_handle_frame+0x985/0x1480 [ 996.073607] ? br_handle_frame_finish+0x1510/0x1510 [ 996.078647] ? consume_skb+0xef/0x380 [ 996.082444] ? br_handle_local_finish+0x20/0x20 [ 996.087106] ? br_handle_frame_finish+0x1510/0x1510 [ 996.092111] ? run_filter+0x320/0x320 [ 996.095911] __netif_receive_skb_core+0xac1/0x3570 [ 996.100830] ? __lock_acquire+0x6ee/0x49c0 [ 996.105054] ? dentry_unlink_inode+0x350/0x350 [ 996.109622] ? save_stack+0xa9/0xd0 [ 996.113251] ? assoc_array_gc+0x1390/0x1440 [ 996.117574] ? netif_receive_skb+0x2d0/0x2d0 [ 996.121973] ? mark_held_locks+0x100/0x100 [ 996.126217] ? SOFTIRQ_verbose+0x10/0x10 [ 996.130269] ? __lock_acquire+0x6ee/0x49c0 [ 996.134497] ? process_backlog+0x482/0x7a0 [ 996.138727] __netif_receive_skb_one_core+0xa8/0x1a0 [ 996.143831] ? __netif_receive_skb_one_core+0xa8/0x1a0 [ 996.149097] ? __netif_receive_skb_core+0x3570/0x3570 [ 996.154291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.159818] ? check_preemption_disabled+0x48/0x290 [ 996.164824] ? lock_acquire+0x16f/0x3f0 [ 996.168803] __netif_receive_skb+0x2c/0x1d0 [ 996.173134] process_backlog+0x23a/0x7a0 [ 996.177185] ? net_rx_action+0x27b/0x1070 [ 996.181326] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 996.185902] net_rx_action+0x4f5/0x1070 [ 996.189906] ? napi_complete_done+0x500/0x500 [ 996.194465] ? sched_clock+0x2e/0x50 [ 996.198185] __do_softirq+0x25c/0x921 [ 996.201977] ? pci_mmcfg_check_reserved+0x170/0x170 [ 996.206998] ? takeover_tasklets+0x7b0/0x7b0 [ 996.211406] run_ksoftirqd+0x8e/0x110 [ 996.215201] smpboot_thread_fn+0x6a3/0xa30 [ 996.219433] ? sort_range+0x30/0x30 [ 996.223048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 996.228574] ? __kthread_parkme+0xfb/0x1b0 [ 996.232808] kthread+0x354/0x420 [ 996.237898] ? sort_range+0x30/0x30 [ 996.241513] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 996.247052] ret_from_fork+0x24/0x30 [ 997.803596] rcu: INFO: rcu_sched detected stalls on CPUs/tasks: [ 997.809727] rcu: 1-...!: (10714 ticks this GP) idle=4f2/1/0x4000000000000000 softirq=122452/122468 fqs=2426 [ 997.819777] rcu: (detected by 0, t=10502 jiffies, g=16549, q=1) [ 997.825943] Sending NMI from CPU 0 to CPUs 1: [ 997.831927] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.204 msecs [ 997.832686] NMI backtrace for cpu 1 [ 997.832692] CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 4.19.72 #0 [ 997.832699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.832709] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x9/0x20 [ 997.832721] Code: 00 55 48 89 f2 48 89 fe bf 06 00 00 00 48 89 e5 48 8b 4d 08 e8 18 ff ff ff 5d c3 66 0f 1f 44 00 00 55 40 0f b6 d6 40 0f b6 f7 01 00 00 00 48 89 e5 48 8b 4d 08 e8 f6 fe ff ff 5d c3 0f 1f 40 [ 997.832726] RSP: 0018:ffff8880aa2a6988 EFLAGS: 00000246 [ 997.832734] RAX: 0000000000000001 RBX: ffff8880a9b8ebf8 RCX: ffffffff858e78e9 [ 997.832740] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.832745] RBP: ffff8880aa2a69e8 R08: ffff8880aa2944c0 R09: 0000000000000006 [ 997.832751] R10: ffff8880aa294e30 R11: 00000000b076a24f R12: dffffc0000000000 [ 997.832756] R13: ffff8880a9b8e940 R14: 0000000000000001 R15: 0000000000000000 [ 997.832762] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 997.832767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 997.832772] CR2: 00000000006f7f40 CR3: 000000000866d000 CR4: 00000000001406e0 [ 997.832778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 997.832783] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 997.832786] Call Trace: [ 997.832790] ? hhf_dequeue+0x5b6/0xa00 [ 997.832794] __qdisc_run+0x1e7/0x1960 [ 997.832798] __dev_queue_xmit+0x165c/0x2fe0 [ 997.832802] ? deliver_clone+0x61/0xc0 [ 997.832805] ? br_flood+0x5fa/0x710 [ 997.832809] ? br_handle_frame_finish+0xf72/0x1510 [ 997.832814] ? netdev_pick_tx+0x300/0x300 [ 997.832817] ? run_ksoftirqd+0x8e/0x110 [ 997.832821] ? smpboot_thread_fn+0x6a3/0xa30 [ 997.832825] ? kthread+0x354/0x420 [ 997.832829] ? entry_SYSCALL_64_after_hwframe+0xbc/0xbe [ 997.832833] ? __lock_is_held+0xb6/0x140 [ 997.832837] dev_queue_xmit+0x18/0x20 [ 997.832841] ? dev_queue_xmit+0x18/0x20 [ 997.832845] br_dev_queue_push_xmit+0x405/0x5d0 [ 997.832850] ? br_nf_dev_queue_xmit+0x38c/0x1610 [ 997.832854] br_nf_dev_queue_xmit+0x365/0x1610 [ 997.832858] br_nf_post_routing+0x76f/0x12f0 [ 997.832862] ? find_inlist_lock.constprop.0+0x22a/0x230 [ 997.832866] ? br_nf_dev_queue_xmit+0x1610/0x1610 [ 997.832871] ? ipv6_skip_exthdr+0x5b0/0x5c0 [ 997.832875] ? br_nf_pre_routing_finish_bridge+0xaa0/0xaa0 [ 997.832879] nf_hook_slow+0xbc/0x1e0 [ 997.832883] br_forward_finish+0x215/0x400 [ 997.832887] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 997.832891] ? br_fdb_add.cold+0x8a/0x8a [ 997.832895] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 997.832899] ? nf_hook_slow+0xf0/0x1e0 [ 997.832903] br_nf_hook_thresh+0x2e9/0x370 [ 997.832907] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 997.832911] ? setup_pre_routing+0x470/0x470 [ 997.832915] ? find_held_lock+0x35/0x130 [ 997.832920] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 997.832924] br_nf_forward_finish+0x356/0x700 [ 997.832928] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 997.832932] br_nf_forward_ip+0x6b4/0x17c0 [ 997.832936] ? br_nf_forward_finish+0x700/0x700 [ 997.832940] ? refcount_inc_not_zero_checked+0x147/0x200 [ 997.832944] ? br_nf_hook_thresh+0x370/0x370 [ 997.832948] nf_hook_slow+0xbc/0x1e0 [ 997.832952] __br_forward+0x393/0xb30 [ 997.832955] ? br_forward_finish+0x400/0x400 [ 997.832960] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 997.832963] deliver_clone+0x61/0xc0 [ 997.832967] br_flood+0x5fa/0x710 [ 997.832971] br_handle_frame_finish+0xf72/0x1510 [ 997.832975] ? br_handle_local_finish+0x20/0x20 [ 997.832979] ? __lock_is_held+0xb6/0x140 [ 997.832983] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 997.832987] ? nf_hook_slow+0xf0/0x1e0 [ 997.832991] br_nf_hook_thresh+0x2e9/0x370 [ 997.832995] ? br_handle_local_finish+0x20/0x20 [ 997.832999] ? setup_pre_routing+0x470/0x470 [ 997.833003] ? br_handle_local_finish+0x20/0x20 [ 997.833008] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 997.833012] br_nf_pre_routing_finish_ipv6+0x6ed/0xd70 [ 997.833017] ? br_handle_local_finish+0x20/0x20 [ 997.833020] ? kasan_check_read+0x11/0x20 [ 997.833025] br_nf_pre_routing_ipv6+0x4a5/0x8ca [ 997.833028] ? br_validate_ipv6+0xb90/0xb90 [ 997.833033] ? br_nf_pre_routing_finish.cold+0x11d/0x11d [ 997.833038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 997.833042] ? skb_pull_rcsum+0x164/0x340 [ 997.833046] br_nf_pre_routing+0x1016/0x159c [ 997.833050] ? br_nf_pre_routing_finish+0x1960/0x1960 [ 997.833054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.833058] ? ebt_broute+0x127/0x190 [ 997.833062] nf_hook_slow+0xbc/0x1e0 [ 997.833066] br_handle_frame+0x985/0x1480 [ 997.833070] ? br_handle_frame_finish+0x1510/0x1510 [ 997.833074] ? consume_skb+0xef/0x380 [ 997.833078] ? br_handle_local_finish+0x20/0x20 [ 997.833082] ? br_handle_frame_finish+0x1510/0x1510 [ 997.833086] ? run_filter+0x320/0x320 [ 997.833090] __netif_receive_skb_core+0xac1/0x3570 [ 997.833094] ? __lock_acquire+0x6ee/0x49c0 [ 997.833098] ? dentry_unlink_inode+0x350/0x350 [ 997.833102] ? save_stack+0xa9/0xd0 [ 997.833106] ? assoc_array_gc+0x1390/0x1440 [ 997.833110] ? netif_receive_skb+0x2d0/0x2d0 [ 997.833114] ? mark_held_locks+0x100/0x100 [ 997.833117] ? SOFTIRQ_verbose+0x10/0x10 [ 997.833121] ? __lock_acquire+0x6ee/0x49c0 [ 997.833125] ? process_backlog+0x482/0x7a0 [ 997.833130] __netif_receive_skb_one_core+0xa8/0x1a0 [ 997.833134] ? __netif_receive_skb_one_core+0xa8/0x1a0 [ 997.833139] ? __netif_receive_skb_core+0x3570/0x3570 [ 997.833143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.833148] ? check_preemption_disabled+0x48/0x290 [ 997.833151] ? lock_acquire+0x16f/0x3f0 [ 997.833155] __netif_receive_skb+0x2c/0x1d0 [ 997.833159] process_backlog+0x23a/0x7a0 [ 997.833163] ? net_rx_action+0x27b/0x1070 [ 997.833167] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 997.833171] net_rx_action+0x4f5/0x1070 [ 997.833175] ? napi_complete_done+0x500/0x500 [ 997.833179] ? sched_clock+0x2e/0x50 [ 997.833183] __do_softirq+0x25c/0x921 [ 997.833187] ? pci_mmcfg_check_reserved+0x170/0x170 [ 997.833191] ? takeover_tasklets+0x7b0/0x7b0 [ 997.833195] run_ksoftirqd+0x8e/0x110 [ 997.833199] smpboot_thread_fn+0x6a3/0xa30 [ 997.833202] ? sort_range+0x30/0x30 [ 997.833207] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 997.833210] ? __kthread_parkme+0xfb/0x1b0 [ 997.833214] kthread+0x354/0x420 [ 997.833218] ? sort_range+0x30/0x30 [ 997.833222] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 997.833226] ret_from_fork+0x24/0x30 [ 997.833244] rcu: rcu_sched kthread starved for 5620 jiffies! g16549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 998.456490] rcu: RCU grace-period kthread stack dump: [ 998.461671] rcu_sched I29104 11 2 0x80000000 [ 998.467309] Call Trace: [ 998.469999] __schedule+0x866/0x1dc0 [ 998.473720] ? pci_mmcfg_check_reserved+0x170/0x170 [ 998.478733] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 998.483859] ? lockdep_hardirqs_on+0x415/0x5d0 [ 998.488446] ? trace_hardirqs_on+0x67/0x220 [ 998.492774] schedule+0x92/0x1c0 [ 998.496138] schedule_timeout+0x4db/0xfc0 [ 998.500293] ? usleep_range+0x170/0x170 [ 998.504265] ? trace_hardirqs_on+0x67/0x220 [ 998.508586] ? kasan_check_read+0x11/0x20 [ 998.512740] ? __next_timer_interrupt+0x1a0/0x1a0 [ 998.517587] ? prepare_to_swait_exclusive+0x120/0x120 [ 998.522781] rcu_gp_kthread+0xd5c/0x2190 [ 998.526867] ? rcu_blocking_is_gp+0x90/0x90 [ 998.531187] ? trace_hardirqs_on+0x67/0x220 [ 998.535504] ? kasan_check_read+0x11/0x20 [ 998.539654] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 998.544761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 998.550295] ? __kthread_parkme+0xfb/0x1b0 [ 998.554537] kthread+0x354/0x420 [ 998.557910] ? rcu_blocking_is_gp+0x90/0x90 [ 998.562230] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 998.567770] ret_from_fork+0x24/0x30