[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   34.683479][   T25] audit: type=1800 audit(1571254381.086:25): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   34.710910][   T25] audit: type=1800 audit(1571254381.086:26): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   34.752383][   T25] audit: type=1800 audit(1571254381.086:27): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts.
2019/10/16 19:33:12 fuzzer started
2019/10/16 19:33:13 dialing manager at 10.128.0.105:33899
2019/10/16 19:33:13 syscalls: 2524
2019/10/16 19:33:13 code coverage: enabled
2019/10/16 19:33:13 comparison tracing: enabled
2019/10/16 19:33:13 extra coverage: extra coverage is not supported by the kernel
2019/10/16 19:33:13 setuid sandbox: enabled
2019/10/16 19:33:13 namespace sandbox: enabled
2019/10/16 19:33:13 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/16 19:33:13 fault injection: enabled
2019/10/16 19:33:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/16 19:33:13 net packet injection: enabled
2019/10/16 19:33:13 net device setup: enabled
2019/10/16 19:33:13 concurrency sanitizer: enabled
19:33:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r1 = syz_open_dev$vivid(0x0, 0x2, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800)
r3 = geteuid()
r4 = getegid()
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000940)=<r5=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, <r6=>0x0}, &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001900))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000c1781c1b24738d08000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x67}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0, 0x4000004}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x20000000)
sched_getscheduler(0x0)
write$binfmt_elf32(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6e, 0x80, 0x81, 0x9, 0x2, 0x3, 0x9, 0xfc, 0x38, 0x1ec, 0x0, 0x5, 0x20, 0x1, 0x100, 0x0, 0x1}, [{0x4, 0x9, 0x0, 0x3, 0x9, 0x40f3, 0x7474, 0xfff}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x140}}, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4084080}, 0x20040000)
dup2(r8, r7)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x1000, 0x0, "2458348ab867e44066159ea6a603b1239db16b6994b2c3a03a562d8e72d6f957e0b2483c677beaac5fcba6d50dda03dd1b4f05862acf82acb17ace5932529cec5bb18fbc7f0de0b79995f9d74e733aa5"}, 0xd8)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xb157dffc06d02e15, 0x0)

19:33:16 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

syzkaller login: [   50.266672][ T7156] IPVS: ftp: loaded support on port[0] = 21
[   50.441998][ T7159] IPVS: ftp: loaded support on port[0] = 21
[   50.449827][ T7156] chnl_net:caif_netlink_parms(): no params data found
19:33:16 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

[   50.546646][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.554275][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.562794][ T7156] device bridge_slave_0 entered promiscuous mode
[   50.584029][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.591462][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.600090][ T7156] device bridge_slave_1 entered promiscuous mode
[   50.667823][ T7159] chnl_net:caif_netlink_parms(): no params data found
[   50.679764][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.693625][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.755038][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.762361][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.770857][ T7159] device bridge_slave_0 entered promiscuous mode
[   50.779044][ T7156] team0: Port device team_slave_0 added
[   50.787176][ T7156] team0: Port device team_slave_1 added
[   50.793901][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.803157][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.811611][ T7159] device bridge_slave_1 entered promiscuous mode
[   50.833467][ T7163] IPVS: ftp: loaded support on port[0] = 21
[   50.853961][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
19:33:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0xd0000, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x3e0000}], 0x0)

[   50.904118][ T7156] device hsr_slave_0 entered promiscuous mode
[   50.959778][ T7156] device hsr_slave_1 entered promiscuous mode
[   51.008778][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.015898][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.023270][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.030357][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.072228][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.158976][ T7165] IPVS: ftp: loaded support on port[0] = 21
[   51.166431][ T7159] team0: Port device team_slave_0 added
[   51.189254][ T7159] team0: Port device team_slave_1 added
19:33:17 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)='8', 0xfffffffffffffd84, 0xfffffffffffffffd, 0x0, 0xfffffffffffffd62)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)

[   51.292542][ T7159] device hsr_slave_0 entered promiscuous mode
[   51.319710][ T7159] device hsr_slave_1 entered promiscuous mode
[   51.379382][ T7159] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.398433][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.454816][ T7156] 8021q: adding VLAN 0 to HW filter on device team0
[   51.467696][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.477109][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.497481][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.510281][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   51.534684][ T7167] IPVS: ftp: loaded support on port[0] = 21
19:33:18 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[   51.590548][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.601611][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.611031][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.618099][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.628346][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.638540][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.648643][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.655731][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.665792][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.675232][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.733150][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.743781][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.754102][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.764529][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.773966][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.808436][ T7163] chnl_net:caif_netlink_parms(): no params data found
[   51.850230][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.858956][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.868035][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.876577][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.892737][ T7173] IPVS: ftp: loaded support on port[0] = 21
[   51.893541][ T7165] chnl_net:caif_netlink_parms(): no params data found
[   51.918738][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.945602][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.991054][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.998143][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.006185][ T7163] device bridge_slave_0 entered promiscuous mode
[   52.027149][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.035623][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.069124][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.076319][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.086110][ T7163] device bridge_slave_1 entered promiscuous mode
[   52.103697][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.110946][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.120190][ T7165] device bridge_slave_0 entered promiscuous mode
[   52.130632][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.137723][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.148027][ T7165] device bridge_slave_1 entered promiscuous mode
[   52.173372][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.184837][ T7159] 8021q: adding VLAN 0 to HW filter on device team0
[   52.205328][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.215158][ T7167] chnl_net:caif_netlink_parms(): no params data found
[   52.259562][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.268481][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.278097][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.285331][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.294373][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.303087][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.312039][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.319079][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.330814][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.344842][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.354072][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.365915][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.377582][ T7163] team0: Port device team_slave_0 added
[   52.407802][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.418137][ T7163] team0: Port device team_slave_1 added
[   52.461780][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.468862][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.481770][ T7167] device bridge_slave_0 entered promiscuous mode
[   52.490255][ T7165] team0: Port device team_slave_0 added
[   52.496036][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.503151][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.511247][ T7167] device bridge_slave_1 entered promiscuous mode
[   52.520925][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.530144][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.538843][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.548333][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.557394][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.566819][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.622652][ T7163] device hsr_slave_0 entered promiscuous mode
[   52.679804][ T7163] device hsr_slave_1 entered promiscuous mode
[   52.739495][ T7163] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.752542][ T7165] team0: Port device team_slave_1 added
[   52.788939][ T7167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.825366][ T7167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.848308][ T7159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.858954][ T7159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.871282][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.880158][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.889195][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.898267][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.906889][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.962611][ T7165] device hsr_slave_0 entered promiscuous mode
[   53.029828][ T7165] device hsr_slave_1 entered promiscuous mode
[   53.089486][ T7165] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.169583][    C1] hrtimer: interrupt took 34507 ns
[   53.182154][ T7167] team0: Port device team_slave_0 added
[   53.202597][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.216060][ T7167] team0: Port device team_slave_1 added
[   53.223642][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[   53.237285][ T7173] chnl_net:caif_netlink_parms(): no params data found
[   53.302619][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
19:33:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r1 = syz_open_dev$vivid(0x0, 0x2, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800)
r3 = geteuid()
r4 = getegid()
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000940)=<r5=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, <r6=>0x0}, &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001900))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000c1781c1b24738d08000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x67}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0, 0x4000004}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x20000000)
sched_getscheduler(0x0)
write$binfmt_elf32(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6e, 0x80, 0x81, 0x9, 0x2, 0x3, 0x9, 0xfc, 0x38, 0x1ec, 0x0, 0x5, 0x20, 0x1, 0x100, 0x0, 0x1}, [{0x4, 0x9, 0x0, 0x3, 0x9, 0x40f3, 0x7474, 0xfff}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x140}}, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4084080}, 0x20040000)
dup2(r8, r7)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x1000, 0x0, "2458348ab867e44066159ea6a603b1239db16b6994b2c3a03a562d8e72d6f957e0b2483c677beaac5fcba6d50dda03dd1b4f05862acf82acb17ace5932529cec5bb18fbc7f0de0b79995f9d74e733aa5"}, 0xd8)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xb157dffc06d02e15, 0x0)

[   53.357673][ T7167] device hsr_slave_0 entered promiscuous mode
[   53.419887][ T7167] device hsr_slave_1 entered promiscuous mode
[   53.469480][ T7167] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.483864][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.491291][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.499229][ T7173] device bridge_slave_0 entered promiscuous mode
19:33:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r1 = syz_open_dev$vivid(0x0, 0x2, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800)
r3 = geteuid()
r4 = getegid()
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000940)=<r5=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, <r6=>0x0}, &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001900))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000c1781c1b24738d08000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x67}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0, 0x4000004}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x20000000)
sched_getscheduler(0x0)
write$binfmt_elf32(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6e, 0x80, 0x81, 0x9, 0x2, 0x3, 0x9, 0xfc, 0x38, 0x1ec, 0x0, 0x5, 0x20, 0x1, 0x100, 0x0, 0x1}, [{0x4, 0x9, 0x0, 0x3, 0x9, 0x40f3, 0x7474, 0xfff}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="400100001800dbcb2abd7000ffdbdf25801078ffff02ff060010000008000200ac1414aa080001000000000108000600acc99273fc000800174d7f01102211cdcf7a4da14777bab3a97a7d9ba8538b41281bf884dc852280420adc222db2e59f543d2adf5e799d4665a356525bd95a14c516a5465444f56c0bc21b0c250bcd7ad58da81f78481c8b3d37a6c20a96cc5a482f0a93e46e014511b32ff93265aa0a789c4a70288cebc755081f17263731ace075bf2dd93c204b938f670edd76ae5898897108d0c35b213eb5e346cb1a11d3a3c46757fa5259e8f03f76ef96644c97813a902c34671145d11f2016e514e063d6ae436c715c40820bb7d176379d1206a22e638ade76d0fa125ce7680429901ed73c6bb0704fe495320a100016000c006a00080034002330deae478a53975bb2c865126f7eb2125d51a8e810656b90acad2c7dbafda2cc9f41269a62ac62ef6282e06d0bb0f232b85b495e12c25b40df2c54f76f9493fe2416b09fe1cccac6dd57773b7d83c01f8667fcd0a4c25714e43e127385ca6b9cf552b5efbb4d1bd854ff9e70c0c9dc20746cdf4f08a0a9ecc035c16b3a22c2db6a723dd267ebe583b4202cb743a6414cac3c09370fc21b5ab30fc77e0958fd4950caf46639739e2fec48d1986196a028c77499b6b1a31592621800000000", @ANYRES32=r1], 0x140}}, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4084080}, 0x20040000)
dup2(r8, r7)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x1000, 0x0, "2458348ab867e44066159ea6a603b1239db16b6994b2c3a03a562d8e72d6f957e0b2483c677beaac5fcba6d50dda03dd1b4f05862acf82acb17ace5932529cec5bb18fbc7f0de0b79995f9d74e733aa5"}, 0xd8)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xb157dffc06d02e15, 0x0)

[   53.518549][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[   53.540447][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.547643][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.561375][ T7173] device bridge_slave_1 entered promiscuous mode
[   53.592304][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.607372][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.631649][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.675584][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.698736][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[   53.714582][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.723600][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.732829][ T7165] 8021q: adding VLAN 0 to HW filter on device team0
[   53.768329][ T7163] 8021q: adding VLAN 0 to HW filter on device team0
[   53.796819][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.810398][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
19:33:20 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r1 = syz_open_dev$vivid(0x0, 0x2, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800)
r3 = geteuid()
r4 = getegid()
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000940)=<r5=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, <r6=>0x0}, &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001900))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000c1781c1b24738d08000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x67}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0, 0x4000004}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x20000000)
sched_getscheduler(0x0)
write$binfmt_elf32(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6e, 0x80, 0x81, 0x9, 0x2, 0x3, 0x9, 0xfc, 0x38, 0x1ec, 0x0, 0x5, 0x20, 0x1, 0x100, 0x0, 0x1}, [{0x4, 0x9, 0x0, 0x3, 0x9, 0x40f3, 0x7474, 0xfff}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="400100001800dbcb2abd7000ffdbdf25801078ffff02ff060010000008000200ac1414aa080001000000000108000600acc99273fc000800174d7f01102211cdcf7a4da14777bab3a97a7d9ba8538b41281bf884dc852280420adc222db2e59f543d2adf5e799d4665a356525bd95a14c516a5465444f56c0bc21b0c250bcd7ad58da81f78481c8b3d37a6c20a96cc5a482f0a93e46e014511b32ff93265aa0a789c4a70288cebc755081f17263731ace075bf2dd93c204b938f670edd76ae5898897108d0c35b213eb5e346cb1a11d3a3c46757fa5259e8f03f76ef96644c97813a902c34671145d11f2016e514e063d6ae436c715c40820bb7d176379d1206a22e638ade76d0fa125ce7680429901ed73c6bb0704fe495320a100016000c006a00080034002330deae478a53975bb2c865126f7eb2125d51a8e810656b90acad2c7dbafda2cc9f41269a62ac62ef6282e06d0bb0f232b85b495e12c25b40df2c54f76f9493fe2416b09fe1cccac6dd57773b7d83c01f8667fcd0a4c25714e43e127385ca6b9cf552b5efbb4d1bd854ff9e70c0c9dc20746cdf4f08a0a9ecc035c16b3a22c2db6a723dd267ebe583b4202cb743a6414cac3c09370fc21b5ab30fc77e0958fd4950caf46639739e2fec48d1986196a028c77499b6b1a31592621800000000", @ANYRES32=r1], 0x140}}, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4084080}, 0x20040000)
dup2(r8, r7)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x1000, 0x0, "2458348ab867e44066159ea6a603b1239db16b6994b2c3a03a562d8e72d6f957e0b2483c677beaac5fcba6d50dda03dd1b4f05862acf82acb17ace5932529cec5bb18fbc7f0de0b79995f9d74e733aa5"}, 0xd8)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xb157dffc06d02e15, 0x0)

[   53.818369][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.840384][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.850147][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.857237][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.901974][ T7173] team0: Port device team_slave_0 added
[   53.910386][ T7173] team0: Port device team_slave_1 added
[   53.938957][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.958070][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.977815][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.992776][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.999955][ T7172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.008631][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.017975][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.028663][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.037579][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.044828][ T7172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.053004][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.062116][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.070695][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.077897][ T7172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.085957][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.095081][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.104701][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.113408][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.122658][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.132243][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.141578][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.150782][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.160040][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.168929][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.177689][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.190245][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.215472][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[   54.237765][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.250325][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
19:33:20 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:20 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

[   54.264635][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.279820][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.300950][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.315399][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.324165][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.344190][ T7167] 8021q: adding VLAN 0 to HW filter on device team0
[   54.422595][ T7173] device hsr_slave_0 entered promiscuous mode
[   54.469852][ T7173] device hsr_slave_1 entered promiscuous mode
[   54.509665][ T7173] debugfs: Directory 'hsr0' with parent '/' already present!
[   54.517890][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.526879][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.536069][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.544786][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.553016][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.562001][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.570842][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.588976][ T7167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.600063][ T7167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.612318][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.640788][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.661075][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.674751][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.681867][ T7168] bridge0: port 1(bridge_slave_0) entered forwarding state
19:33:21 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:21 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

[   54.690536][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.700707][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.709543][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.716594][ T7168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.743790][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.786105][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.807601][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.825558][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.835016][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.843981][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.854578][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.864157][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.873008][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.881550][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.897791][ T7167] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.915467][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.927746][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.938201][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.948003][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.964328][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.035835][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.086085][ T7173] 8021q: adding VLAN 0 to HW filter on device team0
[   55.125377][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.133918][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.170152][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.200365][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.209011][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.216360][ T7172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.228528][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.237730][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.251085][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.258357][ T7172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.278269][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.287731][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.297353][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.306711][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.317260][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.326699][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.336291][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.345442][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.356384][ T7173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.370119][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.394542][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.405981][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.416926][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.431015][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.452853][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0
19:33:22 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0xd0000, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x3e0000}], 0x0)

19:33:22 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)='8', 0xfffffffffffffd84, 0xfffffffffffffffd, 0x0, 0xfffffffffffffd62)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)

[   56.580400][   T25] kauditd_printk_skb: 3 callbacks suppressed
[   56.580516][   T25] audit: type=1804 audit(1571254402.986:31): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir993900042/syzkaller.6dOc3p/0/file0/file0" dev="sda1" ino=16528 res=1
19:33:23 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:23 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:23 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

19:33:23 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

19:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0xd0000, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x3e0000}], 0x0)

[   57.235722][ T7294] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
19:33:23 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

19:33:23 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

19:33:23 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0xd0000, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x3e0000}], 0x0)

[   57.303110][ T7294] FAT-fs (loop5): Filesystem has been set read-only
[   57.338921][ T7294] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
19:33:24 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x3cd41330a9713c83, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000ac0)=""/4096, 0x1000)

19:33:24 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

19:33:24 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:24 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff000003ab}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)

19:33:24 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:24 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)='8', 0xfffffffffffffd84, 0xfffffffffffffffd, 0x0, 0xfffffffffffffd62)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)

19:33:24 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:24 executing program 1:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:24 executing program 2:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[   58.597699][ T7351] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[   58.684767][ T7351] FAT-fs (loop5): Filesystem has been set read-only
[   58.740065][ T7351] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
19:33:25 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:25 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:25 executing program 1:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:25 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[   59.890452][ T7365] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
[   59.946093][ T7365] FAT-fs (loop5): Filesystem has been set read-only
[   59.996147][ T7365] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500)
19:33:26 executing program 2:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:26 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:26 executing program 1:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:27 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)='8', 0xfffffffffffffd84, 0xfffffffffffffffd, 0x0, 0xfffffffffffffd62)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)

19:33:27 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:27 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[   61.477249][ T7437] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500)
19:33:27 executing program 2:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[   61.519466][ T7437] FAT-fs (loop0): Filesystem has been set read-only
[   61.574630][ T7437] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500)
19:33:28 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:28 executing program 1:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:28 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:28 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:29 executing program 2:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:29 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:29 executing program 1:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:29 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:29 executing program 4:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:30 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:30 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:30 executing program 2:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:30 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:30 executing program 1:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:31 executing program 4:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:31 executing program 5:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:31 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

19:33:31 executing program 2:
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x800})
fstat(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200040}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000050)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194c871512e2249d01df96b553978d73e591622040bd56f90000002d008801cf03"], 0x15)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3905cb2e9d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
fanotify_mark(r7, 0x105, 0x1b, r6, 0x0)
sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe)
creat(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[   65.628535][ T7553] ==================================================================
[   65.636700][ T7553] BUG: KCSAN: data-race in fanotify_handle_event / fsnotify
[   65.644054][ T7553] 
[   65.646385][ T7553] write to 0xffff888103bba478 of 4 bytes by task 7545 on cpu 1:
[   65.654016][ T7553]  fsnotify+0x41e/0x7d0
[   65.658170][ T7553]  do_iter_write+0x218/0x3c0
[   65.662757][ T7553]  vfs_iter_write+0x5c/0x80
[   65.667279][ T7553]  iter_file_splice_write+0x4c0/0x7f0
[   65.672672][ T7553]  direct_splice_actor+0xa0/0xc0
[   65.677609][ T7553]  splice_direct_to_actor+0x215/0x510
[   65.683001][ T7553]  do_splice_direct+0x161/0x1e0
[   65.687866][ T7553]  do_sendfile+0x384/0x7f0
[   65.692286][ T7553]  __x64_sys_sendfile64+0xbe/0x140
[   65.697398][ T7553]  do_syscall_64+0xcc/0x370
[   65.701899][ T7553]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   65.707790][ T7553] 
[   65.710121][ T7553] read to 0xffff888103bba478 of 4 bytes by task 7553 on cpu 0:
[   65.717665][ T7553]  fanotify_handle_event+0x1f9/0x89f
[   65.722944][ T7553]  fsnotify+0x556/0x7d0
[   65.727733][ T7553]  do_iter_write+0x218/0x3c0
[   65.732320][ T7553]  vfs_iter_write+0x5c/0x80
[   65.736822][ T7553]  iter_file_splice_write+0x4c0/0x7f0
[   65.742462][ T7553]  direct_splice_actor+0xa0/0xc0
[   65.747396][ T7553]  splice_direct_to_actor+0x215/0x510
[   65.754619][ T7553]  do_splice_direct+0x161/0x1e0
[   65.759472][ T7553]  do_sendfile+0x384/0x7f0
[   65.763974][ T7553]  __x64_sys_sendfile64+0xbe/0x140
[   65.769102][ T7553]  do_syscall_64+0xcc/0x370
[   65.773617][ T7553]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   65.779500][ T7553] 
[   65.781820][ T7553] Reported by Kernel Concurrency Sanitizer on:
[   65.788057][ T7553] CPU: 0 PID: 7553 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0
[   65.795869][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   65.806006][ T7553] ==================================================================
[   65.814063][ T7553] Kernel panic - not syncing: panic_on_warn set ...
[   65.820654][ T7553] CPU: 0 PID: 7553 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0
[   65.828466][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   65.838516][ T7553] Call Trace:
[   65.841816][ T7553]  dump_stack+0xf5/0x159
[   65.846063][ T7553]  panic+0x210/0x640
[   65.849958][ T7553]  ? do_sendfile+0x384/0x7f0
[   65.854548][ T7553]  ? vprintk_func+0x8d/0x140
[   65.859141][ T7553]  kcsan_report.cold+0xc/0x1b
[   65.863822][ T7553]  __kcsan_setup_watchpoint+0x3ee/0x510
[   65.869368][ T7553]  __tsan_read4+0x2c/0x30
[   65.873718][ T7553]  fanotify_handle_event+0x1f9/0x89f
[   65.879011][ T7553]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   65.884993][ T7553]  ? __kcsan_setup_watchpoint+0x96/0x510
[   65.890718][ T7553]  fsnotify+0x556/0x7d0
[   65.894891][ T7553]  do_iter_write+0x218/0x3c0
[   65.899497][ T7553]  ? __kcsan_setup_watchpoint+0x96/0x510
[   65.905128][ T7553]  ? __kcsan_setup_watchpoint+0x96/0x510
[   65.910760][ T7553]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   65.916746][ T7553]  vfs_iter_write+0x5c/0x80
[   65.921252][ T7553]  iter_file_splice_write+0x4c0/0x7f0
[   65.926658][ T7553]  ? page_cache_pipe_buf_release+0x100/0x100
[   65.932642][ T7553]  direct_splice_actor+0xa0/0xc0
[   65.937607][ T7553]  splice_direct_to_actor+0x215/0x510
[   65.942998][ T7553]  ? generic_pipe_buf_nosteal+0x20/0x20
[   65.948558][ T7553]  do_splice_direct+0x161/0x1e0
[   65.953433][ T7553]  do_sendfile+0x384/0x7f0
[   65.957870][ T7553]  __x64_sys_sendfile64+0xbe/0x140
[   65.962983][ T7553]  do_syscall_64+0xcc/0x370
[   65.967490][ T7553]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   65.973809][ T7553] RIP: 0033:0x459a59
[   65.978339][ T7553] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   65.998816][ T7553] RSP: 002b:00007f58b9727c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   66.007245][ T7553] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59
[   66.015226][ T7553] RDX: 00000000200001c0 RSI: 000000000000000a RDI: 000000000000000a
[   66.023196][ T7553] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[   66.031420][ T7553] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f58b97286d4
[   66.039477][ T7553] R13: 00000000004c74af R14: 00000000004dd190 R15: 00000000ffffffff
[   66.048814][ T7553] Kernel Offset: disabled
[   66.053184][ T7553] Rebooting in 86400 seconds..