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", 0x1000}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000160100000800000075162ac826fe47e898895734b6b9042dd35b23e1a707c406527040ca8b18a24ae7ad0efd3ac0dfd6f991feb04fe930590468d8dedc84f5e94ceeede2a938bc7b0eabdafd1eb55cf5d27c10d37da6ce3bd05c9d7bbe087d5fbe02bd3b540e5b92c57a33d4a60bae63afb0588096604ffc5f50eb4bfa927633cf9a157b25abd12f570065"], 0x98}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="be4969d4bfa3657e2c33aa3bc73700e5242363e6eb3b80eb311072157cda8e26c095501ea6d741ad2556e36129f4eac7c6a4755146fae6aa981d8f7d89a2bcce7dfd7919aecd9f67e25cc1991406026e213904af7de6fa532628faba20e0380bb1bc305d28412c4ce1a1e078752bc19f6fdbb881ec62", 0x76}, {&(0x7f0000000500)="6af7e7c894f915fa94436f74a636e5fee60dcb5cfbbeb0f9ed1881ce5af6514a", 0x20}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f00000005c0)="21e0172fe136edc14c91f17eb7cd00f7b052f9787f3351ba8cfcdeb0fb12cac5ba5a77ab07faa085d080809a8fa8f0403fa224a699f387b0a8e31dce54e5c7a3daee5419aa1dc7e3a46a874d8660b672da0549636befc4313da2bb93a2f3584c479e959f1abae5f7d4f0e5a67775eada9f730f8a498b9c6aa11cbc6d310798f99df593b570d6facd7a7dd1b6eacbf5fd191ff685a0b56bf78632caa3f1bc52ab83950af794cdcabd3b4679835cb1427c988ac301141f9eb2083fe21de045c6f0f8fcfa9583200c221260cdb06907c6f5ff", 0xd1}, {&(0x7f00000006c0)="baf5b76619786045af6538d2a61482dcfd3285447b0d38863701f8ba7b75a62c148061683150cb8630e546494077519786", 0x31}], 0x5}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="246f45cccfa01cd495764ec6c52ee4bd4bc044e335426b46aa4efb6cfd5e466ee00ebedcaf89f678e0a3c87c167a19c4a1d6a869fa11a7a7e603d3240123d30dfbd3f0cb5be3fedab1ea00a382cd0874a65821437b37ba57bd7a3a5706", 0x5d}, {&(0x7f0000002900)="b834f1183f1bee08471b9ca0045d762b07a29bf27b9d53f11c1069234bed5018cb719edcad8e0bc7b6052ed6d806882876b54df1238e949250067a74bc05ca552c419d830a40b5675ecac5af9a93ec1f281c177e7282649e75619212e3181f3d4b28bc59795cbf0fe547a6f0dac629aeaf3674660fac854e147d5563bf90a8bac2e91499425ca79c643819aa467589bdc468fbc8d3a17886cc096a434562d397bcf5c51a5afe4edd54d96ce07e4815403461c7a024d2b28c1d4df3311e40e07b997afeeb6fe3802e410b61f9250926b8f5a012a3a9ca44e6962018e23a5e4c3aa4b8", 0xe2}, {&(0x7f0000002a00)="e7d2f438d7828af2011a8460f44c70ffad9d8bd7909bfcb64d92c2ce1d03293d1cbc8bd73d14c9fff6224784dcda8b0bc6cb97eb64e9f085cc0151195bbc460f4280f75ca35def84025f2a1d14d40acb72c048697298d1c93153d0c70c5468ab0985688236acf2eaa6e06ac93ccbe60ea6ab57841b38f7b7328d8915bcd188546d4fde1b47187dddd916385c42ad5d0ee5534642afea98ac2c71ac43ba2e0833", 0xa0}], 0x3, &(0x7f0000002ac0)=[{0x34, 0x116, 0x400, "b8e10fb0db4656faf00c6581babefd7fe8dfc48ae69abad34b0b58d2da1d26800f11646756b51f1c"}, {0x64, 0x114, 0x4971, "d32a3316fa5cf13fa7126cd04cb17f0c9192df6c52662f46379829036d68e45fa1dffee7a74c96d92bb4ffba9ca26b29234fa99b5f3ff3a6c01b101c8133012557602b9a0add831201396ba96366d9d2aa12284565"}], 0x98}}], 0x3, 0x883)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  284.470384][T10868] vivid-008: =================  START STATUS  =================
[  284.478784][T10868] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  284.485723][T10868] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  284.492926][T10868] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  284.499948][T10868] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  284.507851][T10868] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  284.514091][T10868] v4l2-ctrls: vivid-008: Display Present: true inactive
[  284.521519][T10868] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  284.528410][T10868] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  284.535260][T10868] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  284.542035][T10868] vivid-008: ==================  END STATUS  ==================
[  284.582093][T10869] vivid-008: =================  START STATUS  =================
[  284.590794][T10869] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  284.597966][T10869] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  284.605583][T10869] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  284.612551][T10869] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  284.620754][T10869] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  284.627161][T10869] v4l2-ctrls: vivid-008: Display Present: true inactive
[  284.634788][T10869] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  284.641766][T10869] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  284.648762][T10869] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  284.655437][T10869] vivid-008: ==================  END STATUS  ==================
[  284.662301][T10866] IPVS: ftp: loaded support on port[0] = 21
17:28:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  284.803702][T10872] vivid-008: =================  START STATUS  =================
[  284.812261][T10872] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  284.819234][T10872] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  284.826170][T10872] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  284.833004][T10872] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  284.840820][T10872] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  284.847048][T10872] v4l2-ctrls: vivid-008: Display Present: true inactive
[  284.854461][T10872] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  284.862411][T10872] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  284.869303][T10872] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  284.876302][T10872] vivid-008: ==================  END STATUS  ==================
[  284.904327][T10874] vivid-008: =================  START STATUS  =================
[  284.912545][T10874] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  284.919952][T10874] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  284.926872][T10874] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  284.933718][T10874] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  284.941659][T10874] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  284.947838][T10874] v4l2-ctrls: vivid-008: Display Present: true inactive
[  284.955422][T10874] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  284.962681][T10874] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  284.969560][T10874] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  284.976128][T10874] vivid-008: ==================  END STATUS  ==================
[  285.276821][T10884] FAT-fs (loop0): invalid media value (0x00)
[  285.283362][T10884] FAT-fs (loop0): Can't find a valid FAT filesystem
[  286.378438][T10866] chnl_net:caif_netlink_parms(): no params data found
[  286.595703][T10866] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.604140][T10866] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.613828][T10866] device bridge_slave_0 entered promiscuous mode
[  286.640581][T10866] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.648262][T10866] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.658866][T10866] device bridge_slave_1 entered promiscuous mode
[  286.713787][T10866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.733301][T10866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.799848][T10866] team0: Port device team_slave_0 added
[  286.811761][T10866] team0: Port device team_slave_1 added
[  286.871427][T10866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.878689][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.905177][T10866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.921275][T10866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.930046][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.956962][T10866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.068684][T10866] device hsr_slave_0 entered promiscuous mode
[  287.128762][T10866] device hsr_slave_1 entered promiscuous mode
[  287.199194][T10866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  287.206992][T10866] Cannot create hsr debugfs directory
[  287.543743][T10866] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  287.595358][T10866] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  287.656105][T10866] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  287.711069][T10866] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  287.986372][T10866] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.023297][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  288.033635][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  288.057525][T10866] 8021q: adding VLAN 0 to HW filter on device team0
[  288.083340][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  288.093918][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  288.105001][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.112311][ T9236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.134219][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  288.143404][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  288.153595][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  288.164007][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.171355][ T9236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.201913][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  288.224967][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  288.253853][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  288.264855][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  288.318496][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  288.328781][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  288.339703][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  288.351092][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  288.361074][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  288.371042][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  288.380877][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  288.452408][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.461228][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.487359][T10866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.642171][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  288.652481][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  288.718352][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  288.729248][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  288.753774][T10866] device veth0_vlan entered promiscuous mode
[  288.762952][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.772663][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.800926][T10866] device veth1_vlan entered promiscuous mode
[  288.864894][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.874812][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  288.884335][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.894631][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.914619][T10866] device veth0_macvtap entered promiscuous mode
[  288.933515][T10866] device veth1_macvtap entered promiscuous mode
[  288.976623][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  288.987631][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.000430][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  289.011343][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.021679][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  289.035496][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.045602][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  289.057080][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.071602][T10866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.080397][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  289.090359][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  289.100063][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  289.110207][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  289.139191][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  289.151353][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.161437][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  289.172496][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.182829][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  289.196773][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.207295][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  289.218017][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.232137][T10866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.240978][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  289.251389][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
17:28:40 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})
socket$inet6_tcp(0xa, 0x1, 0x0)

17:28:40 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r6=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14)
socket(0x0, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0804}, 0x1c890)

17:28:40 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)

17:28:40 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000160100000800000075162ac826fe47e898895734b6b9042dd35b23e1a707c406527040ca8b18a24ae7ad0efd3ac0dfd6f991feb04fe930590468d8dedc84f5e94ceeede2a938bc7b0eabdafd1eb55cf5d27c10d37da6ce3bd05c9d7bbe087d5fbe02bd3b540e5b92c57a33d4a60bae63afb0588096604ffc5f50eb4bfa927633cf9a157b25abd12f570065"], 0x98}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="be4969d4bfa3657e2c33aa3bc73700e5242363e6eb3b80eb311072157cda8e26c095501ea6d741ad2556e36129f4eac7c6a4755146fae6aa981d8f7d89a2bcce7dfd7919aecd9f67e25cc1991406026e213904af7de6fa532628faba20e0380bb1bc305d28412c4ce1a1e078752bc19f6fdbb881ec62", 0x76}, {&(0x7f0000000500)="6af7e7c894f915fa94436f74a636e5fee60dcb5cfbbeb0f9ed1881ce5af6514a", 0x20}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f00000005c0)="21e0172fe136edc14c91f17eb7cd00f7b052f9787f3351ba8cfcdeb0fb12cac5ba5a77ab07faa085d080809a8fa8f0403fa224a699f387b0a8e31dce54e5c7a3daee5419aa1dc7e3a46a874d8660b672da0549636befc4313da2bb93a2f3584c479e959f1abae5f7d4f0e5a67775eada9f730f8a498b9c6aa11cbc6d310798f99df593b570d6facd7a7dd1b6eacbf5fd191ff685a0b56bf78632caa3f1bc52ab83950af794cdcabd3b4679835cb1427c988ac301141f9eb2083fe21de045c6f0f8fcfa9583200c221260cdb06907c6f5ff", 0xd1}, {&(0x7f00000006c0)="baf5b76619786045af6538d2a61482dcfd3285447b0d38863701f8ba7b75a62c148061683150cb8630e546494077519786", 0x31}], 0x5}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="246f45cccfa01cd495764ec6c52ee4bd4bc044e335426b46aa4efb6cfd5e466ee00ebedcaf89f678e0a3c87c167a19c4a1d6a869fa11a7a7e603d3240123d30dfbd3f0cb5be3fedab1ea00a382cd0874a65821437b37ba57bd7a3a5706", 0x5d}, {&(0x7f0000002900)="b834f1183f1bee08471b9ca0045d762b07a29bf27b9d53f11c1069234bed5018cb719edcad8e0bc7b6052ed6d806882876b54df1238e949250067a74bc05ca552c419d830a40b5675ecac5af9a93ec1f281c177e7282649e75619212e3181f3d4b28bc59795cbf0fe547a6f0dac629aeaf3674660fac854e147d5563bf90a8bac2e91499425ca79c643819aa467589bdc468fbc8d3a17886cc096a434562d397bcf5c51a5afe4edd54d96ce07e4815403461c7a024d2b28c1d4df3311e40e07b997afeeb6fe3802e410b61f9250926b8f5a012a3a9ca44e6962018e23a5e4c3aa4b8", 0xe2}, {&(0x7f0000002a00)="e7d2f438d7828af2011a8460f44c70ffad9d8bd7909bfcb64d92c2ce1d03293d1cbc8bd73d14c9fff6224784dcda8b0bc6cb97eb64e9f085cc0151195bbc460f4280f75ca35def84025f2a1d14d40acb72c048697298d1c93153d0c70c5468ab0985688236acf2eaa6e06ac93ccbe60ea6ab57841b38f7b7328d8915bcd188546d4fde1b47187dddd916385c42ad5d0ee5534642afea98ac2c71ac43ba2e0833", 0xa0}], 0x3, &(0x7f0000002ac0)=[{0x34, 0x116, 0x400, "b8e10fb0db4656faf00c6581babefd7fe8dfc48ae69abad34b0b58d2da1d26800f11646756b51f1c"}, {0x64, 0x114, 0x4971, "d32a3316fa5cf13fa7126cd04cb17f0c9192df6c52662f46379829036d68e45fa1dffee7a74c96d92bb4ffba9ca26b29234fa99b5f3ff3a6c01b101c8133012557602b9a0add831201396ba96366d9d2aa12284565"}], 0x98}}], 0x3, 0x883)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  289.951171][T11133] vivid-008: =================  START STATUS  =================
[  289.959511][T11133] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  289.966363][T11133] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  289.973477][T11133] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  289.980231][T11133] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  289.987838][T11133] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  289.993979][T11133] v4l2-ctrls: vivid-008: Display Present: true inactive
[  290.001116][T11133] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  290.007928][T11133] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  290.014668][T11133] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  290.021237][T11133] vivid-008: ==================  END STATUS  ==================
[  290.077303][T11138] vivid-008: =================  START STATUS  =================
[  290.085643][T11138] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  290.091090][T11141] FAT-fs (loop0): invalid media value (0x00)
[  290.092696][T11138] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  290.098708][T11141] FAT-fs (loop0): Can't find a valid FAT filesystem
[  290.105555][T11138] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  290.119798][T11138] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  290.127423][T11138] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  290.133583][T11138] v4l2-ctrls: vivid-008: Display Present: true inactive
[  290.140707][T11138] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  290.147450][T11138] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  290.154352][T11138] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  290.160934][T11138] vivid-008: ==================  END STATUS  ==================
[  290.255497][T11145] vivid-008: =================  START STATUS  =================
[  290.263917][T11145] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  290.270909][T11145] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  290.278003][T11145] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  290.284661][T11145] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  290.292309][T11145] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  290.298481][T11145] v4l2-ctrls: vivid-008: Display Present: true inactive
[  290.305487][T11145] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  290.312324][T11145] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  290.319155][T11145] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  290.325642][T11145] vivid-008: ==================  END STATUS  ==================
17:28:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  290.479619][T11154] vivid-008: =================  START STATUS  =================
[  290.487420][T11154] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  290.495014][T11154] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  290.502043][T11154] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  290.508794][T11154] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  290.516358][T11154] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  290.522487][T11154] v4l2-ctrls: vivid-008: Display Present: true inactive
[  290.529617][T11154] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  290.536535][T11154] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  290.543371][T11154] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  290.549971][T11154] vivid-008: ==================  END STATUS  ==================
[  290.602705][T11156] vivid-008: =================  START STATUS  =================
[  290.610905][T11156] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  290.661272][T11156] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  290.668397][T11156] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  290.675063][T11156] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  290.682765][T11156] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  290.690084][T11156] v4l2-ctrls: vivid-008: Display Present: true inactive
[  290.697165][T11156] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  290.704523][T11156] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  290.711780][T11156] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  290.718467][T11156] vivid-008: ==================  END STATUS  ==================
17:28:41 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r6=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14)
socket(0x0, 0x0, 0x0)

17:28:41 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)

17:28:41 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000160100000800000075162ac826fe47e898895734b6b9042dd35b23e1a707c406527040ca8b18a24ae7ad0efd3ac0dfd6f991feb04fe930590468d8dedc84f5e94ceeede2a938bc7b0eabdafd1eb55cf5d27c10d37da6ce3bd05c9d7bbe087d5fbe02bd3b540e5b92c57a33d4a60bae63afb0588096604ffc5f50eb4bfa927633cf9a157b25abd12f570065"], 0x98}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="be4969d4bfa3657e2c33aa3bc73700e5242363e6eb3b80eb311072157cda8e26c095501ea6d741ad2556e36129f4eac7c6a4755146fae6aa981d8f7d89a2bcce7dfd7919aecd9f67e25cc1991406026e213904af7de6fa532628faba20e0380bb1bc305d28412c4ce1a1e078752bc19f6fdbb881ec62", 0x76}, {&(0x7f0000000500)="6af7e7c894f915fa94436f74a636e5fee60dcb5cfbbeb0f9ed1881ce5af6514a", 0x20}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f00000005c0)="21e0172fe136edc14c91f17eb7cd00f7b052f9787f3351ba8cfcdeb0fb12cac5ba5a77ab07faa085d080809a8fa8f0403fa224a699f387b0a8e31dce54e5c7a3daee5419aa1dc7e3a46a874d8660b672da0549636befc4313da2bb93a2f3584c479e959f1abae5f7d4f0e5a67775eada9f730f8a498b9c6aa11cbc6d310798f99df593b570d6facd7a7dd1b6eacbf5fd191ff685a0b56bf78632caa3f1bc52ab83950af794cdcabd3b4679835cb1427c988ac301141f9eb2083fe21de045c6f0f8fcfa9583200c221260cdb06907c6f5ff", 0xd1}, {&(0x7f00000006c0)="baf5b76619786045af6538d2a61482dcfd3285447b0d38863701f8ba7b75a62c148061683150cb8630e546494077519786", 0x31}], 0x5}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="246f45cccfa01cd495764ec6c52ee4bd4bc044e335426b46aa4efb6cfd5e466ee00ebedcaf89f678e0a3c87c167a19c4a1d6a869fa11a7a7e603d3240123d30dfbd3f0cb5be3fedab1ea00a382cd0874a65821437b37ba57bd7a3a5706", 0x5d}, {&(0x7f0000002900)="b834f1183f1bee08471b9ca0045d762b07a29bf27b9d53f11c1069234bed5018cb719edcad8e0bc7b6052ed6d806882876b54df1238e949250067a74bc05ca552c419d830a40b5675ecac5af9a93ec1f281c177e7282649e75619212e3181f3d4b28bc59795cbf0fe547a6f0dac629aeaf3674660fac854e147d5563bf90a8bac2e91499425ca79c643819aa467589bdc468fbc8d3a17886cc096a434562d397bcf5c51a5afe4edd54d96ce07e4815403461c7a024d2b28c1d4df3311e40e07b997afeeb6fe3802e410b61f9250926b8f5a012a3a9ca44e6962018e23a5e4c3aa4b8", 0xe2}, {&(0x7f0000002a00)="e7d2f438d7828af2011a8460f44c70ffad9d8bd7909bfcb64d92c2ce1d03293d1cbc8bd73d14c9fff6224784dcda8b0bc6cb97eb64e9f085cc0151195bbc460f4280f75ca35def84025f2a1d14d40acb72c048697298d1c93153d0c70c5468ab0985688236acf2eaa6e06ac93ccbe60ea6ab57841b38f7b7328d8915bcd188546d4fde1b47187dddd916385c42ad5d0ee5534642afea98ac2c71ac43ba2e0833", 0xa0}], 0x3, &(0x7f0000002ac0)=[{0x34, 0x116, 0x400, "b8e10fb0db4656faf00c6581babefd7fe8dfc48ae69abad34b0b58d2da1d26800f11646756b51f1c"}, {0x64, 0x114, 0x4971, "d32a3316fa5cf13fa7126cd04cb17f0c9192df6c52662f46379829036d68e45fa1dffee7a74c96d92bb4ffba9ca26b29234fa99b5f3ff3a6c01b101c8133012557602b9a0add831201396ba96366d9d2aa12284565"}], 0x98}}], 0x3, 0x883)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  290.999937][T11162] vivid-008: =================  START STATUS  =================
[  291.007830][T11162] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  291.014861][T11162] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  291.022045][T11162] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  291.028847][T11162] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  291.036405][T11162] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  291.042821][T11162] v4l2-ctrls: vivid-008: Display Present: true inactive
17:28:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
prctl$PR_GET_SECUREBITS(0x1b)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x1e0}])

[  291.050022][T11162] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  291.056829][T11162] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  291.063765][T11162] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  291.070557][T11162] vivid-008: ==================  END STATUS  ==================
[  291.103983][T11166] vivid-008: =================  START STATUS  =================
[  291.111987][T11166] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  291.119412][T11166] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  291.121740][T11163] FAT-fs (loop0): invalid media value (0x00)
[  291.126369][T11166] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  291.132897][T11163] FAT-fs (loop0): Can't find a valid FAT filesystem
[  291.139210][T11166] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  291.153593][T11166] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  291.159992][T11166] v4l2-ctrls: vivid-008: Display Present: true inactive
[  291.167040][T11166] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  291.174149][T11166] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  291.181243][T11166] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  291.187758][T11166] vivid-008: ==================  END STATUS  ==================
[  291.295175][T11174] vivid-008: =================  START STATUS  =================
[  291.303332][T11174] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  291.310295][T11174] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  291.317213][T11174] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  291.324658][T11174] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  291.332268][T11174] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  291.338444][T11174] v4l2-ctrls: vivid-008: Display Present: true inactive
[  291.345457][T11174] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  291.352318][T11174] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  291.359142][T11174] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  291.365634][T11174] vivid-008: ==================  END STATUS  ==================
17:28:42 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r6=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14)

17:28:42 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)

17:28:42 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$unix(0x1, 0x5, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0)
linkat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)

17:28:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  292.041985][T11189] vivid-008: =================  START STATUS  =================
[  292.049968][T11189] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  292.057006][T11189] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  292.064951][T11189] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  292.071720][T11189] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  292.079356][T11189] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  292.085445][T11189] v4l2-ctrls: vivid-008: Display Present: true inactive
[  292.092727][T11189] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  292.099564][T11189] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  292.106304][T11189] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  292.112899][T11189] vivid-008: ==================  END STATUS  ==================
[  292.121725][T11193] vivid-008: =================  START STATUS  =================
[  292.129719][T11193] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  292.136624][T11193] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  292.143819][T11193] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  292.150629][T11193] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  292.158337][T11193] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  292.164519][T11193] v4l2-ctrls: vivid-008: Display Present: true inactive
[  292.171714][T11193] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  292.178597][T11193] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  292.185345][T11193] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  292.192019][T11193] vivid-008: ==================  END STATUS  ==================
[  292.239147][T11194] vivid-008: =================  START STATUS  =================
[  292.247136][T11194] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  292.254411][T11194] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  292.261456][T11194] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  292.268441][T11194] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  292.276045][T11194] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  292.282500][T11194] v4l2-ctrls: vivid-008: Display Present: true inactive
[  292.289693][T11194] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  292.296450][T11194] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  292.303434][T11194] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  292.310103][T11194] vivid-008: ==================  END STATUS  ==================
[  292.421998][   T32] audit: type=1804 audit(1591378122.823:26): pid=11197 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir994621288/syzkaller.8GxM4o/3/bus" dev="sda1" ino=15877 res=1
[  292.478482][T11203] FAT-fs (loop0): invalid media value (0x00)
[  292.484663][T11203] FAT-fs (loop0): Can't find a valid FAT filesystem
17:28:43 executing program 1:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})

17:28:43 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})

17:28:43 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000160100000800000075162ac826fe47e898895734b6b9042dd35b23e1a707c406527040ca8b18a24ae7ad0efd3ac0dfd6f991feb04fe930590468d8dedc84f5e94ceeede2a938bc7b0eabdafd1eb55cf5d27c10d37da6ce3bd05c9d7bbe087d5fbe02bd3b540e5b92c57a33d4a60bae63afb0588096604ffc5f50eb4bfa927633cf9a157b25abd12f570065"], 0x98}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="be4969d4bfa3657e2c33aa3bc73700e5242363e6eb3b80eb311072157cda8e26c095501ea6d741ad2556e36129f4eac7c6a4755146fae6aa981d8f7d89a2bcce7dfd7919aecd9f67e25cc1991406026e213904af7de6fa532628faba20e0380bb1bc305d28412c4ce1a1e078752bc19f6fdbb881ec62", 0x76}, {&(0x7f0000000500)="6af7e7c894f915fa94436f74a636e5fee60dcb5cfbbeb0f9ed1881ce5af6514a", 0x20}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f00000005c0)="21e0172fe136edc14c91f17eb7cd00f7b052f9787f3351ba8cfcdeb0fb12cac5ba5a77ab07faa085d080809a8fa8f0403fa224a699f387b0a8e31dce54e5c7a3daee5419aa1dc7e3a46a874d8660b672da0549636befc4313da2bb93a2f3584c479e959f1abae5f7d4f0e5a67775eada9f730f8a498b9c6aa11cbc6d310798f99df593b570d6facd7a7dd1b6eacbf5fd191ff685a0b56bf78632caa3f1bc52ab83950af794cdcabd3b4679835cb1427c988ac301141f9eb2083fe21de045c6f0f8fcfa9583200c221260cdb06907c6f5ff", 0xd1}, {&(0x7f00000006c0)="baf5b76619786045af6538d2a61482dcfd3285447b0d38863701f8ba7b75a62c148061683150cb8630e546494077519786", 0x31}], 0x5}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="246f45cccfa01cd495764ec6c52ee4bd4bc044e335426b46aa4efb6cfd5e466ee00ebedcaf89f678e0a3c87c167a19c4a1d6a869fa11a7a7e603d3240123d30dfbd3f0cb5be3fedab1ea00a382cd0874a65821437b37ba57bd7a3a5706", 0x5d}, {&(0x7f0000002900)="b834f1183f1bee08471b9ca0045d762b07a29bf27b9d53f11c1069234bed5018cb719edcad8e0bc7b6052ed6d806882876b54df1238e949250067a74bc05ca552c419d830a40b5675ecac5af9a93ec1f281c177e7282649e75619212e3181f3d4b28bc59795cbf0fe547a6f0dac629aeaf3674660fac854e147d5563bf90a8bac2e91499425ca79c643819aa467589bdc468fbc8d3a17886cc096a434562d397bcf5c51a5afe4edd54d96ce07e4815403461c7a024d2b28c1d4df3311e40e07b997afeeb6fe3802e410b61f9250926b8f5a012a3a9ca44e6962018e23a5e4c3aa4b8", 0xe2}, {&(0x7f0000002a00)="e7d2f438d7828af2011a8460f44c70ffad9d8bd7909bfcb64d92c2ce1d03293d1cbc8bd73d14c9fff6224784dcda8b0bc6cb97eb64e9f085cc0151195bbc460f4280f75ca35def84025f2a1d14d40acb72c048697298d1c93153d0c70c5468ab0985688236acf2eaa6e06ac93ccbe60ea6ab57841b38f7b7328d8915bcd188546d4fde1b47187dddd916385c42ad5d0ee5534642afea98ac2c71ac43ba2e0833", 0xa0}], 0x3, &(0x7f0000002ac0)=[{0x34, 0x116, 0x400, "b8e10fb0db4656faf00c6581babefd7fe8dfc48ae69abad34b0b58d2da1d26800f11646756b51f1c"}, {0x64, 0x114, 0x4971, "d32a3316fa5cf13fa7126cd04cb17f0c9192df6c52662f46379829036d68e45fa1dffee7a74c96d92bb4ffba9ca26b29234fa99b5f3ff3a6c01b101c8133012557602b9a0add831201396ba96366d9d2aa12284565"}], 0x98}}], 0x3, 0x883)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  292.841092][T11212] vivid-008: =================  START STATUS  =================
[  292.849109][T11212] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  292.856040][T11212] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  292.863138][T11212] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  292.869901][T11212] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  292.877427][T11212] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  292.883591][T11212] v4l2-ctrls: vivid-008: Display Present: true inactive
[  292.890747][T11212] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  292.897487][T11212] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  292.904409][T11212] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  292.910974][T11212] vivid-008: ==================  END STATUS  ==================
[  292.932928][   T32] audit: type=1804 audit(1591378123.333:27): pid=11213 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir994621288/syzkaller.8GxM4o/3/bus" dev="sda1" ino=15877 res=1
17:28:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r2 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x2, 'syz_tun\x00', {0x23}, 0x7f})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'veth0_to_team\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x40}}, 0x0)

[  293.284612][T11226] vivid-008: =================  START STATUS  =================
[  293.292591][T11226] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  293.299740][T11226] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  293.306655][T11226] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  293.313572][T11226] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  293.321344][T11226] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  293.327396][T11226] v4l2-ctrls: vivid-008: Display Present: true inactive
17:28:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  293.334683][T11226] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  293.341695][T11226] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  293.348588][T11226] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  293.355076][T11226] vivid-008: ==================  END STATUS  ==================
17:28:43 executing program 1:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  293.402309][T11228] vivid-008: =================  START STATUS  =================
[  293.410777][T11228] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  293.417618][T11228] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  293.424717][T11228] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  293.431525][T11228] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  293.439204][T11228] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  293.449633][T11228] v4l2-ctrls: vivid-008: Display Present: true inactive
[  293.456643][T11228] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  293.463576][T11228] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  293.470460][T11228] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  293.477009][T11228] vivid-008: ==================  END STATUS  ==================
17:28:44 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})
socket$inet6_tcp(0xa, 0x1, 0x0)

[  293.727934][T11235] vivid-008: =================  START STATUS  =================
[  293.735898][T11235] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  293.743208][T11235] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  293.750268][T11235] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  293.756933][T11235] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  293.764561][T11235] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  293.770706][T11235] v4l2-ctrls: vivid-008: Display Present: true inactive
[  293.777799][T11235] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  293.784719][T11235] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  293.791624][T11235] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  293.798175][T11235] vivid-008: ==================  END STATUS  ==================
[  293.822335][T11236] FAT-fs (loop0): invalid media value (0x00)
[  293.831243][T11236] FAT-fs (loop0): Can't find a valid FAT filesystem
17:28:44 executing program 1:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  294.076986][T11249] vivid-008: =================  START STATUS  =================
[  294.085047][T11249] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  294.092121][T11249] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  294.099174][T11249] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  294.105857][T11249] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  294.113558][T11249] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  294.119761][T11249] v4l2-ctrls: vivid-008: Display Present: true inactive
[  294.126887][T11249] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  294.133802][T11249] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  294.140741][T11249] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  294.147226][T11249] vivid-008: ==================  END STATUS  ==================
[  294.187083][T11251] vivid-008: =================  START STATUS  =================
[  294.195253][T11251] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  294.202321][T11251] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  294.209375][T11251] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  294.216029][T11251] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  294.223770][T11251] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  294.229985][T11251] v4l2-ctrls: vivid-008: Display Present: true inactive
[  294.237249][T11251] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  294.244162][T11251] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  294.251088][T11251] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  294.257580][T11251] vivid-008: ==================  END STATUS  ==================
17:28:44 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000160100000800000075162ac826fe47e898895734b6b9042dd35b23e1a707c406527040ca8b18a24ae7ad0efd3ac0dfd6f991feb04fe930590468d8dedc84f5e94ceeede2a938bc7b0eabdafd1eb55cf5d27c10d37da6ce3bd05c9d7bbe087d5fbe02bd3b540e5b92c57a33d4a60bae63afb0588096604ffc5f50eb4bfa927633cf9a157b25abd12f570065"], 0x98}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="be4969d4bfa3657e2c33aa3bc73700e5242363e6eb3b80eb311072157cda8e26c095501ea6d741ad2556e36129f4eac7c6a4755146fae6aa981d8f7d89a2bcce7dfd7919aecd9f67e25cc1991406026e213904af7de6fa532628faba20e0380bb1bc305d28412c4ce1a1e078752bc19f6fdbb881ec62", 0x76}, {&(0x7f0000000500)="6af7e7c894f915fa94436f74a636e5fee60dcb5cfbbeb0f9ed1881ce5af6514a", 0x20}, {&(0x7f0000001900)="a2c9b548c0238d7f13375afe2ec4dbd529bb5cfb3481d0ae2ab148b9fa6ffa312fcfdf80d218fbd18eb6d4b4b6c335d6c98d70a49ea4ca306008a1c2e160b659350964e9cfc9dc4fcf21b0b6987e510de9dc5700d730ef3db76cdecef78a7ccb431ffa2b6c6ca8c0e5e6ecc44f60ea1b80c577e578035135177284099f9ca7b0304d8f3b253a3ad23f69a2703aebf053509c2238b1319831058ca2a717af1b31ce8780a277ff766587abd48c097cda84a9b9dce990000564c9440080d3881c03f412587a20bbc510da46692a726f924393d922d92574b40bb26aa4f33b2aba28abdb31b13167e5bb3b4000ec04d157c95e8082e164ad8ac2ec8032130277c6771a46f0b2f811fa28700a5844d0d0eaabcee774614c1fa7f49288589ed901e0f9f250fa100dabed5c2341dc11e0f9b7e2cab92613378c1d29a4e9dab65bbd873c283ace3a30b64715180d169ffca13f8d52c6081539b9fa365338f98ff8f8433f5db4a791e0b4b5e427045acbb1a0c3394752cbd5298a2204b6b863fc97cd06b85751211461360bce95d5744145f3ab0242f5c7c30fcc4633f53bf2faf1d04b3f50b0ec0e84acc30f64d527b7223c5aed602687e63b783cb7ba8431f6b969f8b234782f9b33f9d5c4082ec32db47ec4e43af4f87d9d83a1b04c5b329b3ae4850f1e21ffe26f75935ae3f317ca4a1f8ce31d95a2f755a7b92cb622ea9909944fe06b1b4effdfddc638908ce71570c410db7e1db511ecfcc0780e6a5e7e6dca8b0a8b07f2261e7c7ccf35bed43a3fba7a5525b3ef69ebc52ddabeb18afc7bd8e07f77c3cf20a77afb91cfdbcfd99d6989e437e7eac8274837156f0e5e61e5e9aee257080fc838c6380d6dae362754d4ce6dfbbaafdc13b062df966fbe553babd2f30826d29dee255bb0bb8b6c19c0cda3d046c7f6bfb92c666cd6379855a1fb4ce10ca7de978cec1c1654a6f28a7942de351ca7b0c43e73ea7b7b43a31e429f089e0c5b52f353e439219ea6488157a3847977ab5ea89e842fec378c3862c95b2ef432ca2f1eb7d856e11aeecc6c862a38d5ab415ab11308a798e6859a2f7965515a6b9d381af7cc0d41d88aaff315e418f89a4804df00e4428f7d900dbb9d8dc705eed797d5ccb20d9bbe7894d0ee000e1fe3ade1179bd2882f39dab11065f9e32531566521d1d181691abf9d8fced2a13ffff9a433cd313ce81101efd15063e1a32b279ae3d92171a820c7532e31cf957dc9cb695be7e0bbca96c64c102934cec0bdf6cabd87000c862172819e4ef28e9cac2e3909290b4e009a9541c8d7480acc0a1402267500417f79edd795f7e1899fa814bd18518723704e4e35ea83bd823ce9c4399078f3571180d60f54bf05d84ff0d7307c7e75e9efd901a3e04e5e5bdccb98c0c0deaa53c5c2abce7d55755e71eaf98d3feafe0b4b1c0de9be3dd26a8886984fde5dd7170b6d0e3cbd6cd452b280f38473923384c7c60981685c0e964c71cae337d9d5a94abe40bdc139627102f9e65435596e6359f7f013cfb5730f2d41e38f508d2e2c6b2251a4fb30f1dd00bbd44ebac88bfd378b0558a7231db30d5a4ef98311946acd75f9166096613f5fc0e03886e09a997f137f46c0f9bdda2184bbf187d864b0f0896a018ccba38af374ac60b682b5dacb37ab6efc762e72055f7c4fe184259c1ddc696fde31602d41b4f5dd296fad16b18dd74ebc7fa5c4e0a7b7dcf5de8995911e85758abe512a7ef699a04c41dbd3ee813e2b4bff91f8e176c3751ea1da25a47b461b63adf22fa1a4c15779ec45162afc5b017079a2566a19c8911a2c061460f20e9762011c078630365d8e514753934f102d7e5c74735f0dd2e6d757cc55226d0e8bd80be1880df8d07281bc09c1e0d7f7a3871c6856a3cd29040c0daf507e47c35d9afaed49ba6e9b95a35834c613f0bd801e61814c489ef3ee4687d5cdd6c23af96e8b3c164d555f2ef9685324e85d82b5b4ed5d662d3658b60538ed3658f8a84f34c108dcbdcf66d28c5a6093eaca3b7b6686aec9bc49d9ce3187041ef58ad53a3dcf186e71ff04af1c13c10dae1fcb3bbf42120458694ed9b74be0563679e106808c14238dac1112c4d599542b576a969fbe8c12e874c156284d4d61f46102dd793e8d2ea510b0cd9e2aefdbc03abc0ef2acb7bf39b6a6e8cd7a2dc48f17d4f0f8520241fe7ed6e0e2a2507663ae28f91b1f8359f14b6ac7d581a959d4695f65ec8335c463373e4e654c41bc2f2411eed93767bd53a6b990502b0fcf848ba575f8fd7ada409d5a69ef0a19fb6d8b30819b6d6476cf52bd7af37b704034222d7becf2b433cc3b2267817a0c9c93df43a3567c21888718399607cf119ee2281b43ee165f6060138a8d0f749b472d490c7805a8d0351ea15fb760ba87ccb63b6e36ab5863af8490989496bd853baafae27c5e5a8325c8c0f888c0b17d8e82a8362bd2208172c539a2d4b952e5606ab5bfa2003d6635a7499e99ea29868add9658f7614249808795d477d9dd281998a0d0ff54a8b0928d225f9151c4c70db72aa99b4053d9f9732f94d0577b90df516766906f9e16e3e9b55bccbf6c38e195e824b2b86c4a024f8aebb708b15598da1295ab647e7c163b26ac5df04072e537753f749ccc66096214fd327d954139cbdf8c15ee9a54e5f4092f7596f61f7aee7c239382b875eba605af4bcc3bce0390454fabd7616513419f22fabf4dcf2f0aa26a1baf37042f81588aba521191f175dacba360576d022d8918979bbec4198ef0a7a672f2f18aa3ba36020f95819bbc74bc8d982da4ab4e787fde1c6b8b5bfee5f451079a71d17a27eef2f014d565ec055deb192f86afa81eefa80da7883e581305f463091a24050e1b2bf34bbc70551811bf7d0f0c05ca606306ffddfc1ea36edb0dce6c16229192d17ca412d1752d826568de53583263c2084b1b38d2c758336de71d83c1a38ffac81fa259c06339007ec471457f327711e11404561249f9ddf00ee9f2ac2226ebf34b87df1c3220f4843221548ba0bf08fccbadab5ad151a0cf8567f1dc5263caea1217e66d822916753eb20611663611cd85cd7594a26df0aa3c2f0c26c94b80ee88460009ff531b90445216f557d53ae8dae662e0157d1b4fc4a1db32aea087f308a1b5ba31a5bf724314d669c0dd61342a7e80d5b6bde9efa97f4c6170e671df005828081e3b41884acd2923f8e9b3bef5c102b3b88e08484c02788fe6c233abfe1ca9eeb587648b0a9c333e38c564c57ce67a1773abc44fbd17e0bf909662f5f9c48419a61886ea39685191dfe28a1a922d22a0541e64ae378960c51d6b0697c19d01993c7d18d56e2583b969ec2d93b34928e49efa91f7df07bbc506c74c88baf22d6fabeacadc44b799853a45857d450f4eedd35cc98fc586fb4dffcf53d854473e8aac38b8303f237dd4c508be96aa7e50c7036b4ec92eabfc0961f122c8d536220e6fb5029b0fbaac2361eff7dddec8b8e5407493902d11b91f576bd36d6670289bacf50a303e5ff5c026b7cffd89fec02fa8adc852f5fb89c210c68dac00654d8365fb0c95c70be560a310096b9e4e285812c0a65d3781d158a550736e110752f328925aaba9a46f7bbd70dbca47bde0c37ca52f0bfdfd8ebee2f2fc66d4116715d4e76751e8ebbb8c0d09154012654fe0178b0cd7f2d4d9220c07d07d0ba702888c597c4fc7670f0f6e3b5baea468253ff24f830c387740a7be77085986ff059839b70c5174ef13c18f672a528897ee4b1219c5d7abb1cebb17cc17022157e1c41b56c2326e18de2db1c1d79ff48c1906e3dfa69f4dc3e52164bfd1de39033eb30003e9123b732a2f8072d336cd2b486c084da510840166cf494de34365bee4ea0634f9c6b1819d59de5f689f1b11caf9ec4cc48f98303c4723f0a2e1156f6c4359bf230605fb0df0f82194137a76faeff055a648c4d431aeac23fe91b19f5827ab2e51ebb04d77292edf394e5473e7687143e21f4c84d61d1b4564e36cfc7712683c187220d3664f9b442727e455e61ed3bed711d0354d2c737ee816993b6e6e1b581457a41bf7d20cc0c5c63e0d5aba1694a2c85240f7f6d2a1e75aca4e56dbc757da8da96bb6786d223c853f01167844fd06ca6855afa357f15c24170db195649904ff40fc43ae9da1e7a92f44f836e27f05fabbcedefc99b758993df5265583fbb414c5d17c4e0e9253842761e7ddae92fac919f63830f6ccfb8d29fa9af457d229eac81d87a114cfca2853b3abb847d0c4bf4caccf9d283238bce6599c7731a47d04b316050150e2874c6065376faea78851b202056ee21ae969499d846aa5f2f1b50370f7939ea301dc596985989c3fbe7efc696dcf94014da0bf7c0f935d7b74207e4145fcd5eb42ede22d2c20bf318e0d6eaa96761629f1278c32d84c19df539e1cb695f03c7ce98764c193802ec1b54bd976749d237f2fd6cd9101834d71404c6dc2bbb467ae6c2f17aa11d380f663d78b372a986b6a891196a716eb60ac4eefb524e1bcad6c326e8966edc8217170f6d3191f50b56e1ff25132cc85905ecfcc62cbde4c38f465fd02633418a40707ed8b05793bc617ebda832cf92194bae36fb92cb7c898211f83251746ad0d1ca9d49b97d99e6d2bd2ec803478c70e0a0233d72ada805e00d22c49ff5f7f56d744cbc7983869c121c0c0509e19377298b9c3c4dc3185e0b651b695920a8cb74b0375b76a3f41e082e7679a3e548bcd950570ff9ac24c2ffca068b28a76fcdf220a0c50ba8969ed77cd575d4f7085dfe33794097b9b8e98aa3c6b9e8721c9a2bf2818724d6542143b0d9b27bce93eae80ac6699509fa27d5dce844ab4fa72c62f908dd043e0d6facb91d82b8fbc7a0f986983abf287c5dd92916e667dc5eaa937bd1f240251543b9582cca9f7d5082035c81512cbeb2c117a345effabede31a3327210c5ac2b0ee1f4f304b593efb707f95b159427ee75e039c2adb9aa53e1e9b854cc468d00ebaf4453690d7adaa46111bead1df45774055d40130786b5b461304be01b6277337b79a0f226f54e37a0bec099c44e746fc15a6e722387bc7c96d62d3b9fd0d2852dc447ab13086615fe036cc923e0b5411abab3a1b46f69b5b9255521cce37eb7e67b986c24e01a7a15d26bd2355bcda4b75c42dbd94bf1f2d6834ea960ee97da98214860823f1c7bb93752c896ae104e615176705ac55857e6dfea9cf061f34a4cafd8d01594857ed3b500fcf1540b5c23cb9740557b07cab9ea6d72e41699deeceba1ea03fcadec9fdd6d9d5baf38ed0251de78d3c7804cad681a18c87680fab405102f0012e3a545a7f94e3c80f2a5e5a4e66da5d2dbef2d35620e883dbe951e81433d1f28506ea6c8a3a71a5257d7bec62cf9d7e9fce1cb708ef03f12ffae55f472634fcfdfbb915e0668ae0035f689db49d725788f9ea82f8780e157fad5ee7ef2a141c591082addc1c0071c5a549715f6992f7dd947d09b5d1636cdc797fe3972b6f930d05a65ec52c7cf74f95eb5194028522ce577fe528ed555bbf7efb0b3514cbd6cb32b8e72bf9c6c893ca33fb38a91912b0a913bf092c96c8abc286cd7db2a65937231b84ddfe4391524f314433af177755287af848a1ca587e2d2d8f9416c376dd8f5fe333af52c9d001472b3959a6c2086d9ef21548273bfc07c9dec044a3767b2784773c1bf22c29e56c7ac49cb7ea73f56ae5e850d8c39e09f6f0327af697d73d575b5702126f49b87ce3577bb196dc2f3da78bae3dc2fa6013feb80cc77286c004e4cd1bbbef1d407519", 0x1000}, {&(0x7f00000005c0)="21e0172fe136edc14c91f17eb7cd00f7b052f9787f3351ba8cfcdeb0fb12cac5ba5a77ab07faa085d080809a8fa8f0403fa224a699f387b0a8e31dce54e5c7a3daee5419aa1dc7e3a46a874d8660b672da0549636befc4313da2bb93a2f3584c479e959f1abae5f7d4f0e5a67775eada9f730f8a498b9c6aa11cbc6d310798f99df593b570d6facd7a7dd1b6eacbf5fd191ff685a0b56bf78632caa3f1bc52ab83950af794cdcabd3b4679835cb1427c988ac301141f9eb2083fe21de045c6f0f8fcfa9583200c221260cdb06907c6f5ff", 0xd1}, {&(0x7f00000006c0)="baf5b76619786045af6538d2a61482dcfd3285447b0d38863701f8ba7b75a62c148061683150cb8630e546494077519786", 0x31}], 0x5}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="246f45cccfa01cd495764ec6c52ee4bd4bc044e335426b46aa4efb6cfd5e466ee00ebedcaf89f678e0a3c87c167a19c4a1d6a869fa11a7a7e603d3240123d30dfbd3f0cb5be3fedab1ea00a382cd0874a65821437b37ba57bd7a3a5706", 0x5d}, {&(0x7f0000002900)="b834f1183f1bee08471b9ca0045d762b07a29bf27b9d53f11c1069234bed5018cb719edcad8e0bc7b6052ed6d806882876b54df1238e949250067a74bc05ca552c419d830a40b5675ecac5af9a93ec1f281c177e7282649e75619212e3181f3d4b28bc59795cbf0fe547a6f0dac629aeaf3674660fac854e147d5563bf90a8bac2e91499425ca79c643819aa467589bdc468fbc8d3a17886cc096a434562d397bcf5c51a5afe4edd54d96ce07e4815403461c7a024d2b28c1d4df3311e40e07b997afeeb6fe3802e410b61f9250926b8f5a012a3a9ca44e6962018e23a5e4c3aa4b8", 0xe2}, {&(0x7f0000002a00)="e7d2f438d7828af2011a8460f44c70ffad9d8bd7909bfcb64d92c2ce1d03293d1cbc8bd73d14c9fff6224784dcda8b0bc6cb97eb64e9f085cc0151195bbc460f4280f75ca35def84025f2a1d14d40acb72c048697298d1c93153d0c70c5468ab0985688236acf2eaa6e06ac93ccbe60ea6ab57841b38f7b7328d8915bcd188546d4fde1b47187dddd916385c42ad5d0ee5534642afea98ac2c71ac43ba2e0833", 0xa0}], 0x3, &(0x7f0000002ac0)=[{0x34, 0x116, 0x400, "b8e10fb0db4656faf00c6581babefd7fe8dfc48ae69abad34b0b58d2da1d26800f11646756b51f1c"}, {0x64, 0x114, 0x4971, "d32a3316fa5cf13fa7126cd04cb17f0c9192df6c52662f46379829036d68e45fa1dffee7a74c96d92bb4ffba9ca26b29234fa99b5f3ff3a6c01b101c8133012557602b9a0add831201396ba96366d9d2aa12284565"}], 0x98}}], 0x3, 0x883)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:44 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r1, 0x2008001)
ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f0000000140))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\a\x00\x00\x00\x00', @ANYRESDEC=0x0])
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff)
splice(r3, 0x0, r5, 0x0, 0x38, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06464b8, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0xda2, 0x0, [0xbe67, 0x7, 0x7fffffff, 0xfffeffff], [0xfffffff7, 0xffff8001, 0x7, 0x3f], [0x1, 0xbb, 0x1, 0x7], [0x400, 0x100000000, 0xf2, 0x3]})
getsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000002240), &(0x7f0000000000)=0x4)

17:28:45 executing program 1:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:45 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x2000000)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000024001d0f001b00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c00020089ff010000000000"], 0x3c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
sendfile(r5, r0, 0x0, 0x80004101)

17:28:45 executing program 1:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  294.950003][T11268] FAT-fs (loop0): invalid media value (0x00)
[  294.956159][T11268] FAT-fs (loop0): Can't find a valid FAT filesystem
17:28:45 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2d452718, 0x2, 0x200c, 0x5, 0x0, 0x1, 0x0, 0x5}})

17:28:45 executing program 1:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  295.480327][T11285] vivid-008: =================  START STATUS  =================
[  295.488443][T11285] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  295.495337][T11285] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  295.502482][T11285] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  295.512112][T11285] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  295.519727][T11285] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  295.525839][T11285] v4l2-ctrls: vivid-008: Display Present: true inactive
[  295.533041][T11285] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  295.539879][T11285] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  295.546925][T11285] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  295.553592][T11285] vivid-008: ==================  END STATUS  ==================
[  295.606203][T11287] vivid-008: =================  START STATUS  =================
[  295.614416][T11287] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  295.621510][T11287] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  295.628526][T11287] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  295.635182][T11287] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  295.642931][T11287] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  295.649066][T11287] v4l2-ctrls: vivid-008: Display Present: true inactive
17:28:46 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  295.656147][T11287] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  295.663095][T11287] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  295.669958][T11287] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  295.676446][T11287] vivid-008: ==================  END STATUS  ==================
[  295.718568][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  295.729943][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  295.758518][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  295.798820][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
17:28:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:46 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000160100000800000075162ac826fe47e898895734b6b9042dd35b23e1a707c406527040ca8b18a24ae7ad0efd3ac0dfd6f991feb04fe930590468d8dedc84f5e94ceeede2a938bc7b0eabdafd1eb55cf5d27c10d37da6ce3bd05c9d7bbe087d5fbe02bd3b540e5b92c57a33d4a60bae63afb0588096604ffc5f50eb4bfa927633cf9a157b25abd12f570065"], 0x98}}, {{&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="be4969d4bfa3657e2c33aa3bc73700e5242363e6eb3b80eb311072157cda8e26c095501ea6d741ad2556e36129f4eac7c6a4755146fae6aa981d8f7d89a2bcce7dfd7919aecd9f67e25cc1991406026e213904af7de6fa532628faba20e0380bb1bc305d28412c4ce1a1e078752bc19f6fdbb881ec62", 0x76}, {&(0x7f0000000500)="6af7e7c894f915fa94436f74a636e5fee60dcb5cfbbeb0f9ed1881ce5af6514a", 0x20}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f00000005c0)="21e0172fe136edc14c91f17eb7cd00f7b052f9787f3351ba8cfcdeb0fb12cac5ba5a77ab07faa085d080809a8fa8f0403fa224a699f387b0a8e31dce54e5c7a3daee5419aa1dc7e3a46a874d8660b672da0549636befc4313da2bb93a2f3584c479e959f1abae5f7d4f0e5a67775eada9f730f8a498b9c6aa11cbc6d310798f99df593b570d6facd7a7dd1b6eacbf5fd191ff685a0b56bf78632caa3f1bc52ab83950af794cdcabd3b4679835cb1427c988ac301141f9eb2083fe21de045c6f0f8fcfa9583200c221260cdb06907c6f5ff", 0xd1}, {&(0x7f00000006c0)="baf5b76619786045af6538d2a61482dcfd3285447b0d38863701f8ba7b75a62c148061683150cb8630e546494077519786", 0x31}], 0x5}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="246f45cccfa01cd495764ec6c52ee4bd4bc044e335426b46aa4efb6cfd5e466ee00ebedcaf89f678e0a3c87c167a19c4a1d6a869fa11a7a7e603d3240123d30dfbd3f0cb5be3fedab1ea00a382cd0874a65821437b37ba57bd7a3a5706", 0x5d}, {&(0x7f0000002900)="b834f1183f1bee08471b9ca0045d762b07a29bf27b9d53f11c1069234bed5018cb719edcad8e0bc7b6052ed6d806882876b54df1238e949250067a74bc05ca552c419d830a40b5675ecac5af9a93ec1f281c177e7282649e75619212e3181f3d4b28bc59795cbf0fe547a6f0dac629aeaf3674660fac854e147d5563bf90a8bac2e91499425ca79c643819aa467589bdc468fbc8d3a17886cc096a434562d397bcf5c51a5afe4edd54d96ce07e4815403461c7a024d2b28c1d4df3311e40e07b997afeeb6fe3802e410b61f9250926b8f5a012a3a9ca44e6962018e23a5e4c3aa4b8", 0xe2}, {&(0x7f0000002a00)="e7d2f438d7828af2011a8460f44c70ffad9d8bd7909bfcb64d92c2ce1d03293d1cbc8bd73d14c9fff6224784dcda8b0bc6cb97eb64e9f085cc0151195bbc460f4280f75ca35def84025f2a1d14d40acb72c048697298d1c93153d0c70c5468ab0985688236acf2eaa6e06ac93ccbe60ea6ab57841b38f7b7328d8915bcd188546d4fde1b47187dddd916385c42ad5d0ee5534642afea98ac2c71ac43ba2e0833", 0xa0}], 0x3, &(0x7f0000002ac0)=[{0x34, 0x116, 0x400, "b8e10fb0db4656faf00c6581babefd7fe8dfc48ae69abad34b0b58d2da1d26800f11646756b51f1c"}, {0x64, 0x114, 0x4971, "d32a3316fa5cf13fa7126cd04cb17f0c9192df6c52662f46379829036d68e45fa1dffee7a74c96d92bb4ffba9ca26b29234fa99b5f3ff3a6c01b101c8133012557602b9a0add831201396ba96366d9d2aa12284565"}], 0x98}}], 0x3, 0x883)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  295.954193][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  296.001723][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
17:28:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x10, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x8, 0x9e2d}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="08007f4cb493b8212a81d6922d67700b03003a0d0000"], 0x44}}, 0x0)

17:28:46 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:46 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)

[  296.343270][T11306] FAT-fs (loop0): invalid media value (0x00)
[  296.349995][T11306] FAT-fs (loop0): Can't find a valid FAT filesystem
[  296.439043][T11310] sctp: [Deprecated]: syz-executor.4 (pid 11310) Use of struct sctp_assoc_value in delayed_ack socket option.
[  296.439043][T11310] Use struct sctp_sack_info instead
17:28:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  296.691026][T11320] vivid-008: =================  START STATUS  =================
[  296.698868][T11320] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  296.705710][T11320] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  296.712838][T11320] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  296.719788][T11320] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  296.727329][T11320] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  296.733584][T11320] v4l2-ctrls: vivid-008: Display Present: true inactive
[  296.740782][T11320] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  296.747530][T11320] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  296.754583][T11320] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  296.761401][T11320] vivid-008: ==================  END STATUS  ==================
[  296.804206][T11322] vivid-008: =================  START STATUS  =================
[  296.812713][T11322] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  296.819653][T11322] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  296.826559][T11322] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  296.833326][T11322] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  296.840927][T11322] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  296.846962][T11322] v4l2-ctrls: vivid-008: Display Present: true inactive
17:28:47 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  296.854076][T11322] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  296.861020][T11322] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  296.867785][T11322] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  296.874368][T11322] vivid-008: ==================  END STATUS  ==================
[  297.005269][T11324] FAT-fs (loop0): invalid media value (0x00)
[  297.011734][T11324] FAT-fs (loop0): Can't find a valid FAT filesystem
[  297.175451][T11310] sctp: [Deprecated]: syz-executor.4 (pid 11310) Use of struct sctp_assoc_value in delayed_ack socket option.
[  297.175451][T11310] Use struct sctp_sack_info instead
[  297.220571][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
17:28:47 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)

17:28:47 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:47 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  297.616711][T11344] vivid-008: =================  START STATUS  =================
[  297.624836][T11344] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  297.631891][T11344] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  297.639067][T11344] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  297.645730][T11344] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  297.653484][T11344] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
17:28:48 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  297.661548][T11344] v4l2-ctrls: vivid-008: Display Present: true inactive
[  297.668731][T11344] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  297.675519][T11344] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  297.682430][T11344] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  297.689031][T11344] vivid-008: ==================  END STATUS  ==================
17:28:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:48 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:48 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
socket(0x200000000000011, 0x3, 0x0)

17:28:48 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  298.564985][T11369] vivid-008: =================  START STATUS  =================
[  298.572866][T11369] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  298.580091][T11369] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  298.587038][T11369] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  298.593921][T11369] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  298.601613][T11369] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  298.607671][T11369] v4l2-ctrls: vivid-008: Display Present: true inactive
17:28:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  298.614904][T11369] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  298.621851][T11369] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  298.628907][T11369] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  298.635460][T11369] vivid-008: ==================  END STATUS  ==================
17:28:49 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:49 executing program 5:
pipe2$9p(&(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1)
r1 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40202)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000091)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r0, 0xf, 0x0, 0x7, &(0x7f0000000240)=[0x0], 0x1}, 0x20)
setpgid(0x0, 0x0)
semget$private(0x0, 0x0, 0x8)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000340)={r2})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000003c0)=0x9)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e)
pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00')
get_thread_area(&(0x7f0000000500)={0x5b000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1})
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

17:28:49 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, 0x0)

17:28:49 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)

[  299.472420][T11389] vivid-008: =================  START STATUS  =================
[  299.480556][T11389] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  299.487403][T11389] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  299.494617][T11389] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  299.501435][T11389] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  299.509103][T11389] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  299.515149][T11389] v4l2-ctrls: vivid-008: Display Present: true inactive
[  299.522472][T11389] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  299.529577][T11389] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  299.536321][T11389] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  299.543124][T11389] vivid-008: ==================  END STATUS  ==================
17:28:50 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, 0x0)

17:28:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:50 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000140)={0x0, {0x8, 0x122}})

17:28:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r0, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe)

17:28:50 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, 0x0)

[  300.413998][T11406] vivid-008: =================  START STATUS  =================
[  300.421860][T11406] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  300.428971][T11406] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  300.435894][T11406] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  300.442755][T11406] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  300.450427][T11406] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  300.456477][T11406] v4l2-ctrls: vivid-008: Display Present: true inactive
[  300.463683][T11406] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  300.470638][T11406] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  300.477454][T11406] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  300.484102][T11406] vivid-008: ==================  END STATUS  ==================
17:28:50 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  300.589158][T11405] IPVS: ftp: loaded support on port[0] = 21
17:28:51 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r0, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe)

17:28:51 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  301.365001][T11459] vivid-008: =================  START STATUS  =================
[  301.373040][T11459] v4l2-ctrls: vivid-008: Enable Output Cropping: true
[  301.380429][T11459] v4l2-ctrls: vivid-008: Enable Output Composing: true
[  301.387349][T11459] v4l2-ctrls: vivid-008: Enable Output Scaler: true
[  301.394258][T11459] v4l2-ctrls: vivid-008: Tx RGB Quantization Range: Automatic
[  301.402000][T11459] v4l2-ctrls: vivid-008: Transmit Mode: HDMI
[  301.408138][T11459] v4l2-ctrls: vivid-008: Display Present: true inactive
[  301.415902][T11459] v4l2-ctrls: vivid-008: Hotplug Present: 0x00000001
[  301.422886][T11459] v4l2-ctrls: vivid-008: RxSense Present: 0x00000001
[  301.429830][T11459] v4l2-ctrls: vivid-008: EDID Present: 0x00000001
[  301.436337][T11459] vivid-008: ==================  END STATUS  ==================
[  301.970751][T11405] chnl_net:caif_netlink_parms(): no params data found
[  302.340162][T11405] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.347396][T11405] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.357406][T11405] device bridge_slave_0 entered promiscuous mode
[  302.401991][T11405] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.409382][T11405] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.419075][T11405] device bridge_slave_1 entered promiscuous mode
[  302.473741][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.490269][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.540053][T11405] team0: Port device team_slave_0 added
[  302.554406][T11405] team0: Port device team_slave_1 added
[  302.596959][T11405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.604596][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.630829][T11405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.646224][T11405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.654175][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.680363][T11405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.791819][T11405] device hsr_slave_0 entered promiscuous mode
[  302.830562][T11405] device hsr_slave_1 entered promiscuous mode
[  302.868818][T11405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  302.876632][T11405] Cannot create hsr debugfs directory
[  303.068077][T11405] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  303.113545][T11405] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  303.164696][T11405] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  303.224711][T11405] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  303.384299][T11405] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.406177][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  303.415407][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  303.435858][T11405] 8021q: adding VLAN 0 to HW filter on device team0
[  303.452902][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  303.462487][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  303.471972][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.479445][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.491620][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  303.504760][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  303.514946][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  303.524543][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.531895][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.580983][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  303.592046][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  303.603364][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  303.613284][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  303.623843][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  303.634414][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  303.644294][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.654251][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.664028][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.673513][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.689983][T11405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.701119][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  303.733180][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.741257][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.765349][T11405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.854262][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  303.864677][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.905163][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  303.914446][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  303.930139][T11405] device veth0_vlan entered promiscuous mode
[  303.945149][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  303.955749][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  303.975240][T11405] device veth1_vlan entered promiscuous mode
[  304.021460][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  304.030871][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  304.047387][T11405] device veth0_macvtap entered promiscuous mode
[  304.068879][T11405] device veth1_macvtap entered promiscuous mode
[  304.096572][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  304.107455][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.117466][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  304.128066][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.138133][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  304.148851][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.158918][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  304.170501][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.180566][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  304.191176][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.203565][T11405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.211919][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  304.221912][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  304.231184][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  304.240872][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  304.261344][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  304.273546][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.284023][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  304.294859][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.305385][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  304.315971][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.326232][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  304.337178][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.347447][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  304.358703][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.372292][T11405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.381301][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  304.391617][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
17:28:55 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0xbb, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

17:28:55 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r0, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe)

17:28:55 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:55 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:55 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
r3 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000004c0)={0x2, 0x1, &(0x7f0000000240)=""/224, &(0x7f0000000340)=""/157, &(0x7f0000000140)=""/98, 0x4000})
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000500))
splice(r0, 0x0, r2, 0x0, 0x38, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{<r4=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000100)={r4, 0x2})
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6572726f72733d72656d092bfdea6c9200024f"])

[  305.057301][T11686] JFS: rem	+ýêl’ is an invalid error handler
17:28:55 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  305.167279][T11695] JFS: rem	+ýêl’ is an invalid error handler
17:28:55 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:55 executing program 4:

17:28:55 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(0x0, 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:56 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:56 executing program 5:

17:28:56 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:56 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0})

17:28:56 executing program 4:

17:28:56 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(0x0, 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:56 executing program 3:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:56 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0})

17:28:56 executing program 5:

17:28:56 executing program 4:

17:28:57 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:57 executing program 4:

17:28:57 executing program 4:

17:28:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(0x0, 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:57 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0})

17:28:57 executing program 5:

17:28:57 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:57 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:57 executing program 4:

17:28:57 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:57 executing program 5:

17:28:58 executing program 4:

17:28:58 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:58 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:58 executing program 5:

17:28:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:58 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:58 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:28:58 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:58 executing program 4:

17:28:58 executing program 5:

17:28:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:28:58 executing program 3:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:59 executing program 5:

17:28:59 executing program 4:

17:28:59 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x0, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:59 executing program 4:

17:28:59 executing program 3:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:28:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(0x0, &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:00 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:00 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x0, [], @p_u16=0x0}})

17:29:00 executing program 5:

17:29:00 executing program 4:

17:29:00 executing program 3:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(0x0, &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:00 executing program 4:

17:29:00 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, 0x0)

17:29:00 executing program 5:

17:29:00 executing program 1:

17:29:01 executing program 4:

17:29:01 executing program 1:

17:29:01 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:01 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, 0x0)

17:29:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

17:29:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x12, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
connect$inet(r0, &(0x7f0000000180), 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000011c0)=ANY=[], 0xa)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee)
r2 = dup(0xffffffffffffffff)
ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000200)=""/190)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x108000, 0x3}, 0x14)
shutdown(r1, 0x1)

17:29:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(0x0, &(0x7f0000000200)=""/124)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0xffffc7f8, 0x0, 0x0)

17:29:01 executing program 1:
unshare(0x44000600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
ioctl$PPPIOCGNPMODE(r0, 0x8004745a, &(0x7f0000000180))

17:29:02 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, 0x0)

17:29:02 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

17:29:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000260007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a08a1c1e09b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

[  312.001743][T11908] IPVS: ftp: loaded support on port[0] = 21
[  312.103330][T11914] new mount options do not match the existing superblock, will be ignored
17:29:02 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  312.270502][T11914] new mount options do not match the existing superblock, will be ignored
[  312.434099][T11908] IPVS: ftp: loaded support on port[0] = 21
17:29:03 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:03 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:03 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x25, &(0x7f0000000440), 0x12f85e)

17:29:03 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  312.888377][T11981] TCP: TCP_TX_DELAY enabled
17:29:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:03 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc02c8d0}, 0x880)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00')

17:29:03 executing program 4:
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
statfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)=""/242)

17:29:03 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:03 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  313.232419][   T39] tipc: TX() has been purged, node left!
[  313.289548][T11991] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970769)
[  313.298648][T11991] FAT-fs (loop0): Filesystem has been set read-only
[  313.431633][T11991] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 970769)
17:29:03 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:04 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:04 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='sync\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000001}, 0x40)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

17:29:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents64(r0, 0x0, 0x0)

17:29:04 executing program 2:
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:04 executing program 1:
unshare(0x44060400)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\bcpusetmd5sux[\x00')

17:29:04 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:04 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x10004000000002, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

17:29:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[  314.563108][T12043] IPVS: ftp: loaded support on port[0] = 21
17:29:05 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0})

17:29:05 executing program 2:
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  314.776610][T12033] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  314.786821][T12033] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  314.796857][T12033] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  314.811154][T12033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[  314.881342][T12043] IPVS: ftp: loaded support on port[0] = 21
17:29:05 executing program 1:
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4)
recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0)

17:29:05 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0})

17:29:05 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='sync\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000001}, 0x40)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

17:29:05 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:05 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
getsockname$inet6(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x1c)

17:29:05 executing program 2:
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  315.573814][   T32] audit: type=1400 audit(1591378145.972:28): avc:  denied  { name_bind } for  pid=12114 comm="syz-executor.4" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
[  315.598644][   T32] audit: type=1400 audit(1591378145.972:29): avc:  denied  { node_bind } for  pid=12114 comm="syz-executor.4" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1
[  315.621070][   T32] audit: type=1400 audit(1591378145.992:30): avc:  denied  { name_connect } for  pid=12114 comm="syz-executor.4" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
17:29:06 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0})

17:29:06 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:06 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0)

17:29:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, 0x0, 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:06 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

[  316.407568][T12116] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  316.417637][T12116] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  316.427628][T12116] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  316.704333][T12116] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
17:29:07 executing program 1:
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local={0xfe, 0x80, [0x2]}}}}}}}, 0x0)

17:29:07 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  317.839388][   T39] tipc: TX() has been purged, node left!
[  317.999195][   T39] tipc: TX() has been purged, node left!
17:29:09 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='sync\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000001}, 0x40)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

17:29:09 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, 0x0, 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:09 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4022, 0x14)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

17:29:09 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, 0x0, 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:09 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1df01815, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:09 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:09 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:09 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x0, [], @p_u16=&(0x7f0000000000)=0x7}})

17:29:10 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  319.741690][T12194] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  319.751801][T12194] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  319.761822][T12194] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  320.251078][T12194] EXT4-fs: failed to create workqueue
[  320.256610][T12194] EXT4-fs (loop5): mount failed
17:29:10 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='sync\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000001}, 0x40)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

17:29:10 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:10 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000016012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x82, 0x4)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x2008002)
sendfile(r0, r2, 0x0, 0x200fff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@private0}, 0x14)

17:29:11 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x0, [], @p_u16=0x0}})

17:29:11 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:11 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:11 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:11 executing program 3:
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000070601020000009e6578d99d4af8e1a10500010007000000080006"], 0x24}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x80002, 0xc)
sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

17:29:11 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  321.472465][T12238] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  321.483685][T12238] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  321.493733][T12238] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  321.926330][T12238] EXT4-fs: failed to create workqueue
[  321.932133][T12238] EXT4-fs (loop5): mount failed
17:29:12 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000500)=0x40003)
readv(0xffffffffffffffff, &(0x7f0000000000), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000002c0))
io_cancel(0x0, 0x0, 0x0)

17:29:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe)

17:29:12 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:12 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

17:29:12 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  322.399501][   T39] tipc: TX() has been purged, node left!
17:29:12 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)

17:29:13 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="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", 0x25a}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)

17:29:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x2b, 0x0, 0x5, 0xa, 0x4, 0x4, 0x12}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xe0001, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

17:29:13 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:13 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:13 executing program 5:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000001080), &(0x7f0000048000), 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
exit(0x0)

[  323.318895][T12312] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  323.327736][T12314] ptrace attach of "/root/syz-executor.3"[12309] was attempted by "/root/syz-executor.3"[12314]
17:29:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0))

[  323.424779][T12320] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
17:29:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)

17:29:14 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:14 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x332, 0x0)

17:29:14 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  323.932506][T12347] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:14 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1000}, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r3, 0x0, 0x30009, 0x0)

17:29:14 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$vcsu(0x0, 0x0, 0xb81)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000240)=""/153)
syz_open_dev$tty20(0xc, 0x4, 0x1)
open_tree(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0xfffffff7}, 0x8)
dup3(r1, r2, 0x0)
dup2(r0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x3301)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

17:29:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)

17:29:14 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  324.549394][T12368] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ppoll(&(0x7f0000000440)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040))

17:29:15 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, 0x0, 0x8080fffffffe)

17:29:15 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x948200}}, 0x50)
lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000500), 0x24, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0xb)

17:29:15 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:15 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:15 executing program 5:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000016012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x82, 0x4)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x2008002)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x200fff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005100)=@newqdisc={0x88, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe779, 0x8, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@private0={0xfc, 0x0, [], 0x1}, r3}, 0x14)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0)

[  325.455193][T12399] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:16 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, 0x0, 0x8080fffffffe)

[  325.799129][T12415] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:16 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:16 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
preadv(r0, &(0x7f0000000640), 0x100000000000017d, 0x0)

17:29:16 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:16 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:16 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:16 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00')
read$char_usb(r0, 0x0, 0x0)

17:29:16 executing program 1:

17:29:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, 0x0, 0x8080fffffffe)

[  326.512692][T12447] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:17 executing program 5:

17:29:17 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:17 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:17 executing program 1:

17:29:17 executing program 5:

17:29:17 executing program 5:

17:29:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x0)

[  327.275408][T12473] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:17 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:17 executing program 5:

17:29:17 executing program 1:

17:29:17 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:17 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c000500000005002600010000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:18 executing program 5:

17:29:18 executing program 1:

17:29:18 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x6, 0x80000d)

[  327.907193][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  327.917025][T12498] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x0)

17:29:18 executing program 5:

17:29:18 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c000500000005002600010000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:18 executing program 1:

17:29:19 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x14107e, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[], 0x281)
sendfile(r1, r1, &(0x7f0000000000), 0x0)

17:29:19 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:19 executing program 5:

[  328.792862][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  328.802690][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:19 executing program 1:

17:29:19 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c000500000005002600010000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:19 executing program 5:

17:29:19 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x80000d)

17:29:19 executing program 0:

17:29:19 executing program 5:

17:29:19 executing program 1:

[  329.398822][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  329.408562][T12550] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:19 executing program 0:

17:29:20 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:20 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x80000d)

17:29:20 executing program 1:

17:29:20 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:20 executing program 5:

17:29:20 executing program 0:

[  329.993856][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  330.003529][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:20 executing program 5:

17:29:20 executing program 1:

17:29:20 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x80000d)

17:29:20 executing program 0:

17:29:20 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:20 executing program 1:

[  330.629679][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  330.639163][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:21 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0xfd)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:21 executing program 0:

17:29:21 executing program 5:

17:29:21 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:21 executing program 1:

17:29:21 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:21 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

[  331.068859][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  331.078439][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:21 executing program 5:

17:29:21 executing program 0:

17:29:21 executing program 1:

17:29:21 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:21 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  331.710546][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:22 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0xfd)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:22 executing program 5:

17:29:22 executing program 1:

17:29:22 executing program 0:

17:29:22 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:22 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  332.277034][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:22 executing program 1:

17:29:22 executing program 5:

17:29:22 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}, 0x4}], 0x400000000000085, 0x0)

17:29:22 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:23 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:23 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)={[{@dmode={'dmode'}}]})

[  333.149788][T12659] ISOFS: Unable to identify CD-ROM format.
17:29:24 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0xfd)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:24 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:24 executing program 1:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0)

17:29:24 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f000300000000000000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:24 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f00000001c0)=[@iv={0x18}], 0x18}], 0x1, 0x0)

17:29:24 executing program 0:

17:29:24 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:24 executing program 1:

17:29:24 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:24 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000540)={@hci, {0x0}, 0x0}, 0xa0)

17:29:24 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
userfaultfd(0x0)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:25 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000100), 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], 0x8)

17:29:25 executing program 4:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:25 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:25 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f000300000000000000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:25 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000, 0x4})

17:29:25 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, &(0x7f0000000080)=[{}]})

17:29:25 executing program 0:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setuid(r1)
mount$9p_xen(0x0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0, 0x0, 0x0)

[  335.334135][T12725] __nla_validate_parse: 2 callbacks suppressed
[  335.334161][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:25 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17:29:26 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x400000, 0x0)
unlinkat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, 0x0, &(0x7f0000002000))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
mincore(&(0x7f0000000000/0x400000)=nil, 0x400003, &(0x7f0000000140)=""/164)

17:29:26 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f000300000000000000"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:26 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

[  336.084363][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:26 executing program 4:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:26 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x7fffdfa1c000})

17:29:26 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}, 0x4}], 0x400000000000085, 0x0)

17:29:26 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000800000000000000000000000851000000300000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x10)
semget(0x1, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:29:26 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x80000d)

17:29:26 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:27 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r0)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, &(0x7f0000000080)=0x6, 0x80000d)

17:29:27 executing program 1:
unlinkat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:27 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:27 executing program 0:
unlinkat(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:27 executing program 3:
socket$unix(0x1, 0x2, 0x0)
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000100)="3edde90f01cbc4e27d237300b805000000b98daedf400f01d90f20c035000000800f22c0c4e1f97fb600800000c4e3c5cffb000f01cfc744240000000000c744240201000000c7442406000000000f011c240f35", 0x54}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:29:28 executing program 4:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:28 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:29:28 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
setuid(r1)
pivot_root(0x0, 0x0)

17:29:28 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:28 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:28 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x400000, 0x0)
unlinkat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, 0x0, &(0x7f0000002000))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:28 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000800000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

17:29:28 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:29 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000000)='ip6gre0\x00')

17:29:29 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

17:29:29 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:29 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:29:29 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:29 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

[  339.255650][   T32] audit: type=1804 audit(1591378169.651:31): pid=12878 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir694277580/syzkaller.r7WT3P/122/bus" dev="sda1" ino=16144 res=1
17:29:29 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0)

17:29:29 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

[  339.442270][   T32] audit: type=1804 audit(1591378169.801:32): pid=12882 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir694277580/syzkaller.r7WT3P/122/bus" dev="sda1" ino=16144 res=1
17:29:30 executing program 0:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2200041, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

17:29:30 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400fffffffe08000200e0"], 0x28}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0)

[  339.726518][T12893] tipc: MTU too low for tipc bearer
17:29:30 executing program 1:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0)
unlink(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

17:29:30 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:30 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  339.979067][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  340.056322][T12907] XFS (loop0): Invalid superblock magic number
17:29:30 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  340.344904][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
17:29:30 executing program 0:
unshare(0x2e040600)
r0 = socket$inet6(0xa, 0x1, 0x0)
flistxattr(r0, 0x0, 0x0)

17:29:30 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:30 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x53b000}, 0x200000})
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

17:29:30 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

17:29:31 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:31 executing program 0:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:31 executing program 1:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00')
creat(&(0x7f0000000780)='./file0\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
unlink(&(0x7f0000000040)='./file0\x00')

[  340.902419][T12961] XFS (loop5): Mounting V4 Filesystem
[  340.959424][T12961] XFS (loop5): totally zeroed log
[  340.968040][    T5] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  340.979189][    T5] XFS (loop5): Unmount and run xfs_repair
[  340.985235][    T5] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  340.992945][    T5] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.002130][    T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.011314][    T5] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.020459][    T5] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.029607][    T5] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.038674][    T5] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.047939][    T5] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.057078][    T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  341.066529][T12961] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  341.078204][T12961] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  341.087766][T12961] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:31 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:31 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, &(0x7f0000000080)=[{}, {}]})

17:29:31 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:31 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:32 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

17:29:32 executing program 0:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

17:29:32 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:32 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:32 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

[  342.152491][T13023] XFS (loop5): Mounting V4 Filesystem
[  342.183453][T13023] XFS (loop5): totally zeroed log
17:29:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  342.208682][    T5] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  342.219459][    T5] XFS (loop5): Unmount and run xfs_repair
[  342.225298][    T5] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  342.233125][    T5] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.242288][    T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.251472][    T5] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.260785][    T5] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.269957][    T5] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.279003][    T5] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.288150][    T5] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.297486][    T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  342.323704][T13023] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  342.334973][T13023] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  342.344521][T13023] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:32 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:32 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:33 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

17:29:33 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:33 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x0)

17:29:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:33 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:33 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x6, 0x80000d)

[  343.043179][T13072] XFS (loop5): Mounting V4 Filesystem
[  343.078510][T13072] XFS (loop5): totally zeroed log
[  343.088696][ T9781] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  343.099448][ T9781] XFS (loop5): Unmount and run xfs_repair
[  343.105341][ T9781] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  343.112996][ T9781] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.122115][ T9781] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.131127][ T9781] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.142754][ T9781] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.151802][ T9781] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.160817][ T9781] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.169821][ T9781] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.178789][ T9781] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  343.200250][T13072] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  343.210912][T13072] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  343.220387][T13072] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x0)

17:29:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:33 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:34 executing program 0:
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="b353b5c1", 0x4}], 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000000000000}, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4f3e7b1c60d5bf02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9, 0x6e, 0x0, @link_local}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x40003ad, 0x2000000)

17:29:34 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x6, 0x80000d)

17:29:34 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

17:29:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:34 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:34 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:34 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x6, 0x80000d)

[  344.333765][T13122] XFS (loop5): Mounting V4 Filesystem
[  344.345726][T13122] XFS (loop5): totally zeroed log
[  344.353395][ T9781] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  344.364009][ T9781] XFS (loop5): Unmount and run xfs_repair
[  344.369879][ T9781] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  344.377315][ T9781] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.387678][ T9781] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.396669][ T9781] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.405643][ T9781] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.414695][ T9781] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.423706][ T9781] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.432773][ T9781] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.441771][ T9781] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  344.451250][T13122] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  344.462049][T13122] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  344.471515][T13122] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:35 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:35 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x80000d)

17:29:35 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:35 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
dup(r0)

17:29:35 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000002000))
unlink(&(0x7f0000000040)='./file0\x00')

17:29:35 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:35 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x80000d)

17:29:35 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:35 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  345.754772][T13180] XFS (loop5): Mounting V4 Filesystem
[  345.801838][T13180] XFS (loop5): totally zeroed log
[  345.809091][ T9781] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  345.820457][ T9781] XFS (loop5): Unmount and run xfs_repair
[  345.826355][ T9781] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  345.833890][ T9781] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.842892][ T9781] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.851901][ T9781] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.860906][ T9781] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.869930][ T9781] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.878846][ T9781] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.887854][ T9781] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.897216][ T9781] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  345.909739][T13180] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  345.920383][T13180] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  345.929811][T13180] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:36 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:36 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x80000d)

17:29:36 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$FIONREAD(r0, 0xc0045401, 0x0)

17:29:36 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:36 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, 0x0, 0x80000d)

17:29:36 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

17:29:37 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0), 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:37 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:37 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}, 0x4}], 0x400000000000085, 0x0)

[  346.795339][T13216] XFS (loop5): Mounting V4 Filesystem
[  346.891580][T13216] XFS (loop5): totally zeroed log
[  346.898217][   T31] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  346.908624][   T31] XFS (loop5): Unmount and run xfs_repair
[  346.914587][   T31] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  346.922139][   T31] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.931180][   T31] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.941299][   T31] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.950328][   T31] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.959346][   T31] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.968264][   T31] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.978639][   T31] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
17:29:37 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, 0x0, 0x80000d)

[  346.987730][   T31] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  346.997205][T13216] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  347.007721][T13216] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  347.017289][T13216] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:37 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f070000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:37 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:37 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, 0x0, 0x80000d)

17:29:37 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  347.473655][T13245] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:38 executing program 0:
syz_genetlink_get_family_id$l2tp(0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240))

17:29:38 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080), 0x80000d)

17:29:38 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f070000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:38 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0), 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  347.875135][T13256] XFS (loop5): Mounting V4 Filesystem
[  347.914224][T13256] XFS (loop5): totally zeroed log
17:29:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  348.005683][    T5] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  348.017692][    T5] XFS (loop5): Unmount and run xfs_repair
[  348.024080][    T5] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  348.031745][    T5] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.040904][    T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.050080][    T5] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.059245][    T5] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.069124][    T5] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.078359][    T5] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.087545][    T5] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.096697][    T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.107477][T13256] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  348.118320][T13256] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  348.128077][T13256] XFS (loop5): Failed to read root inode 0xd88, error 117
17:29:38 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x7, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0x0, 0x2, 0x0, r0}, @exit]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x10)

17:29:38 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080), 0x80000d)

[  348.325966][T13284] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:38 executing program 5:
syz_mount_image$xfs(0x0, &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:39 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f070000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:39 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080), 0x80000d)

17:29:39 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  348.870471][T13305] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:39 executing program 5:
syz_mount_image$xfs(0x0, &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:39 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0), 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:39 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700000000000000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:39 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x0)

17:29:39 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:39 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000002b40)=[{{0x0, 0xa, 0x0}}], 0x62, 0x0)

[  349.436188][T13325] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:39 executing program 5:
syz_mount_image$xfs(0x0, &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:40 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x0)

17:29:40 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700000000000000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:40 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:40 executing program 3:
clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x0)

[  350.102936][T13352] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:40 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', 0x0, 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:40 executing program 0:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x1010808, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
setuid(r1)
mount$9p_xen(0x0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0, 0x0, 0x0)

17:29:40 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:40 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700000000000000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:40 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')

17:29:41 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', 0x0, 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:41 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x0, 0xfffffffffffffffe, 0x1f)

[  350.724217][T13379] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:41 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/18, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:41 executing program 0:
r0 = gettid()
sched_rr_get_interval(r0, &(0x7f0000000080))

17:29:41 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000016000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000015000/0x4000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0, 0x4000ae172, 0xffffffffffffffff, 0x0)

[  351.234919][T13395] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:41 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', 0x0, 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:41 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:29:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

17:29:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

17:29:42 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

[  352.005162][T13424] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  352.075639][T13424] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.115927][T13445] bond1: (slave bridge1): making interface the new active one
[  352.130063][T13445] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  352.161978][T13424] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  352.175261][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
17:29:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  352.258861][T13465] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
17:29:43 executing program 3:
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x398)
r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x80000004, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00')
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  352.550901][T13480] XFS (loop5): Invalid superblock magic number
17:29:43 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/18, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:43 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

17:29:43 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {0x1}]})

[  352.984163][T13424] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:29:43 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x3c}, 0x1, 0xf5ffffff}, 0x0)

[  353.084652][T13510] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:29:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)

17:29:43 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/18, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  353.361037][T13514] XFS (loop5): Invalid superblock magic number
17:29:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  353.568171][T13536] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:29:44 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x2200041, 0x0)

[  353.625791][T13536] 8021q: adding VLAN 0 to HW filter on device bond2
[  353.700986][T13573] bond2: (slave bridge4): making interface the new active one
[  353.715121][T13573] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  353.744144][T13567] bond2: (slave bridge5): Enslaving as an active interface with a down link
[  353.753530][T13575] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  353.795082][T13575] 8021q: adding VLAN 0 to HW filter on device bond1
[  353.814327][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  353.851990][T13574] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
[  353.878668][T13580] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  354.037294][T13615] bond1: (slave bridge1): making interface the new active one
[  354.051310][T13615] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  354.064349][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
17:29:44 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  354.099647][T13623] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  354.124020][T13624] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
17:29:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)

17:29:44 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/19, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  354.363374][T13635] XFS (loop5): Invalid superblock magic number
17:29:44 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x0, 0x0, 0x2200041, 0x0)

17:29:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)

[  354.640715][T13653] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:29:45 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xac14140a}, "00006371ae9b1c01"}}}}}, 0x0)

17:29:45 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/19, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  354.876172][T13659] XFS (loop5): Invalid superblock magic number
17:29:45 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x0, 0x0, 0x2200041, 0x0)

17:29:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x8000000}]})

[  355.093844][T13677] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  355.178696][T13677] 8021q: adding VLAN 0 to HW filter on device bond3
[  355.216444][T13682] bond3: (slave bridge6): making interface the new active one
[  355.231089][T13682] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  355.245763][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  355.290166][T13712] bond3: (slave bridge7): Enslaving as an active interface with a down link
[  355.332821][T13683] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
17:29:45 executing program 3:

17:29:45 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x8000000}]})

[  355.625031][T13731] XFS (loop5): Invalid superblock magic number
17:29:46 executing program 3:

17:29:46 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x0, 0x0, 0x2200041, 0x0)

[  356.078352][T13722] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
17:29:46 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)

17:29:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x8000000}]})

[  356.190254][T13752] XFS (loop5): Invalid superblock magic number
17:29:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:29:46 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/19, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:46 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x0, &(0x7f0000000000), 0x2200041, 0x0)

[  356.553481][T13776] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:29:47 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  356.729045][T13776] 8021q: adding VLAN 0 to HW filter on device bond4
[  356.773258][T13781] bond4: (slave bridge8): making interface the new active one
[  356.788192][T13781] bond4: (slave bridge8): Enslaving as an active interface with an up link
[  356.816797][T13803] bond4: (slave bridge9): Enslaving as an active interface with a down link
17:29:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {}]})

17:29:47 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182)
r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\xc8\xdb\xb5\xd5\xe0q\xf6\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQ\xef\xef\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  356.855105][T13805] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  357.016856][T13806] XFS (loop5): Invalid superblock magic number
17:29:47 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x0, &(0x7f0000000000), 0x2200041, 0x0)

17:29:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {}]})

[  357.436061][T13807] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
[  357.446270][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
17:29:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  357.557125][T13853] XFS (loop5): Invalid superblock magic number
17:29:48 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x0, &(0x7f0000000000), 0x2200041, 0x0)

17:29:48 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:48 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
dup2(r1, r0)

[  357.864815][T13873] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:29:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x8000000}, {}]})

17:29:48 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  357.923495][T13873] 8021q: adding VLAN 0 to HW filter on device bond5
[  357.993429][T13882] bond5: (slave bridge10): making interface the new active one
[  358.007555][T13882] bond5: (slave bridge10): Enslaving as an active interface with an up link
[  358.023826][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  358.095536][T13913] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
17:29:48 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  358.285324][T13922] XFS (loop5): Invalid superblock magic number
17:29:48 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
epoll_create(0x2000007)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

17:29:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]})

17:29:49 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{0x0}], 0x2200041, 0x0)

17:29:49 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:49 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  359.000878][T13953] XFS (loop5): Invalid superblock magic number
17:29:49 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:29:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]})

17:29:49 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{0x0}], 0x2200041, 0x0)

17:29:49 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:49 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  359.380578][T13981] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  359.452738][T13981] 8021q: adding VLAN 0 to HW filter on device bond6
[  359.496803][T13986] bond6: (slave bridge11): making interface the new active one
[  359.511228][T13986] bond6: (slave bridge11): Enslaving as an active interface with an up link
[  359.537714][T14018] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
17:29:50 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
epoll_create(0x2000007)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

17:29:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]})

17:29:50 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  359.690636][T14024] XFS (loop5): Invalid superblock magic number
17:29:50 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{0x0}], 0x2200041, 0x0)

17:29:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x8000000}, {0x1}]})

17:29:50 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:50 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
epoll_create(0x2000007)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  360.221995][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  360.389071][T14055] XFS (loop5): Invalid superblock magic number
17:29:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0)

17:29:50 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:50 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x8000000}, {0x1}]})

17:29:50 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)}], 0x2200041, 0x0)

17:29:51 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
epoll_create(0x2000007)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

17:29:51 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  360.771100][T14085] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  360.870769][T14085] 8021q: adding VLAN 0 to HW filter on device bond7
[  360.907314][T14092] bond7: (slave bridge12): making interface the new active one
17:29:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x8000000}, {0x1}]})

[  360.921734][T14092] bond7: (slave bridge12): Enslaving as an active interface with an up link
[  360.937337][ T9857] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
17:29:51 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  360.993111][T14086] XFS (loop5): Invalid superblock magic number
17:29:51 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)}], 0x2200041, 0x0)

17:29:51 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0)

17:29:51 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
epoll_create(0x2000007)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

17:29:51 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008}, {0x1}]})

[  361.633734][T14149] XFS (loop5): Invalid superblock magic number
[  361.739835][T14166] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:29:52 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

[  361.838469][T14166] 8021q: adding VLAN 0 to HW filter on device bond8
[  361.901922][T14175] bond8: (slave bridge13): making interface the new active one
[  361.916064][T14175] bond8: (slave bridge13): Enslaving as an active interface with an up link
17:29:52 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:52 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)}], 0x2200041, 0x0)

17:29:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008}, {0x1}]})

[  361.977100][ T9857] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
17:29:52 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:52 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:52 executing program 3:

17:29:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0)

17:29:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008}, {0x1}]})

[  362.398255][T14223] XFS (loop5): Invalid superblock magic number
17:29:52 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:52 executing program 3:

17:29:52 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d", 0x3f}], 0x2200041, 0x0)

17:29:53 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, 0x0, 0x0)

[  362.625612][T14240] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  362.773694][T14240] 8021q: adding VLAN 0 to HW filter on device bond9
[  362.808976][T14247] bond9: (slave bridge14): making interface the new active one
17:29:53 executing program 1:

[  362.823389][T14247] bond9: (slave bridge14): Enslaving as an active interface with an up link
[  362.834143][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
17:29:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:29:53 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:53 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, 0x0, 0x0)

17:29:53 executing program 3:

[  363.105329][T14289] XFS (loop5): device supports 512 byte sectors (not 0)
17:29:53 executing program 1:

17:29:53 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d", 0x3f}], 0x2200041, 0x0)

17:29:53 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, 0x0, 0x0)

17:29:53 executing program 3:

[  363.644256][T14317] XFS (loop5): device supports 512 byte sectors (not 0)
17:29:54 executing program 1:

17:29:54 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:54 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d", 0x3f}], 0x2200041, 0x0)

17:29:54 executing program 1:

[  364.028468][T14307] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  364.100588][T14307] 8021q: adding VLAN 0 to HW filter on device bond10
[  364.137075][T14311] bond10: (slave bridge15): making interface the new active one
[  364.151511][T14311] bond10: (slave bridge15): Enslaving as an active interface with an up link
[  364.165509][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready
[  364.238408][T14339] XFS (loop5): device supports 512 byte sectors (not 0)
17:29:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  364.608735][T14387] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  364.665271][T14387] 8021q: adding VLAN 0 to HW filter on device bond11
17:29:55 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:55 executing program 3:

17:29:55 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a0000000100001000000000010000", 0x5e}], 0x2200041, 0x0)

17:29:55 executing program 1:

17:29:55 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

17:29:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  365.093462][T14434] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  365.165676][T14434] 8021q: adding VLAN 0 to HW filter on device bond12
[  365.202329][T14437] bond12: (slave bridge16): making interface the new active one
[  365.217002][T14437] bond12: (slave bridge16): Enslaving as an active interface with an up link
[  365.237366][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
17:29:55 executing program 1:

17:29:55 executing program 3:

17:29:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  365.419933][T14436] XFS (loop5): device supports 512 byte sectors (not 0)
17:29:56 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a0000000100001000000000010000", 0x5e}], 0x2200041, 0x0)

17:29:56 executing program 1:

17:29:56 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

[  366.122744][T14498] XFS (loop5): device supports 512 byte sectors (not 0)
[  366.255885][T14491] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  366.311873][T14491] 8021q: adding VLAN 0 to HW filter on device bond13
[  366.358969][T14492] bond13: (slave bridge17): making interface the new active one
[  366.373435][T14492] bond13: (slave bridge17): Enslaving as an active interface with an up link
[  366.391992][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready
17:29:57 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:57 executing program 3:

17:29:57 executing program 1:

17:29:57 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a0000000100001000000000010000", 0x5e}], 0x2200041, 0x0)

17:29:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:29:57 executing program 3:

[  367.695980][T14556] XFS (loop5): device supports 512 byte sectors (not 0)
17:29:58 executing program 1:

17:29:58 executing program 3:

17:29:58 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000", 0x6e}], 0x2200041, 0x0)

17:29:58 executing program 1:

17:29:58 executing program 3:

17:29:58 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10)

[  368.547642][    T5] XFS (loop5): SB sanity check failed
[  368.554164][    T5] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  368.566390][    T5] XFS (loop5): Unmount and run xfs_repair
[  368.572415][    T5] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  368.580099][    T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  368.589388][    T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  368.598480][    T5] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  368.607711][    T5] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  368.616890][    T5] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  368.626724][    T5] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  368.635944][    T5] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  368.645096][    T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  368.659795][T14576] XFS (loop5): SB validate failed with error -117.
[  368.675320][T14555] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:29:59 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:29:59 executing program 1:

17:29:59 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000", 0x6e}], 0x2200041, 0x0)

17:29:59 executing program 3:

17:29:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:29:59 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10)

17:30:00 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10)

[  369.751392][T14609] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  369.755472][ T9857] XFS (loop5): SB sanity check failed
[  369.765477][ T9857] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  369.777468][ T9857] XFS (loop5): Unmount and run xfs_repair
[  369.783529][ T9857] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  369.791175][ T9857] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  369.800229][ T9857] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  369.809309][ T9857] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  369.818296][ T9857] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  369.827647][ T9857] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  369.837409][ T9857] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
17:30:00 executing program 1:

[  369.846515][ T9857] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  369.855581][ T9857] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  369.870083][T14606] XFS (loop5): SB validate failed with error -117.
17:30:00 executing program 1:

[  369.993446][T14609] 8021q: adding VLAN 0 to HW filter on device bond14
[  370.022886][T14618] bond14: (slave bridge18): making interface the new active one
[  370.037189][T14618] bond14: (slave bridge18): Enslaving as an active interface with an up link
[  370.049512][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready
17:30:00 executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

17:30:00 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000", 0x6e}], 0x2200041, 0x0)

17:30:00 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00')

[  370.763002][ T9857] XFS (loop5): SB sanity check failed
[  370.769314][ T9857] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  370.781453][ T9857] XFS (loop5): Unmount and run xfs_repair
[  370.787227][ T9857] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  370.794882][ T9857] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  370.803978][ T9857] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  370.813065][ T9857] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  370.822141][ T9857] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  370.831390][ T9857] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  370.840485][ T9857] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  370.849551][ T9857] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  370.858476][ T9857] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  370.868060][T14669] XFS (loop5): SB validate failed with error -117.
17:30:01 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:01 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@locktable={'locktable', 0x3d, '/h\x00'}}]})

17:30:01 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

17:30:01 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

17:30:01 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec", 0x76}], 0x2200041, 0x0)

[  371.593082][T14690] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  371.663255][T14690] 8021q: adding VLAN 0 to HW filter on device bond15
[  371.797218][ T9236] XFS (loop5): SB sanity check failed
[  371.803245][ T9236] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  371.816034][ T9236] XFS (loop5): Unmount and run xfs_repair
[  371.821971][ T9236] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  371.829619][ T9236] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  371.838578][ T9236] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  371.847613][ T9236] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  371.856739][ T9236] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  371.865786][ T9236] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  371.874898][ T9236] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  371.884148][ T9236] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  371.893619][ T9236] 00000070: 00 00 00 00 00 ec 00 00 00 00 00 00 00 00 00 00  ................
[  371.904631][T14733] gfs2: not a GFS2 filesystem
[  371.905281][T14695] XFS (loop5): SB validate failed with error -117.
17:30:02 executing program 4:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
syncfs(r0)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

17:30:02 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec", 0x76}], 0x2200041, 0x0)

17:30:02 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080))

17:30:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000100)="3edde90f01cbc4e27d237300b805000000b98daedf400f01d90f20c035000000800f22c0c4e1f97fb600800000c4e3c5cffb000f01cfc744240000000000c744240201000000c7442406000000000f011c240f35", 0x54}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:30:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x3ff}]}}}]}, 0x3c}}, 0x0)

[  372.713439][ T9781] XFS (loop5): SB sanity check failed
[  372.719235][ T9781] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  372.731549][ T9781] XFS (loop5): Unmount and run xfs_repair
[  372.737602][ T9781] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  372.745250][ T9781] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  372.754335][ T9781] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  372.763442][ T9781] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  372.772614][ T9781] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  372.782148][ T9781] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  372.791587][ T9781] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  372.800679][ T9781] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  372.809875][ T9781] 00000070: 00 00 00 00 00 ec 00 00 00 00 00 00 00 00 00 00  ................
[  372.819227][T14775] XFS (loop5): SB validate failed with error -117.
17:30:03 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4a}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

17:30:04 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:04 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
setxattr$system_posix_acl(&(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02"], 0x5c, 0x0)

17:30:04 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec", 0x76}], 0x2200041, 0x0)

17:30:04 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x25, &(0x7f0000564000), &(0x7f0000000000)=0xffe4)

17:30:04 executing program 1:
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
truncate(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f0000000b40)=[@enter_looper, @request_death, @register_looper, @free_buffer, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0})

[  373.974246][T14804] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  374.022223][T14804] 8021q: adding VLAN 0 to HW filter on device bond16
[  374.249968][ T9236] XFS (loop5): SB sanity check failed
[  374.255601][ T9236] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  374.267988][ T9236] XFS (loop5): Unmount and run xfs_repair
[  374.274000][ T9236] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  374.281608][ T9236] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  374.290700][ T9236] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  374.299811][ T9236] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  374.308739][ T9236] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  374.317860][ T9236] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  374.329470][ T9236] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  374.338398][ T9236] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
17:30:04 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:04 executing program 1:
r0 = socket$inet6(0xa, 0x802, 0x0)
sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2}}}], 0x18}, 0x0)

17:30:04 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000100), 0x10)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)

[  374.347755][ T9236] 00000070: 00 00 00 00 00 ec 00 00 00 00 00 00 00 00 00 00  ................
[  374.356958][T14818] XFS (loop5): SB validate failed with error -117.
[  374.461193][T14861] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
17:30:04 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:05 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:05 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={{0x0, 0xea60}})

17:30:05 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c09", 0x7a}], 0x2200041, 0x0)

17:30:05 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a72ff58ab16f88b9663da5668b145e6313c1"], 0x10}}, 0x0)

[  375.332896][   T12] XFS (loop5): SB sanity check failed
[  375.338909][   T12] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  375.352071][   T12] XFS (loop5): Unmount and run xfs_repair
[  375.357887][   T12] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  375.365448][   T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  375.374473][   T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  375.383501][   T12] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  375.392511][   T12] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  375.401527][   T12] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  375.410592][   T12] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  375.419656][   T12] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  375.428581][   T12] 00000070: 00 00 00 00 00 ec 00 00 0c 09 00 00 00 00 00 00  ................
[  375.450050][T14887] XFS (loop5): SB validate failed with error -117.
17:30:06 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:06 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f00000017c0)=ANY=[])

17:30:06 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c09", 0x7a}], 0x2200041, 0x0)

17:30:06 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  375.964676][T14911] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  376.028843][T14911] 8021q: adding VLAN 0 to HW filter on device bond17
[  376.187881][   T12] XFS (loop5): SB sanity check failed
[  376.194046][   T12] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  376.206121][   T12] XFS (loop5): Unmount and run xfs_repair
[  376.212093][   T12] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  376.219815][   T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  376.228847][   T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.238408][   T12] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  376.247533][   T12] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  376.256623][   T12] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  376.265729][   T12] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  376.274816][   T12] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  376.283931][   T12] 00000070: 00 00 00 00 00 ec 00 00 0c 09 00 00 00 00 00 00  ................
[  376.293623][T14910] XFS (loop5): SB validate failed with error -117.
17:30:06 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
fsync(r0)

17:30:07 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(r0, r1)

17:30:07 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:07 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:08 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000002c0)="69925156", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendto$inet6(r0, &(0x7f0000000180)="ce044a008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b2b34e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0)

17:30:08 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(r0, r1)

17:30:08 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c09", 0x7a}], 0x2200041, 0x0)

17:30:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000003000ffff00000000000000000000001384000100500001000b0001006d697272656400002400028020000200000000000000000000000000000000000000000004000000", @ANYRES32], 0x98}}, 0x0)

17:30:08 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000a80)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffd5}, [@map, @call, @initr0, @map, @exit, @exit, @jmp, @generic]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x3f)

17:30:08 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(r0, r1)

17:30:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  378.514870][T15169] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  378.524464][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  378.572660][    T5] XFS (loop5): SB sanity check failed
[  378.578370][    T5] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  378.590770][    T5] XFS (loop5): Unmount and run xfs_repair
[  378.596614][    T5] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  378.604342][    T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  378.613541][    T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
17:30:09 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  378.622743][    T5] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  378.631912][    T5] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  378.641868][    T5] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  378.650984][    T5] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  378.660169][    T5] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  378.669272][    T5] 00000070: 00 00 00 00 00 ec 00 00 0c 09 00 00 00 00 00 00  ................
[  378.678390][T15161] XFS (loop5): SB validate failed with error -117.
[  378.688247][T15169] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  378.698420][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
17:30:09 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a02", 0x7c}], 0x2200041, 0x0)

[  379.185913][T14877] XFS (loop5): SB sanity check failed
[  379.192130][T14877] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  379.205135][T14877] XFS (loop5): Unmount and run xfs_repair
[  379.211085][T14877] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  379.218930][T14877] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  379.227858][T14877] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  379.236908][T14877] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  379.246135][T14877] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  379.255233][T14877] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  379.264647][T14877] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  379.273708][T14877] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  379.282784][T14877] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 02 00 00 00 00  ................
[  379.300370][T15188] XFS (loop5): SB validate failed with error -117.
17:30:10 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:10 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x9, 0x22}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd)

17:30:10 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

17:30:10 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:10 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a02", 0x7c}], 0x2200041, 0x0)

17:30:10 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c)

[  379.952783][T14877] XFS (loop5): SB sanity check failed
[  379.958332][T14877] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  379.971334][T14877] XFS (loop5): Unmount and run xfs_repair
[  379.977132][T14877] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  379.984905][T14877] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  379.993993][T14877] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  380.003827][T14877] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  380.012911][T14877] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  380.021985][T14877] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  380.031031][T14877] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  380.040075][T14877] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
17:30:10 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  380.049138][T14877] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 02 00 00 00 00  ................
[  380.060194][T15216] XFS (loop5): SB validate failed with error -117.
17:30:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:10 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a02", 0x7c}], 0x2200041, 0x0)

17:30:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

17:30:11 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  380.754930][T15255] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  381.044629][ T9236] XFS (loop5): SB sanity check failed
[  381.050310][ T9236] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x614/0x780, xfs_sb block 0xffffffffffffffff 
[  381.062370][ T9236] XFS (loop5): Unmount and run xfs_repair
[  381.068163][ T9236] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  381.075756][ T9236] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  381.084790][ T9236] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  381.093977][ T9236] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  381.103152][ T9236] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
[  381.112180][ T9236] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a  ................
[  381.121210][ T9236] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  381.130247][ T9236] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  381.139258][ T9236] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 02 00 00 00 00  ................
[  381.148339][T15251] XFS (loop5): SB validate failed with error -117.
[  381.268203][T15246] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  381.323944][T15246] 8021q: adding VLAN 0 to HW filter on device bond18
17:30:12 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:12 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x204cc0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

17:30:12 executing program 4:
unshare(0x2e040600)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

17:30:12 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:12 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0)

17:30:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  381.945133][   T32] audit: type=1400 audit(1591378212.342:33): avc:  denied  { set_context_mgr } for  pid=15311 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1
[  381.992168][T15318] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:12 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  382.043490][T15318] bond19 (uninitialized): Released all slaves
17:30:12 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

[  382.238394][T15319] XFS (loop5): Mounting V4 Filesystem
17:30:12 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000100), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

[  382.293821][T15319] XFS (loop5): totally zeroed log
[  382.302846][   T31] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  382.313674][   T31] XFS (loop5): Unmount and run xfs_repair
[  382.319614][   T31] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  382.327057][   T31] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.336165][   T31] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.345180][   T31] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.354188][   T31] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.363546][   T31] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.372541][   T31] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.381546][   T31] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
17:30:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  382.390543][   T31] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  382.404070][T15319] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  382.414703][T15319] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  382.424300][T15319] XFS (loop5): Failed to read root inode 0xd88, error 117
17:30:13 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:13 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0)

[  382.987247][T15352] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  383.011809][T15352] bond19 (uninitialized): Released all slaves
[  383.120934][T15364] XFS (loop5): Mounting V4 Filesystem
[  383.194423][T15364] XFS (loop5): totally zeroed log
[  383.202734][    T5] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  383.213640][    T5] XFS (loop5): Unmount and run xfs_repair
[  383.219684][    T5] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  383.227196][    T5] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.236401][    T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.245548][    T5] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.254787][    T5] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.263940][    T5] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.273535][    T5] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.282826][    T5] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
17:30:13 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:13 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:13 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:13 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

[  383.292059][    T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.306235][T15364] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
[  383.316755][T15364] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  383.326407][T15364] XFS (loop5): Failed to read root inode 0xd88, error 117
17:30:13 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:14 executing program 5:
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0)

17:30:14 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

[  383.844824][T15396] XFS (loop5): Mounting V4 Filesystem
[  383.871269][T15396] XFS (loop5): totally zeroed log
[  383.880570][ T9781] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x29b/0x760, xfs_agi block 0x2 
[  383.891347][ T9781] XFS (loop5): Unmount and run xfs_repair
[  383.897123][ T9781] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  383.905488][ T9781] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.914585][ T9781] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.923684][ T9781] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.932820][ T9781] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.941887][ T9781] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.950991][ T9781] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.960079][ T9781] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.969320][ T9781] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.979817][T15396] XFS (loop5): metadata I/O error in "xfs_read_agi+0x446/0x640" at daddr 0x2 len 1 error 117
17:30:14 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, 0xffffffffffffffff)

[  383.990364][T15396] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  383.999786][T15396] XFS (loop5): Failed to read root inode 0xd88, error 117
17:30:14 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:14 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:14 executing program 1:
unshare(0x2e040600)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

[  384.692271][T15393] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:15 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:15 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, 0xffffffffffffffff)

17:30:15 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_TTL={0x5}]}}}]}, 0x4c}}, 0x0)

17:30:15 executing program 1:
unshare(0x2e040600)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

17:30:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  385.108954][T15440] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:15 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:15 executing program 5:
unshare(0x2e040600)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0)

[  385.198255][T15440] 8021q: adding VLAN 0 to HW filter on device bond19
17:30:15 executing program 1:
unshare(0x2e040600)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

17:30:15 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, 0xffffffffffffffff)

17:30:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:16 executing program 4:
unshare(0x2e040600)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)

[  385.924298][T15496] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  386.096210][T15496] 8021q: adding VLAN 0 to HW filter on device bond20
17:30:16 executing program 3:
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(0xffffffffffffffff, r0)

17:30:16 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:16 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:16 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000b40)=[@enter_looper, @register_looper], 0x0, 0x1000000, 0x0})

17:30:16 executing program 4:
unshare(0x2e040600)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)

17:30:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:16 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:16 executing program 4:
unshare(0x2e040600)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)

17:30:17 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:17 executing program 3:
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(0xffffffffffffffff, r0)

[  386.600007][T15554] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  386.623482][T15554] bond21 (uninitialized): Released all slaves
17:30:17 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:17 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:17 executing program 3:
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(0xffffffffffffffff, r0)

17:30:17 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:17 executing program 1:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:17 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:17 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:17 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:18 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:18 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

[  387.773707][T15595] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  387.809888][T15595] bond21 (uninitialized): Released all slaves
17:30:18 executing program 1:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:18 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:18 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:18 executing program 4:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:18 executing program 1:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:18 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:18 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:19 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:19 executing program 4:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:19 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:19 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:19 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  389.088853][T15637] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  389.124505][T15637] bond21 (uninitialized): Released all slaves
17:30:19 executing program 4:
unshare(0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:19 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:19 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:20 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:20 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:20 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:20 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:20 executing program 5:
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:20 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:20 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:21 executing program 5:
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:21 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:21 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:21 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:21 executing program 5:
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:21 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:21 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:21 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:21 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:22 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:22 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:22 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

17:30:22 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:22 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:22 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

17:30:22 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(0x0, 0x0, 0x0)

17:30:23 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:23 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:23 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:23 executing program 4:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)

17:30:23 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(0x0, 0x0, 0x0)

[  392.987388][T15768] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:23 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  393.043706][T15768] 8021q: adding VLAN 0 to HW filter on device bond21
17:30:23 executing program 4:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)

17:30:23 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:23 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(0x0, 0x0, 0x0)

17:30:23 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:24 executing program 4:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)

17:30:24 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:24 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0), 0x0, 0x0)

17:30:24 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:24 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:24 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:24 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in, 0x0, 0x9, 0x22}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd)

17:30:24 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0), 0x0, 0x0)

17:30:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  394.398596][T15841] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  394.528939][T15841] 8021q: adding VLAN 0 to HW filter on device bond22
17:30:25 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:25 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:25 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0), 0x0, 0x0)

17:30:25 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:25 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:25 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

17:30:26 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:26 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:26 executing program 4:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f00000000c0)=@name, 0x10, 0x0}, 0x0)

17:30:26 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:26 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

17:30:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

[  396.192699][T15931] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  396.303576][T15931] 8021q: adding VLAN 0 to HW filter on device bond23
17:30:26 executing program 1:
unshare(0x2e040600)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x7e3a81, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

17:30:26 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:26 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x50000)

17:30:26 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4d}]}}}]}, 0x3c}}, 0x0)

17:30:27 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:28 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:28 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:28 executing program 1:
syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='jqfmt=p'])

17:30:28 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:28 executing program 4:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x208902, 0x0)
read$midi(r0, 0x0, 0x0)

[  397.763915][T16011] REISERFS warning (device loop1): super-6514 reiserfs_parse_options: unknown quota format specified.
[  397.993801][T16011] REISERFS warning (device loop1): super-6514 reiserfs_parse_options: unknown quota format specified.
17:30:28 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = fanotify_init(0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r2}, {r0}], 0x2, &(0x7f0000000100), 0x0, 0x0)

17:30:28 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:28 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:28 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={[{@subvolid={'subvolid'}}]})

17:30:28 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x30000)

17:30:29 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

[  398.672343][T16024] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:29 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000002b40)=[{{0x0, 0xa, 0x0}}], 0x62, 0x4040000)
socket$inet6_sctp(0xa, 0x0, 0x84)

17:30:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:29 executing program 1:
unshare(0x2e040600)
r0 = socket$inet6(0xa, 0x801, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000002c0)={'netdevsim0\x00'})

17:30:29 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:29 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

[  399.121694][T16076] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:29 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  399.168708][T16076] bond24 (uninitialized): Released all slaves
17:30:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:29 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x4)

17:30:29 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:29 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:30 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:30 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:30 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000002c0)="69925156", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendto$inet6(r0, &(0x7f0000000180)="ce044a008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b2c34e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0)

17:30:30 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:30 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  400.271833][T16106] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  400.286787][T16106] bond24 (uninitialized): Released all slaves
17:30:30 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:30 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:30 executing program 1:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3c1500, 0x0)
writev(r0, 0x0, 0x0)

17:30:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:31 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240), 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:31 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:31 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x7000000)

17:30:31 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240), 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:31 executing program 1:
unshare(0x2e040600)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0)

17:30:31 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:31 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, 0x0, 0x0, 0x7000000)

17:30:31 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240), 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  401.744641][T16154] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:32 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:32 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000200)='./bus/file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
unlink(&(0x7f0000000080)='./bus/file1\x00')

17:30:32 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, 0x0, 0x0, 0x7000000)

17:30:32 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:32 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:32 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, 0x0, 0x0, 0x7000000)

[  402.174015][T16205] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  402.263154][T16205] bond24 (uninitialized): Released all slaves
17:30:32 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0), 0x0, 0x7000000)

17:30:32 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x3c}}, 0x0)

17:30:32 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:33 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0), 0x0, 0x7000000)

17:30:33 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:33 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:33 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:33 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0), 0x0, 0x7000000)

17:30:33 executing program 1:
unshare(0x2e040600)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20)

[  403.583517][T16257] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  403.612644][T16257] bond24 (uninitialized): Released all slaves
17:30:34 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:34 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x7000000)

17:30:34 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:34 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:34 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  404.522496][T16290] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  404.590820][T16290] 8021q: adding VLAN 0 to HW filter on device bond24
17:30:35 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:35 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x7000000)

17:30:35 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:35 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:35 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x7000000)

17:30:35 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:35 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:35 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x0]}}]})

17:30:35 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x0)

17:30:35 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:35 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

[  405.782100][T16360] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  405.904905][T16360] 8021q: adding VLAN 0 to HW filter on device bond25
17:30:36 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x0)

17:30:36 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:30:36 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:36 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:36 executing program 1:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  406.332818][T16428] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:36 executing program 1:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

[  406.419038][T16428] 8021q: adding VLAN 0 to HW filter on device bond26
17:30:36 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:30:37 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/if_inet6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x0)

17:30:37 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:37 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:30:37 executing program 1:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_GETNSID={0x14, 0x5a, 0x1}, 0x14}}, 0x0)

17:30:37 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  407.499741][T16489] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  407.559258][T16489] 8021q: adding VLAN 0 to HW filter on device bond27
17:30:38 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0xffffffffffffff89}]}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)

17:30:38 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}]})

17:30:38 executing program 5:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x16118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
fanotify_init(0x0, 0x0)

17:30:38 executing program 1:
unshare(0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:38 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}]})

17:30:38 executing program 1:
unshare(0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:38 executing program 5:
unshare(0x2e040600)
r0 = socket$inet6(0xa, 0x801, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))

17:30:38 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}]})

17:30:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

[  408.684948][T16562] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  408.920321][T16562] 8021q: adding VLAN 0 to HW filter on device bond28
17:30:39 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8202adffff"], 0x10)
dup2(r1, r0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4)
r2 = dup(r0)
sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0)

17:30:39 executing program 1:
unshare(0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

17:30:39 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:39 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:39 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

17:30:40 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes'}}]})

17:30:40 executing program 5:
msgget(0x1, 0x0)
r0 = msgget$private(0x0, 0x22)
msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000040)=ANY=[], 0x0, 0x0)
msgrcv(r1, 0xffffffffffffffff, 0x0, 0x1, 0x2000)
msgsnd(r1, &(0x7f00000000c0)={0x1, "086ab681cb53f46524ff460161758ac1b08ee0fa3b0dfcc17d8ff0d347f2d5657140fbd0f1c742777be0fdbca09089303f0e4ae72c11a53a5aa37652b4d4"}, 0x46, 0x800)
r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r3 = msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgrcv(r3, &(0x7f0000000180)={0x0, ""/229}, 0xed, 0x3, 0x1800)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/4096)
shmat(r2, &(0x7f0000f05000/0x2000)=nil, 0x0)

17:30:40 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x3c}}, 0x0)

[  410.100371][T16655] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  410.128980][T16656] tmpfs: Bad value for 'nr_inodes'
[  410.163150][T16655] 8021q: adding VLAN 0 to HW filter on device bond29
17:30:40 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, r1)

17:30:40 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes'}}]})

17:30:40 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

17:30:40 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9fe03c6630d698cb89e0bf088ca", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000540)="a6916d808d726ce82af59eb2c5c46ac348ce1eecce9a6d3c1db40a29804dd3abcef91e3d240faf7a66802a10d69012dad9ef3e2911994679872bd73975ea2b04674103e81ef9065b17dfcaf12fd57f8ac1a01b7b85f6371f0e009953524391eb031156c1044e22a68bff9fa0450c5c24a8df5897f2fe82cc66444c55a6bd8eff849032e68c7c85afd4b58682846c3810e9732666c58a0172cb6f90a342371b03ff54a795a1c8080107dcc808d888f5c5cf6c402fedbbc91d"}, 0x40)

17:30:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  410.662068][T16710] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  410.714111][T16713] tmpfs: Bad value for 'nr_inodes'
17:30:41 executing program 2:
unshare(0x2e040600)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x208902, 0x0)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)

17:30:41 executing program 1:
unshare(0x2e040600)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

[  410.770852][T16710] 8021q: adding VLAN 0 to HW filter on device bond30
17:30:41 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes'}}]})

17:30:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
dup2(r0, r1)

17:30:41 executing program 5:
setrlimit(0x7, &(0x7f0000000040)={0x0, 0xffffffffffff9458})

17:30:41 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0)

[  411.224142][T16765] tmpfs: Bad value for 'nr_inodes'
17:30:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:41 executing program 1:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc04}, 0x4000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000000)='veth1_vlan\x00')
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240408d1, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0xffffffff, 0x0)
sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x1, 0x0, 0x18)

17:30:41 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]})

17:30:41 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x22}, 0x2c)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x22}, 0x2c)

17:30:41 executing program 2:
socket(0x1000000010, 0x80003, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
socket$inet(0x10, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x38a, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}}, 0x0)

17:30:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
dup2(r0, r1)

[  411.542845][T16779] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  411.601979][T16779] 8021q: adding VLAN 0 to HW filter on device bond31
17:30:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  411.763682][T16823] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2068/0x2d30
[  411.783553][T16823] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2068/0x2d30
[  411.834296][T16823] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2068/0x2d30
[  411.904378][T16829] tmpfs: Bad value for 'nr_inodes'
17:30:42 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
dup2(r0, r1)

17:30:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e5501806d1b0e001d80070000005e510befccd7", 0x2e}], 0x1}, 0x0)

17:30:42 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]})

[  412.276588][T16843] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  412.310248][T16846] tmpfs: Bad value for 'nr_inodes'
[  412.331214][T16837] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:42 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]})

[  412.401939][T16837] 8021q: adding VLAN 0 to HW filter on device bond32
[  412.448139][T16843] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
17:30:42 executing program 3:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(0xffffffffffffffff, r0)

17:30:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

[  412.823105][T16895] tmpfs: Bad value for 'nr_inodes'
17:30:44 executing program 1:

17:30:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:44 executing program 3:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(0xffffffffffffffff, r0)

17:30:44 executing program 2:

17:30:44 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:44 executing program 5:

[  414.578783][T16915] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  414.597507][T16915] bond33 (uninitialized): Released all slaves
17:30:45 executing program 2:

17:30:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:45 executing program 2:

17:30:45 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:45 executing program 5:

17:30:45 executing program 3:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(0xffffffffffffffff, r0)

17:30:45 executing program 1:

[  415.167209][T16936] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:45 executing program 2:

[  415.250593][T16936] bond33 (uninitialized): Released all slaves
17:30:45 executing program 5:

17:30:45 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:45 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, 0xffffffffffffffff)

17:30:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:46 executing program 1:

17:30:46 executing program 2:

17:30:46 executing program 5:

17:30:46 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

[  415.845024][T16962] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:46 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, 0xffffffffffffffff)

[  415.914503][T16962] bond33 (uninitialized): Released all slaves
17:30:46 executing program 1:

17:30:46 executing program 5:

17:30:46 executing program 2:

[  416.212447][T16977] tmpfs: Bad value for 'size'
17:30:46 executing program 2:

17:30:46 executing program 1:

17:30:46 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:47 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
dup2(r0, 0xffffffffffffffff)

17:30:47 executing program 5:

17:30:47 executing program 2:

17:30:47 executing program 1:

[  416.772489][T16991] tmpfs: Bad value for 'size'
[  416.846996][T16999] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  416.859297][T16999] bond33 (uninitialized): Released all slaves
17:30:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:47 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:47 executing program 2:

17:30:47 executing program 5:

17:30:47 executing program 3:

[  417.229954][T17009] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  417.266051][T17009] bond33 (uninitialized): Released all slaves
17:30:47 executing program 1:

17:30:47 executing program 3:

[  417.413435][T17019] tmpfs: Bad value for 'size'
17:30:47 executing program 5:

17:30:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:48 executing program 2:

17:30:48 executing program 3:

17:30:48 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:48 executing program 1:

17:30:48 executing program 2:

[  417.833807][T17031] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  417.897013][T17031] bond33 (uninitialized): Released all slaves
17:30:48 executing program 3:

17:30:48 executing program 5:

[  418.000983][T17040] tmpfs: Bad value for 'size'
17:30:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:48 executing program 1:

17:30:48 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:48 executing program 2:

[  418.343841][T17051] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:48 executing program 3:

17:30:48 executing program 5:

[  418.401035][T17051] bond33 (uninitialized): Released all slaves
[  418.525609][T17060] tmpfs: Bad value for 'size'
17:30:48 executing program 1:

17:30:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:49 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@size={'size', 0x3d, [0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})

17:30:49 executing program 2:

17:30:49 executing program 3:

17:30:49 executing program 5:

[  418.874357][T17071] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:30:49 executing program 1:

[  418.923087][T17071] bond33 (uninitialized): Released all slaves
[  419.001367][T17076] tmpfs: Bad value for 'size'
17:30:49 executing program 2:

17:30:49 executing program 3:

17:30:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:49 executing program 5:

17:30:49 executing program 1:

17:30:49 executing program 4:

17:30:49 executing program 2:

[  419.509664][T17094] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  419.541965][T17094] bond33 (uninitialized): Released all slaves
17:30:50 executing program 3:

17:30:50 executing program 4:

17:30:50 executing program 5:

17:30:50 executing program 1:

17:30:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:50 executing program 2:

17:30:50 executing program 3:

17:30:50 executing program 4:

17:30:50 executing program 5:

17:30:50 executing program 1:

17:30:50 executing program 2:

17:30:50 executing program 3:

17:30:50 executing program 4:

17:30:50 executing program 5:

17:30:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:50 executing program 1:

17:30:51 executing program 2:

17:30:51 executing program 3:

17:30:51 executing program 4:

17:30:51 executing program 5:

17:30:51 executing program 1:

17:30:51 executing program 2:

17:30:51 executing program 4:

17:30:51 executing program 3:

17:30:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:30:51 executing program 5:

17:30:51 executing program 2:

17:30:51 executing program 1:

17:30:51 executing program 4:

17:30:51 executing program 3:

17:30:51 executing program 5:

17:30:52 executing program 1:

17:30:52 executing program 2:

17:30:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:52 executing program 4:

17:30:52 executing program 3:

17:30:52 executing program 2:

17:30:52 executing program 5:

17:30:52 executing program 1:

17:30:52 executing program 4:

17:30:52 executing program 3:

17:30:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:52 executing program 5:

17:30:52 executing program 2:

17:30:52 executing program 1:

17:30:53 executing program 4:

17:30:53 executing program 3:

17:30:53 executing program 5:

17:30:53 executing program 2:

17:30:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:53 executing program 1:

17:30:53 executing program 3:

17:30:53 executing program 5:

17:30:53 executing program 4:

17:30:53 executing program 2:

17:30:53 executing program 1:

17:30:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:54 executing program 3:

17:30:54 executing program 5:

17:30:54 executing program 4:

17:30:54 executing program 2:

17:30:54 executing program 1:

17:30:54 executing program 4:

17:30:54 executing program 3:

17:30:54 executing program 5:

17:30:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:54 executing program 2:

17:30:54 executing program 1:

17:30:54 executing program 3:

17:30:55 executing program 4:

17:30:55 executing program 5:

17:30:55 executing program 2:

17:30:55 executing program 1:

17:30:55 executing program 3:

17:30:55 executing program 4:

17:30:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:55 executing program 5:

17:30:55 executing program 1:

17:30:55 executing program 2:

17:30:55 executing program 4:

17:30:55 executing program 3:

17:30:55 executing program 5:

17:30:56 executing program 2:

17:30:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:56 executing program 1:

17:30:56 executing program 5:

17:30:56 executing program 4:

17:30:56 executing program 3:

17:30:56 executing program 2:

17:30:56 executing program 1:

17:30:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:56 executing program 4:

17:30:56 executing program 5:

17:30:56 executing program 3:

17:30:56 executing program 2:

17:30:56 executing program 1:

17:30:56 executing program 4:

17:30:56 executing program 5:

17:30:57 executing program 3:

17:30:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:57 executing program 2:

17:30:57 executing program 1:

17:30:57 executing program 2:

17:30:57 executing program 5:

17:30:57 executing program 3:

17:30:57 executing program 4:

17:30:57 executing program 1:

17:30:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:30:58 executing program 2:

17:30:58 executing program 4:

17:30:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x3d01, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}, 0x1, 0xc00000000000000}, 0x0)

17:30:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17:30:58 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x1, 0x0)
dup2(r3, r0)

[  428.142494][T17322] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:30:58 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

[  428.360600][T17324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
17:30:58 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000506070000e9f300000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0)

17:30:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
eventfd(0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
dup3(r3, r1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80], 0x0, 0x73ec7})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x81}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:30:58 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7e7d, @private1={0xfc, 0x1, [], 0x1}, 0xe}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x8)
sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a72ff58ab16f88b9663da5668b145e6313c17b22b9e70b61976cae3a9a9e90785afd362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000003ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9f11b0000ff7f0000000000a345ad2c9664472ee754e7cb"], 0x10}}, 0x0)

17:30:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  428.560574][T17335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  428.763909][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  428.842288][T17369] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:30:59 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0)
recvmmsg(r4, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004a40)=[{0x0}], 0x1}, 0x81}, {{&(0x7f0000001e00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/18, 0x12}, {&(0x7f0000003000)=""/155, 0x9b}, {&(0x7f00000030c0)=""/118, 0x76}, {&(0x7f0000003140)=""/134, 0x86}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000004ac0)=""/136, 0x88}, {&(0x7f0000004b80)=""/4096, 0x1000}], 0x8, &(0x7f0000003340)=""/171, 0xab}, 0x9332}], 0x3, 0x40010120, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53)
splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0)

[  428.987549][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:30:59 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @private1}, 0x1c)

[  429.216479][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  429.302970][T17395] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:30:59 executing program 1:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2}, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53)
splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0)

17:31:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:00 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x73, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x0, 0x3000c7e9, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
sendto$inet(r0, &(0x7f0000000300)="02", 0xc3f2, 0x11, 0x0, 0x0)

17:31:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
dup3(r3, r1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x73ec7})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x81}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:31:00 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000506070000e9f300000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

[  429.984769][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  430.011293][T17424] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  430.219630][T17449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
17:31:00 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95a, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
creat(0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0)

17:31:00 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
sendfile(r0, r0, &(0x7f0000000480), 0xa198)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2e7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7)
sendfile(r1, r1, &(0x7f0000000480), 0xa198)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

17:31:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000))

[  430.642130][T17463] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop3 scanned by syz-executor.3 (17463)
17:31:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x90000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=""/125, &(0x7f0000000100)=0x7d)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'\x00', 0x1000})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x0, 0x0, 0x4, 0xe000, 0x0, {0x77359400}, {0x5371051847a0fcd4, 0xc, 0xf6, 0x0, 0x0, 0xff, "56da65ec"}, 0x4, 0x5, @planes=0x0, 0xfffffffc, 0x0, r3})

[  430.764807][T17463] BTRFS error (device loop3): superblock checksum mismatch
[  430.880871][T17463] BTRFS error (device loop3): open_ctree failed
[  430.981930][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  431.118291][   T32] audit: type=1800 audit(1591378261.523:34): pid=17466 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16381 res=0
[  431.138294][   T32] audit: type=1800 audit(1591378261.523:35): pid=17472 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16381 res=0
17:31:01 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

[  431.158247][   T32] audit: type=1800 audit(1591378261.523:36): pid=17470 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16381 res=0
17:31:01 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
dup3(r3, r1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x73ec7})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x1, 0x0, @pic={0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:31:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  431.603740][   T32] audit: type=1804 audit(1591378261.763:37): pid=17498 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir750909146/syzkaller.oQLTDV/183/bus" dev="sda1" ino=16321 res=1
[  431.629470][   T32] audit: type=1804 audit(1591378261.783:38): pid=17498 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750909146/syzkaller.oQLTDV/183/bus" dev="sda1" ino=16321 res=1
[  431.653802][   T32] audit: type=1804 audit(1591378261.783:39): pid=17498 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750909146/syzkaller.oQLTDV/183/bus" dev="sda1" ino=16321 res=1
[  431.787914][T17505] BTRFS error (device loop3): superblock checksum mismatch
[  431.950471][T17505] BTRFS error (device loop3): open_ctree failed
[  431.972654][T17519] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  432.134281][T17505] BTRFS error (device loop3): superblock checksum mismatch
17:31:02 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

[  432.300646][T17505] BTRFS error (device loop3): open_ctree failed
17:31:02 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101001, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

17:31:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:02 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)

17:31:02 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x90000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=""/125, &(0x7f0000000100)=0x7d)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'\x00', 0x1000})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x0, 0x0, 0x4, 0xe000, 0x0, {0x77359400}, {0x5371051847a0fcd4, 0xc, 0xf6, 0x0, 0x0, 0xff, "56da65ec"}, 0x4, 0x5, @planes=0x0, 0xfffffffc, 0x0, r3})

17:31:03 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

[  432.909817][T17572] BTRFS error (device loop3): superblock checksum mismatch
17:31:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

[  432.991336][T17572] BTRFS error (device loop3): open_ctree failed
17:31:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000100)="3edde90f01cbc4e27d237300b805000000b98daedf400f01d90f20c035000000800f22c0c4e1f97fb600800000c4e3c5cffb000f01cfc744240000000000c744240201000000c7442406000000000f011c240f35", 0x54}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xae2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  433.134196][   T32] audit: type=1804 audit(1591378263.533:40): pid=17581 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir750909146/syzkaller.oQLTDV/184/bus" dev="sda1" ino=16368 res=1
[  433.293810][T17592] __nla_validate_parse: 1 callbacks suppressed
[  433.293842][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:03 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

17:31:03 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000506070000e9f300000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104", @ANYBLOB], 0x20}}, 0x0)

[  433.384639][   T32] audit: type=1804 audit(1591378263.573:41): pid=17583 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750909146/syzkaller.oQLTDV/184/bus" dev="sda1" ino=16368 res=1
[  433.410228][   T32] audit: type=1804 audit(1591378263.573:42): pid=17583 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir750909146/syzkaller.oQLTDV/184/bus" dev="sda1" ino=16368 res=1
17:31:04 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b0000000000000100"}, 0x60)
getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000100)=""/138, 0x207a0cf4)

17:31:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:04 executing program 1:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:04 executing program 4:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

[  433.950674][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
17:31:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x0, 0x2, r4})
dup3(r3, r1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x3], 0x0, 0x73ec7})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x81}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  434.098876][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  434.122994][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
17:31:04 executing program 2:
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@private1, @mcast2, @private0, 0x0, 0x0, 0x6, 0x0, 0x1})

[  434.304381][T17635] BTRFS error (device loop1): superblock checksum mismatch
[  434.381648][T17635] BTRFS error (device loop1): open_ctree failed
17:31:04 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0)

17:31:04 executing program 4:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

[  434.512546][T17635] BTRFS error (device loop1): superblock checksum mismatch
[  434.559208][T17635] BTRFS error (device loop1): open_ctree failed
17:31:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  434.648953][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  434.741103][T17665] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
17:31:05 executing program 1:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

[  434.854737][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  434.891991][T17665] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
17:31:05 executing program 5:
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="7261770000000000000000160000000000000000000000000000000000000000c1030062853c4600200400000000000080020000000000000000000000000000500300005003000050030000500300005003000003000000000000007b2a98052e8746e50000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050028002"], 0x1)
r1 = memfd_create(&(0x7f00000000c0)='$\xbbeth0nodev*\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00')

[  435.055525][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:05 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xd22}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2956fae468b09f84051fb054c5d56fcea50baac4bd2f087e76d23b09000000000000001013f85095c79e30c06e7e51ff2684bb159f08843b832aad0bab4067d770edda45d8cdca1244b46d93556436ea7b64b11c1909512275aa5e6d720e1edd1687a8f779923ac6f30600f66ec30be0c011cc0f000000000000f6be340ef4ca4cd00da37f5ed639fccff8d94e062701ebdb2ad39de027a7afa9066da03608000000be96fc35a90a0f39531dcae6c1541596b86cfb8fe87754d746daa61f645464a4e7c0040000009f70456382dbc7f3b475dd42f2f0ea61f4846673b026dfff501a377d5aeb8720fe214da99c457a966b87e8c6848363f3f9461573", @ANYBLOB="710cabc8a8f6a99a7284e3d6a49bd5ebc842e3d2ec18b7cc75c560a1f9700f744a15f2e2d4d859fec3b29906406e1a4c"], 0x25)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0xf}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x1000001bd)

17:31:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x90000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=""/125, &(0x7f0000000100)=0x7d)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'\x00', 0x1000})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x0, 0x0, 0x4, 0xe000, 0x7f, {0x77359400}, {0x5371051847a0fcd4, 0xc, 0xf6, 0x0, 0x0, 0xff, "56da65ec"}, 0x4, 0x5, @planes=0x0, 0xfffffffc, 0x0, r3})

17:31:05 executing program 4:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

17:31:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  435.462873][T17713] BTRFS error (device loop1): superblock checksum mismatch
[  435.561353][T17713] BTRFS error (device loop1): open_ctree failed
[  435.660616][   T32] audit: type=1804 audit(1591378266.054:43): pid=17726 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir836516803/syzkaller.Y6yU6B/245/bus" dev="sda1" ino=16383 res=1
17:31:06 executing program 1:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:06 executing program 2:
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540), &(0x7f0000000200)=0x10)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[], 0x2e)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)

[  436.792196][T17755] 8021q: adding VLAN 0 to HW filter on device bond33
[  436.848441][T17749] BTRFS error (device loop1): superblock checksum mismatch
[  436.872982][T17787] bond33: (slave bridge52): Enslaving as an active interface with an up link
[  436.884685][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond33: link becomes ready
17:31:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x90000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=""/125, &(0x7f0000000100)=0x7d)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'\x00', 0x1000})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x0, 0x0, 0x4, 0xe000, 0x7f, {0x77359400}, {0x5371051847a0fcd4, 0xc, 0xf6, 0x0, 0x0, 0xff, "56da65ec"}, 0x4, 0x5, @planes=0x0, 0xfffffffc, 0x0, r3})

[  436.953142][T17749] BTRFS error (device loop1): open_ctree failed
17:31:07 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

17:31:07 executing program 5:
r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x250)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540), &(0x7f0000000200)=0x10)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1})
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="4866ea92781442dbc3110d754fecb40292e1a5"], 0x2e)
sendfile(r6, r6, &(0x7f0000000240), 0x7fff)

17:31:07 executing program 1:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

[  437.485855][   T32] kauditd_printk_skb: 2 callbacks suppressed
[  437.485914][   T32] audit: type=1804 audit(1591378267.884:46): pid=17819 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir836516803/syzkaller.Y6yU6B/246/bus" dev="sda1" ino=16379 res=1
17:31:08 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

[  437.778624][   T32] audit: type=1804 audit(1591378267.954:47): pid=17812 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir836516803/syzkaller.Y6yU6B/246/bus" dev="sda1" ino=16379 res=1
[  437.803443][   T32] audit: type=1804 audit(1591378267.954:48): pid=17812 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir836516803/syzkaller.Y6yU6B/246/bus" dev="sda1" ino=16379 res=1
[  437.829786][   T32] audit: type=1800 audit(1591378268.084:49): pid=17826 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="ramfs" ino=46703 res=0
17:31:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000100)="3edde90f01cbc4e27d237300b805000000b98daedf400f01d90f20c035000000800f22c0c4e1f97fb600800000c4e3c5cffb000f01cfc744240000000000c744240201000000c7442406000000000f011c240f35", 0x54}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:08 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0xc0}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

17:31:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  438.355493][T17837] BTRFS error (device loop1): superblock checksum mismatch
[  438.449560][T17837] BTRFS error (device loop1): open_ctree failed
17:31:08 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x7e7d, @private1={0xfc, 0x1, [], 0x1}, 0xe}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0)
socket$key(0xf, 0x3, 0x2)

17:31:09 executing program 5:
r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x250)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540), &(0x7f0000000200)=0x10)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1})
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="4866ea92781442dbc3110d754fecb40292e1a5"], 0x2e)
sendfile(r6, r6, &(0x7f0000000240), 0x7fff)

17:31:09 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33, 0x10000}], 0x0, 0x0)

17:31:09 executing program 1:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:09 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r3=>0x0})
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)

[  439.073507][T17880] 8021q: adding VLAN 0 to HW filter on device bond34
[  439.304868][T17881] BTRFS error (device loop1): superblock checksum mismatch
[  439.541289][T17881] BTRFS error (device loop1): open_ctree failed
17:31:10 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:31:10 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:10 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:10 executing program 2:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
close(r0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

17:31:10 executing program 3:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53)
splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0)

[  440.259493][T17946] BTRFS warning (device <unknown>): duplicate device fsid:devid for fff6f2a2-2997-48ae-b81e-1b00b10efd9a:0 old:/dev/loop1 new:/dev/loop5
[  440.283426][T17950] BTRFS error (device loop1): superblock checksum mismatch
17:31:10 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  440.391010][T17950] BTRFS error (device loop1): open_ctree failed
17:31:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:11 executing program 1:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:11 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="0200"}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000300)={0x1d, r3, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000080)={0x1, 0xffffff7f, 0x0, {}, {}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "8ed34e21ed8f8ed76bc3e3defa186a3efabe9d4b9a57fd4fc436e65878b541eadee56dfd107718962e827353638068a7bef7a46bc24424f99fc65d820f371c0d"}}, 0x4058}}, 0x0)

[  440.606947][T17975] BTRFS error (device loop5): superblock checksum mismatch
[  440.672435][T17975] BTRFS error (device loop5): open_ctree failed
17:31:11 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  440.817332][T17987] 8021q: adding VLAN 0 to HW filter on device bond35
[  440.880192][T18021] bond35: (slave bridge53): Enslaving as an active interface with an up link
[  440.893297][T14877] IPv6: ADDRCONF(NETDEV_CHANGE): bond35: link becomes ready
17:31:11 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:11 executing program 3:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53)
splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0)

17:31:11 executing program 1:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:11 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

[  441.521960][T18047] BTRFS error (device loop5): superblock checksum mismatch
[  441.574961][T18047] BTRFS error (device loop5): open_ctree failed
17:31:12 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:12 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0)
recvmmsg(r4, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)=""/192, 0xc0}, {0x0}, {&(0x7f0000000480)=""/98, 0x62}, {0x0}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/232, 0xe8}], 0x7, &(0x7f0000001900)=""/189, 0xbd}}, {{0x0, 0x0, &(0x7f0000001b00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)=""/143, 0x8f}}], 0x4, 0x40010120, 0x0)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendto$phonet(0xffffffffffffffff, &(0x7f00000002c0)='C', 0x1, 0x800, 0x0, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53)
splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0)

17:31:12 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

17:31:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:12 executing program 1:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

[  442.237813][T18081] 8021q: adding VLAN 0 to HW filter on device bond36
[  442.303979][T18124] bond36: (slave bridge54): Enslaving as an active interface with an up link
[  442.314232][ T9857] IPv6: ADDRCONF(NETDEV_CHANGE): bond36: link becomes ready
17:31:12 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

[  442.439274][T18079] BTRFS error (device loop5): superblock checksum mismatch
[  442.506374][T18079] BTRFS error (device loop5): open_ctree failed
17:31:12 executing program 3:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53)
splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0)

17:31:13 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:13 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:13 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0)

17:31:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2824c2f, 0x0)

[  443.051930][T18154] BTRFS error (device loop5): superblock checksum mismatch
[  443.064741][T18154] BTRFS error (device loop5): open_ctree failed
17:31:13 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:13 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

[  443.373512][T18180] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500)
[  443.381515][T18180] FAT-fs (loop2): Filesystem has been set read-only
[  443.473224][T18172] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500)
[  443.594209][T18182] 8021q: adding VLAN 0 to HW filter on device bond37
17:31:14 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0)

17:31:14 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)

[  443.847392][T18224] BTRFS error (device loop5): superblock checksum mismatch
[  443.860715][T18224] BTRFS error (device loop5): open_ctree failed
17:31:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2824c2f, 0x0)

17:31:14 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:14 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606769d977c2e50d58bff253dd1c799373e81a1c7fa6f8a01306bc1f03fdd4d924c62c28ffe7e10d0de8b8079fd87238a6bd78af9ac58922576daed139a7eb09d1a1001630b07ef9036e0ef82669696182c83", 0xa2, 0x10000}], 0x5, 0x0)

17:31:14 executing program 3:
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[], 0x2e)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)

17:31:14 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0)

17:31:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  444.562749][T18253] BTRFS error (device loop5): superblock checksum mismatch
[  444.573673][T18253] BTRFS error (device loop5): open_ctree failed
17:31:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2824c2f, 0x0)

17:31:15 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x0, 0x0)

[  444.849975][T18277] 8021q: adding VLAN 0 to HW filter on device bond38
[  444.989911][T18314] bond38: (slave bridge55): Enslaving as an active interface with an up link
[  445.000287][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond38: link becomes ready
17:31:15 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0)

17:31:15 executing program 5:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

[  445.368938][T18324] BTRFS error (device loop5): superblock checksum mismatch
[  445.430260][T18324] BTRFS error (device loop5): open_ctree failed
17:31:15 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x0, 0x0)

17:31:16 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x90000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/125, &(0x7f0000000100)=0x7d)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'\x00', 0x1000})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x0, 0x0, 0x4, 0xe000, 0x7f, {0x77359400}, {0x5371051847a0fcd4, 0xc, 0xf6, 0x0, 0x0, 0xff, "56da65ec"}, 0x4, 0x5, @planes=0x0, 0xfffffffc, 0x0, r3})

17:31:16 executing program 3:

17:31:16 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x0, 0x0)

17:31:16 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0)

17:31:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:16 executing program 3:

[  446.217248][T18359] BTRFS error (device loop5): superblock checksum mismatch
[  446.249860][T18359] BTRFS error (device loop5): open_ctree failed
17:31:16 executing program 5:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

[  446.431049][   T32] audit: type=1804 audit(1591378276.834:50): pid=18373 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir206107679/syzkaller.UeXIIK/199/file0/bus" dev="sda1" ino=16322 res=1
[  446.520942][T18377] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  446.635747][   T32] audit: type=1804 audit(1591378276.884:51): pid=18373 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir206107679/syzkaller.UeXIIK/199/file0/bus" dev="sda1" ino=16322 res=1
[  446.661119][   T32] audit: type=1804 audit(1591378276.884:52): pid=18373 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir206107679/syzkaller.UeXIIK/199/file0/bus" dev="sda1" ino=16322 res=1
[  446.819229][T18377] 8021q: adding VLAN 0 to HW filter on device bond39
[  446.854839][T18387] bond39: (slave bridge56): Enslaving as an active interface with an up link
17:31:17 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d01000000000000000000", 0x1a, 0x10000}], 0x0, 0x0)

[  446.868804][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond39: link becomes ready
17:31:17 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0)

17:31:17 executing program 3:

17:31:17 executing program 5:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:17 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d01000000000000000000", 0x1a, 0x10000}], 0x0, 0x0)

17:31:18 executing program 2:

17:31:18 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x5, 0x0)

17:31:18 executing program 3:

17:31:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:18 executing program 5:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:18 executing program 3:

17:31:18 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d01000000000000000000", 0x1a, 0x10000}], 0x0, 0x0)

17:31:18 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x5, 0x0)

[  448.124581][T18474] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  448.189242][T18474] 8021q: adding VLAN 0 to HW filter on device bond40
[  448.229994][T18516] bond40: (slave bridge57): Enslaving as an active interface with an up link
[  448.243144][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): bond40: link becomes ready
17:31:18 executing program 3:

17:31:18 executing program 3:

17:31:18 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748", 0x27, 0x10000}], 0x0, 0x0)

17:31:18 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:18 executing program 2:

17:31:19 executing program 3:

17:31:19 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x5, 0x0)

17:31:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:19 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748", 0x27, 0x10000}], 0x0, 0x0)

17:31:19 executing program 2:

17:31:19 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:19 executing program 3:

[  449.124228][T18550] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:19 executing program 2:

[  449.228056][T18550] 8021q: adding VLAN 0 to HW filter on device bond41
17:31:19 executing program 2:

17:31:19 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x5, 0x0)

17:31:19 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c560676", 0x52, 0x10000}], 0x5, 0x0)

17:31:19 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748", 0x27, 0x10000}], 0x0, 0x0)

17:31:19 executing program 3:

17:31:20 executing program 2:

[  449.797275][T18559] bond41: (slave bridge58): Enslaving as an active interface with an up link
[  449.823480][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bond41: link becomes ready
17:31:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:20 executing program 2:

17:31:20 executing program 3:

17:31:20 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b1", 0x2d, 0x10000}], 0x0, 0x0)

17:31:20 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x5, 0x0)

17:31:20 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0)

17:31:20 executing program 2:

17:31:20 executing program 3:

[  450.371727][T18644] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:20 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b1", 0x2d, 0x10000}], 0x0, 0x0)

[  450.423556][T18644] 8021q: adding VLAN 0 to HW filter on device bond42
[  450.494080][T18681] bond42: (slave bridge59): Enslaving as an active interface with an up link
[  450.512580][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bond42: link becomes ready
17:31:21 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x5, 0x0)

17:31:21 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0)

17:31:21 executing program 3:

17:31:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:21 executing program 2:

17:31:21 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b1", 0x2d, 0x10000}], 0x0, 0x0)

17:31:21 executing program 3:

17:31:21 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0)

17:31:21 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:21 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x5, 0x0)

17:31:21 executing program 3:

17:31:21 executing program 2:

[  451.478989][T18726] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:22 executing program 3:

[  451.549694][T18726] 8021q: adding VLAN 0 to HW filter on device bond43
17:31:22 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:22 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a", 0x30, 0x10000}], 0x0, 0x0)

17:31:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:22 executing program 3:

17:31:22 executing program 2:

17:31:22 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:22 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x5, 0x0)

17:31:22 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a", 0x30, 0x10000}], 0x0, 0x0)

17:31:22 executing program 2:

17:31:23 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a", 0x30, 0x10000}], 0x0, 0x0)

17:31:23 executing program 3:

[  452.638247][T18807] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  452.734818][T18807] 8021q: adding VLAN 0 to HW filter on device bond44
[  452.765501][T18812] bond44: (slave bridge60): Enslaving as an active interface with an up link
[  452.775548][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond44: link becomes ready
17:31:23 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c850079c5606", 0x51, 0x10000}], 0x5, 0x0)

17:31:23 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x5, 0x0)

17:31:23 executing program 2:

[  453.261207][T18863] BTRFS error (device loop1): superblock checksum mismatch
[  453.290075][T18863] BTRFS error (device loop1): open_ctree failed
17:31:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:23 executing program 3:

17:31:23 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a0000", 0x32, 0x10000}], 0x0, 0x0)

17:31:23 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x5, 0x0)

17:31:23 executing program 2:

17:31:23 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:24 executing program 3:

17:31:24 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a0000", 0x32, 0x10000}], 0x0, 0x0)

17:31:24 executing program 2:

17:31:24 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

[  453.887367][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:24 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x5, 0x0)

17:31:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:24 executing program 3:

17:31:24 executing program 2:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400})
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])

17:31:24 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a0000", 0x32, 0x10000}], 0x0, 0x0)

17:31:24 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [0xfffffffd]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

17:31:25 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x5, 0x0)

[  454.575633][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  454.753309][T18944] input: syz0 as /devices/virtual/input/input5
17:31:25 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0)
listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/131, 0x83)

17:31:25 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb8", 0x29, 0x10000}], 0x5, 0x0)

17:31:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:25 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33}], 0x0, 0x0)

17:31:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/unix\x00')
syz_open_procfs(0x0, &(0x7f00000011c0)='net/unix\x00')
dup3(r3, r4, 0x0)

17:31:25 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

[  455.306657][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:25 executing program 2:
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14)

17:31:25 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:25 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb8", 0x29, 0x10000}], 0x5, 0x0)

17:31:26 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x2, 0x0)

17:31:26 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33}], 0x0, 0x0)

17:31:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:26 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0), 0x0, 0x10000}], 0x5, 0x0)

17:31:26 executing program 3:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = open(0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0, 0x1, 0xfffff000}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r3, 0x0, 0x4008)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)

17:31:26 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb8", 0x29, 0x10000}], 0x5, 0x0)

17:31:26 executing program 4:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001", 0x33}], 0x0, 0x0)

[  456.106683][T19023] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  456.123450][T19021] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  456.132239][T19023] bond45 (uninitialized): Released all slaves
17:31:26 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0)

17:31:26 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb8", 0x29, 0x10000}], 0x5, 0x0)

17:31:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:27 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff6", 0x3d, 0x10000}], 0x5, 0x0)

17:31:27 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb8", 0x29, 0x10000}], 0x5, 0x0)

17:31:27 executing program 4:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2f00, 0x0)

[  456.929035][T19071] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  456.975202][T19071] bond45 (uninitialized): Released all slaves
17:31:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x73ec7})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x1}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:27 executing program 3:
socket(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40680, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/nvram\x00', 0x20000, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001640)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000001500), 0x0, 0x0, &(0x7f0000001540)})
fadvise64(0xffffffffffffffff, 0x80000000, 0x0, 0x4)
epoll_create1(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/5, 0x5}], 0x4}, 0xbc1}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000001340)=""/19, 0x13}], 0x2, &(0x7f0000000180)=""/22, 0x16}, 0x40}], 0x2, 0xc0010020, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001480)={0x8, &(0x7f00000013c0)=[{0xff48, 0x0, 0x81, 0xb39}, {0x6, 0x0, 0x80, 0xffffffff}, {0x0, 0x7, 0x80}, {0x7, 0x0, 0xb, 0x40}, {0x81, 0x4, 0x7, 0x2}, {0x1, 0x56, 0x0, 0x7}, {0x8, 0x8, 0x40, 0x400}, {0x8, 0x4, 0xff, 0x4}]}, 0x10)

17:31:27 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff6", 0x3d, 0x10000}], 0x5, 0x0)

17:31:27 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb8", 0x29, 0x10000}], 0x5, 0x0)

17:31:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
statfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)=""/242)

[  457.735945][T19100] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  457.754095][T19100] bond45 (uninitialized): Released all slaves
17:31:28 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff600", 0x3e, 0x10000}], 0x5, 0x0)

[  457.925675][T19107] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  457.934320][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  458.005808][T19107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  458.049968][T19107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  458.059627][T19107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
17:31:28 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff6", 0x3d, 0x10000}], 0x5, 0x0)

17:31:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:29 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}, 0x5c)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:29 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240), 0x4000000000002c5, 0x2, 0x0)

17:31:29 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff600", 0x3e, 0x10000}], 0x5, 0x0)

17:31:29 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0)

17:31:29 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

[  459.110154][T19162] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it!
17:31:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:29 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff600", 0x3e, 0x10000}], 0x5, 0x0)

17:31:29 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @empty=[0x0, 0x0, 0x0, 0x0, 0x60], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2e927f64e16c7a061ca0d9bff82a684dcafa1052fe62e606712cd3073b99abb7", "10c26dc52f5ee82df27c417288dd9cf2480eb67c5626613139f2b51cb29fb59b58b3377ee30e4b11686659dc3dacf6d2", "f68450ae97d828dd0b7deb800b029ffbe8385e8c32bea348756f4a37", {"143b55c82c95376bfe053ca2458abd9a", "63310cd84ad370000000000000040051"}}}}}}}, 0x0)

17:31:29 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040), 0x8)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000000)={0x0, 0x0})

17:31:29 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:30 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80003, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0)

17:31:30 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0)

17:31:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:30 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1})

17:31:30 executing program 3:
sigaltstack(&(0x7f00002dd000/0x4000)=nil, 0x0)

17:31:30 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:30 executing program 2:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000000600)="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", 0x1000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000140)=""/174)
write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a)
fallocate(r2, 0x0, 0x0, 0x10001)
fallocate(r2, 0x3, 0x5e00, 0x2cbd)
sendfile(r0, r1, 0x0, 0x13002)

17:31:30 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff600", 0x3e, 0x10000}], 0x5, 0x0)

17:31:30 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240), 0x4000000000002c5, 0x2, 0x0)

[  460.502232][   T32] audit: type=1800 audit(1591378290.905:53): pid=19232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16372 res=0
[  460.525037][   T32] audit: type=1804 audit(1591378290.905:54): pid=19232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir206107679/syzkaller.UeXIIK/223/file0" dev="sda1" ino=16372 res=1
17:31:31 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240), 0x4000000000002c5, 0x2, 0x0)

17:31:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:31 executing program 2:
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x6})

[  460.892651][   T32] audit: type=1804 audit(1591378290.965:55): pid=19235 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir206107679/syzkaller.UeXIIK/223/file0" dev="sda1" ino=16372 res=1
17:31:31 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff600", 0x3e, 0x10000}], 0x5, 0x0)

17:31:31 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac04c8", 0x4c, 0x10000}], 0x5, 0x0)

[  460.918255][   T32] audit: type=1804 audit(1591378291.035:56): pid=19232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir206107679/syzkaller.UeXIIK/223/file0" dev="sda1" ino=16372 res=1
17:31:31 executing program 4:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0)

17:31:31 executing program 3:
r0 = open(0x0, 0x0, 0x8)
tkill(0x0, 0x33)
ptrace$cont(0x7, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
creat(0x0, 0x0)
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000001680)=""/4116, 0x1014}], 0x1, 0x0)
write$char_usb(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)={0x2})
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x3004, @remote}, 0x10)
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
sendmmsg(r2, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe)

17:31:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x100, 0x7}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000440)=""/202, 0xca}], 0x2}, 0x2}, {{&(0x7f00000003c0)=@can, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/106, 0x6a}, 0xfffff64c}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/79, 0x4f}, 0x2}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004780)=[{&(0x7f0000002700)=""/3, 0x3}], 0x1}}], 0x4, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
creat(0x0, 0x19e)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1a7)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x8, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2000, 0x0, 0x1, 0x0, 0x9, 0x0, 0x5}, r0, 0xf, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)
socket$inet(0x2, 0x0, 0x9)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

[  461.202051][T19266] BTRFS error (device loop1): superblock checksum mismatch
[  461.210448][T19266] BTRFS error (device loop1): open_ctree failed
17:31:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:31 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff600", 0x3e, 0x10000}], 0x5, 0x0)

17:31:32 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f035000a301", 0x2e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:32 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:32 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248", 0x43, 0x10000}], 0x5, 0x0)

17:31:32 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syslog(0x9, 0x0, 0x0)

17:31:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  462.460357][T19313] kvm: pic: single mode not supported
[  462.460377][T19313] kvm: pic: level sensitive irq not supported
17:31:33 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
r1 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)

[  462.515253][T19313] kvm: pic: single mode not supported
[  462.601358][T19313] kvm: pic: single mode not supported
[  462.637181][T19313] kvm: pic: single mode not supported
[  462.781458][T19313] kvm: pic: single mode not supported
17:31:33 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)

17:31:33 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

[  462.787916][T19313] kvm: pic: level sensitive irq not supported
[  462.836760][T19313] kvm: pic: single mode not supported
17:31:33 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248", 0x43, 0x10000}], 0x5, 0x0)

17:31:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  462.843003][T19313] kvm: pic: level sensitive irq not supported
[  462.895921][T19313] kvm: pic: single mode not supported
[  462.902165][T19313] kvm: pic: level sensitive irq not supported
[  462.930875][T19313] kvm: pic: single mode not supported
[  462.937520][T19313] kvm: pic: level sensitive irq not supported
[  463.011429][T19313] kvm: pic: single mode not supported
[  463.080336][T19313] kvm: pic: single mode not supported
17:31:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
lremovexattr(0x0, &(0x7f0000000280)=@random={'security.', '!\xc0\x00'})

[  463.086033][T19313] kvm: pic: level sensitive irq not supported
[  463.335317][T19359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:33 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$FIONCLEX(r3, 0x5450)

17:31:33 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248", 0x43, 0x10000}], 0x5, 0x0)

17:31:34 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4de2ac", 0x4a, 0x10000}], 0x5, 0x0)

17:31:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x100, 0x7}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000440)=""/202, 0xca}], 0x2}, 0x2}, {{&(0x7f00000003c0)=@can, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/106, 0x6a}, 0xfffff64c}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/79, 0x4f}, 0x2}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004780)=[{&(0x7f0000002700)=""/3, 0x3}], 0x1}}], 0x4, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
creat(0x0, 0x19e)
perf_event_open(0x0, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1a7)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x8, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2000, 0x0, 0x1, 0x0, 0x9}, r0, 0xf, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="1800000000000000ff06004a60ebef2c478a8eececab4c7c70e96d508f07fe3b04dc8cb2acd37913b1f73ab71d6dc45954a82057877482992d4182e0000002fec513d12adb64fe868b17ee10d2d62ae97f2c182307050491e76079b7e99a6e319aad462f9691db629a777fb5d0a0583b7ec4e36f08d215c2de67708a460a8a29bee41e9ec39b4bc291b928ef9f1b12e68f74ab829bfab487da47081184bf0d92f72e567b07f8112d75f25cfa60b42e5eafe40debd93f5c8843542ce87ccd81b56a7ae49a9d9c05298ef7f926421200e11df000d9fa45e8a8dcbd98d41df16b4ebd66464d1e7f66e11a5463afc56cd9c3ffa277233a378e5cbdf9d18aa6a0eee8e60f2627681241231afcffab6b767130120b75215596d1bc4fb6849874fabbd14fdf723522e65fa0c1c1598d101b737b6dd68457b0b8a034dd0c734ce4e7aab97628569897d804986838614b32e2eb83b4cd080277abb4862824672d7ef659a3c2b217d76be42e595d751d8dde26cecba021e627df1e13015900953b245c3db57fd510dffc9516e6456c9560e298785fe0f9d862f8000000000000b7f90b24204ee593370bf6b862765e1c604f179187f6113b17a1a679fea2c9a8f3ec78f787a020fcdc91fc1b4dc2394b3dc3bf0100000000000000dd5f4baa63f7441e5b2d63d4d30be7a1733342ce4eadeafa2a6ca643ed1be45ceb3e8b4b69098fd7ad188d8b50b1eb282db29052c8463c09d239ee2aa3a97a170f7f3afa435df3b9b5d1be8527b9acdc7dea2c69bae4d8115fb6a7bc72e15045dd1d4654ba4bfffffffffffffffb36cacd0f0a25955257cac2fbe3b066a59b27df5fb6e122534b2cc6c8c298eaff0149aefd6cc9e559c485b2e9943ffb3414d8713f19009cd2d1c37f68137392f85f04d5791a8a3c2ac7c6e02662b86b577ceef4dcece714c2d5e781774d2535cbd72b0906dd1aa0ff4e0a6dac6b7b97059dff5229a6a8ed66ad4ab6fe55a0319ab26e8049f1aec539292912f1d52cffad48cc180c8b082a78496675fb70e50d5184e704d5195a3a487c76145ffde841c0153a5ddbf52a70a63923b5868e5a433969d359a99965f6cbfbb602e59143a21cf502d524dd1a0000000000000004009adae503c1a2c4f35964f1bc738adf9bff6c2edd8ba60be9f2dd79a0ba73b74cafbb2d779856e31ab8083702be8173192f38f8edeaf1b05274f84576582d576828025a99d84eea9bb538e4eb5992028044f824137587056b928186aaf2114010d9c4bf39cd87997208c32b1df1a2ed39562630060c603fb5ceeb5f93fbe8e77345f7b9268af4550f1f6cbbd22c13dbdc602b9f746b293e99015fe0860f83198ce668489f3c7374bf71f755d9a5f51b430516bda0d0c639314a32f81c0858c2354bb63f57592b4e48d60f8a2c3faa3356c26fb689d9f4c3a0c1e8edc34073ffea7897e7456a1dfa315144d0bd89c27e2c912f82bc18361464a40802348f920f76a94cf3f102cf07d022ab6bbbb040ff7b2c7aaeb343bf9a401deab24827a5dba43d8f8f86c67542445cafe5597b8b78fdffebe8957caa6b122becf002068289cf96f5aa8c9dfd1e3687b5afa39e2f576f79c2a373341fb587d458b62b8f6e818b38df932f34bd26d2c66e9510eac33a706be80367a91f71cafa3d645a4003c3dec4b0207e979842d59dbb808665fddbd19b1f57c2e8d44906889226f31b2ba7ac196a78c48f7ded2ddb8791cdc9ae0bfa3027bdf6a217667774b7d50e0b4d51eabd0b9c27b5bb6639aeab43efb25177d0a35501643072d046b3b33cb23b8cc44685e9e0de65f5862da6666aea0199a9d6fe2ea531fea90e9887b0e88b5b01767dac4202f9b6468154eba92b411a5aaa55d167c4e3b0703369f75d5e6a6c757ea3532a31ea462bc169f7055497c79cedacde77382a6028ab348183aa0447c5624df8e17e0000007ceebf45c687ac6bfe41ed734f92df82fb5846870cacd8d7d9b55a1f7fc7ac30de3f4228b9d6826df270fc0ab715561f81beab68d3701d651adbd1fd76d58b69ff75f2f42a3c45e7eee122673a01aaf0c24ef69757b729d7592c91b25e91482daf7289b840320e7d924391739cbcd25662afe124bb224589b6c81481f2d103489c2ac6ebb8e854273ee89a6345c3bf986c61d39bd42e0dd14c6d1e47c20313867053c55334dbc6afcb6d4f0a4b355533729c748453a4f624ae6a87532b4536f6b185c4dd4cc6b05460eca04bb1af70dc5810826576d7b75f6b977e3b840389053b2bd2b47e84cbd6243573e99db605a44d2e63ce003fb3693842ac5f6920ec487159b607aacc4d3223a83aa90e0ee831fee27359bfa10c0284de53d76d609b62873b91ad6b6bc44dbc4bb1ddf58e7956a7c86fc8cb615b02bc5596ac07a0ed2139d7f7f8f23a0db8caaadacfb03b79cb579dae7fe05814ab87728c7548056253a10093e75f64af18875314e3cd4bfa377d2da1c325e0ff7e73baf474"], 0x18}}], 0x1b1, 0x0)
socket$inet(0x2, 0x0, 0x9)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

17:31:34 executing program 2:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback}, &(0x7f00000004c0)=0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20)

[  464.164545][T19395] BTRFS error (device loop1): superblock checksum mismatch
17:31:34 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x5, 0x0)

[  464.277945][T19395] BTRFS error (device loop1): open_ctree failed
[  464.291051][T19402] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:34 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x9)
write$eventfd(r0, &(0x7f0000000000), 0x8)

17:31:35 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0)

17:31:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x73ec7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:31:35 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0xb8}}, 0x0)
r1 = socket(0x0, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000000)={'vlan1\x00', 0x1})

[  465.093665][T19431] BTRFS error (device loop1): superblock checksum mismatch
[  465.129452][T19435] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  465.217031][T19431] BTRFS error (device loop1): open_ctree failed
17:31:35 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:35 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x5, 0x0)

17:31:35 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x5, 0x0)

17:31:35 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1000000000500", 0xcb}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

17:31:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f00000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:36 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/unix\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/unix\x00')
sendfile(r1, r0, &(0x7f0000000180)=0x7f, 0x3)

17:31:36 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x5, 0x0)

17:31:36 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:36 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x5, 0x0)

[  465.967675][T19486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:36 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:36 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f00000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:36 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x5, 0x0)

17:31:36 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

17:31:37 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

[  466.678821][T19529] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)

17:31:39 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:39 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000240)="1b", 0x1, 0x8000, 0x0, 0x0)
close(r0)

17:31:39 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f00000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:39 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

[  469.162890][T19563] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:39 executing program 4:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4008)

17:31:39 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:39 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x5, 0x0)

17:31:39 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

17:31:39 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x6)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x6)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfa, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
openat$cgroup_type(r2, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
fallocate(r2, 0x100000003, 0x0, 0x28120001)

17:31:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f00000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:40 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:40 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x5, 0x0)

[  469.956224][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:40 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x5, 0x0)

[  470.014492][T19613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19613 comm=syz-executor.2
17:31:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f035000a301", 0x2e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  470.113149][T19619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19619 comm=syz-executor.2
17:31:40 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:40 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x5, 0x0)

17:31:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f00000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:40 executing program 2:
mknod(&(0x7f0000000040)='./bus\x00', 0x8007, 0x0)
open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[  470.429487][T19637] kvm: pic: single mode not supported
[  470.429506][T19637] kvm: pic: level sensitive irq not supported
17:31:40 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x5, 0x0)

[  470.475189][T19637] kvm: pic: single mode not supported
[  470.543599][T19637] kvm: pic: single mode not supported
17:31:41 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:41 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)

[  470.562421][T19637] kvm: pic: single mode not supported
[  470.679819][T19637] kvm: pic: single mode not supported
[  470.685275][T19637] kvm: pic: level sensitive irq not supported
[  470.706976][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  470.772053][T19637] kvm: pic: single mode not supported
[  470.772072][T19637] kvm: pic: level sensitive irq not supported
[  470.811260][T19637] kvm: pic: single mode not supported
[  470.817625][T19637] kvm: pic: level sensitive irq not supported
[  470.891894][T19637] kvm: pic: single mode not supported
17:31:41 executing program 2:
connect$unix(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="82020063c4"], 0x10)
r0 = socket(0x2, 0x4001, 0x0)
connect$unix(r0, &(0x7f0000000680)=ANY=[], 0x10)

[  470.899063][T19637] kvm: pic: level sensitive irq not supported
[  470.992858][T19637] kvm: pic: single mode not supported
[  471.067707][T19637] kvm: pic: single mode not supported
17:31:41 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x5, 0x0)

17:31:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f00000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:41 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4008ae89, &(0x7f0000001a40)={"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"})

[  471.073161][T19637] kvm: pic: level sensitive irq not supported
17:31:41 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

17:31:41 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil], &(0x7f0000000080), 0x0, 0x0)

17:31:41 executing program 5:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0)

[  471.152743][T19637] kvm: pic: level sensitive irq not supported
[  471.479464][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:42 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:42 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x5, 0x0)

17:31:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f0000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:42 executing program 5:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000))

17:31:42 executing program 4:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2000300000000})
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000})

[  472.050255][T19717] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:42 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:42 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)

17:31:42 executing program 5:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000})
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
fcntl$lock(r0, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2000300000000})

17:31:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f0000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:43 executing program 2:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000300000000})
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000})

17:31:43 executing program 4:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2000300000000})
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x400000, 0x100000000})

17:31:43 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

[  472.731178][T19743] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:43 executing program 5:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000})
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
fcntl$lock(r0, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000300000000})

17:31:43 executing program 3:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:43 executing program 4:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000})
close(r0)

17:31:43 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})

17:31:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f0000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:43 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@ldst={0x4, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

17:31:43 executing program 5:
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil], 0x0, 0x0, 0x0)

[  473.424792][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
17:31:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)

17:31:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:44 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

17:31:44 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)

17:31:44 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:31:44 executing program 1:

17:31:44 executing program 4:

17:31:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:44 executing program 2:

[  474.054074][T19805] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:44 executing program 5:

17:31:44 executing program 1:

[  474.369979][T19805] 8021q: adding VLAN 0 to HW filter on device bond45
17:31:44 executing program 4:

17:31:45 executing program 2:

17:31:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:45 executing program 1:

17:31:45 executing program 5:

17:31:45 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:31:45 executing program 4:

17:31:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:45 executing program 2:

17:31:45 executing program 5:

17:31:45 executing program 1:

17:31:45 executing program 4:

[  475.360500][T19870] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:45 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"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"})

[  475.493774][T19870] 8021q: adding VLAN 0 to HW filter on device bond46
17:31:45 executing program 2:

17:31:46 executing program 4:

17:31:46 executing program 5:

17:31:46 executing program 1:

17:31:46 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)

17:31:46 executing program 2:

17:31:46 executing program 5:

17:31:46 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:46 executing program 4:

17:31:46 executing program 1:

[  476.400402][T19929] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:46 executing program 5:

[  476.487590][T19929] 8021q: adding VLAN 0 to HW filter on device bond47
17:31:46 executing program 1:

17:31:47 executing program 2:

17:31:47 executing program 4:

17:31:47 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84900d0000c9c8dc1964325fa96fa42b769f0000402bec0ba41f0100003a40c8a4034d564b3b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

17:31:47 executing program 5:

17:31:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:47 executing program 2:

17:31:47 executing program 1:

17:31:47 executing program 4:

17:31:47 executing program 5:

17:31:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:47 executing program 2:

17:31:47 executing program 1:

17:31:47 executing program 5:

17:31:47 executing program 4:

[  477.557515][T19992] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"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"})

[  477.697483][T19992] 8021q: adding VLAN 0 to HW filter on device bond48
17:31:48 executing program 1:

17:31:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:48 executing program 2:

17:31:48 executing program 4:

17:31:48 executing program 5:

17:31:48 executing program 1:

17:31:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:48 executing program 1:

17:31:48 executing program 4:

[  478.561491][T20057] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:49 executing program 5:

[  478.623952][T20057] 8021q: adding VLAN 0 to HW filter on device bond49
17:31:49 executing program 2:

17:31:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:49 executing program 4:

17:31:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:49 executing program 1:

17:31:49 executing program 5:

17:31:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001a40)={"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"})

17:31:49 executing program 2:

17:31:49 executing program 4:

17:31:50 executing program 1:

[  479.678601][T20125] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:50 executing program 5:

17:31:50 executing program 4:

17:31:50 executing program 2:

17:31:50 executing program 1:

17:31:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001a40)={"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"})

[  479.918880][T20125] 8021q: adding VLAN 0 to HW filter on device bond50
17:31:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:50 executing program 5:

17:31:50 executing program 1:

17:31:50 executing program 2:

17:31:50 executing program 4:

17:31:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, 0x0)

17:31:51 executing program 5:

17:31:51 executing program 2:

17:31:51 executing program 4:

17:31:51 executing program 1:

17:31:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, 0x0)

[  480.747735][T20192] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  480.833099][T20192] 8021q: adding VLAN 0 to HW filter on device bond51
17:31:51 executing program 2:

17:31:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:51 executing program 5:

17:31:51 executing program 1:

17:31:51 executing program 4:

17:31:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, 0x0)

17:31:51 executing program 2:

17:31:52 executing program 5:

17:31:52 executing program 1:

17:31:52 executing program 4:

17:31:52 executing program 2:

17:31:52 executing program 3:

[  481.841457][T20259] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  481.934213][T20259] 8021q: adding VLAN 0 to HW filter on device bond52
17:31:52 executing program 5:

17:31:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:53 executing program 2:

17:31:53 executing program 1:

17:31:53 executing program 3:

17:31:53 executing program 4:

17:31:53 executing program 5:

17:31:53 executing program 4:

17:31:53 executing program 3:

17:31:53 executing program 2:

17:31:53 executing program 5:

17:31:53 executing program 1:

[  483.006592][T20316] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  483.096140][T20316] 8021q: adding VLAN 0 to HW filter on device bond53
17:31:53 executing program 4:

17:31:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:54 executing program 3:

17:31:54 executing program 4:

17:31:54 executing program 5:

17:31:54 executing program 2:

17:31:54 executing program 1:

17:31:54 executing program 3:

17:31:54 executing program 4:

17:31:54 executing program 5:

17:31:54 executing program 1:

[  484.159913][T20371] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:54 executing program 2:

[  484.288829][T20371] 8021q: adding VLAN 0 to HW filter on device bond54
17:31:54 executing program 4:

17:31:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:55 executing program 3:

17:31:55 executing program 5:

17:31:55 executing program 1:

17:31:55 executing program 2:

17:31:55 executing program 4:

17:31:55 executing program 3:

17:31:55 executing program 5:

[  485.457399][T20424] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:31:56 executing program 2:

17:31:56 executing program 1:

17:31:56 executing program 4:

[  485.667232][T20424] 8021q: adding VLAN 0 to HW filter on device bond55
17:31:56 executing program 3:

17:31:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:56 executing program 1:

17:31:56 executing program 5:

17:31:56 executing program 2:

17:31:56 executing program 4:

17:31:56 executing program 3:

17:31:57 executing program 1:

17:31:57 executing program 4:

17:31:57 executing program 2:

17:31:57 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)

17:31:57 executing program 3:

[  486.701058][T20478] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  486.756055][T20478] 8021q: adding VLAN 0 to HW filter on device bond56
17:31:57 executing program 2:

17:31:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:31:57 executing program 1:

17:31:57 executing program 4:

17:31:57 executing program 3:

17:31:57 executing program 2:

17:31:58 executing program 1:

[  487.845453][T20535] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  487.918500][T20535] 8021q: adding VLAN 0 to HW filter on device bond57
17:31:58 executing program 4:

17:31:58 executing program 3:

17:31:58 executing program 3:

17:32:00 executing program 5:

17:32:00 executing program 2:

17:32:00 executing program 1:

17:32:00 executing program 3:

17:32:00 executing program 4:

17:32:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:00 executing program 4:

[  490.249888][T20588] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:32:00 executing program 3:

[  490.455183][T20588] 8021q: adding VLAN 0 to HW filter on device bond58
17:32:00 executing program 5:

17:32:00 executing program 1:

17:32:00 executing program 2:

17:32:01 executing program 3:

17:32:01 executing program 5:

17:32:01 executing program 4:

17:32:01 executing program 1:

17:32:01 executing program 2:

17:32:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:01 executing program 5:

17:32:01 executing program 3:

17:32:01 executing program 4:

17:32:01 executing program 1:

[  491.422010][T20642] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  491.469266][T20642] 8021q: adding VLAN 0 to HW filter on device bond59
17:32:01 executing program 2:

17:32:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

[  492.176640][T20692] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  492.267206][T20692] 8021q: adding VLAN 0 to HW filter on device bond60
17:32:02 executing program 1:

17:32:02 executing program 2:

17:32:02 executing program 4:

17:32:02 executing program 5:

17:32:02 executing program 3:

17:32:03 executing program 1:

17:32:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:03 executing program 2:

17:32:03 executing program 5:

17:32:03 executing program 4:

17:32:03 executing program 3:

17:32:03 executing program 2:

[  493.093074][T20743] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:32:03 executing program 3:

[  493.160319][T20743] 8021q: adding VLAN 0 to HW filter on device bond61
17:32:03 executing program 1:

17:32:03 executing program 5:

17:32:03 executing program 4:

17:32:03 executing program 2:

17:32:04 executing program 3:

17:32:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:04 executing program 5:

17:32:04 executing program 1:

17:32:04 executing program 4:

17:32:04 executing program 2:

17:32:04 executing program 3:

17:32:04 executing program 5:

[  494.182394][T20802] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  494.276549][T20802] 8021q: adding VLAN 0 to HW filter on device bond62
17:32:04 executing program 1:

17:32:04 executing program 4:

17:32:04 executing program 2:

17:32:04 executing program 3:

17:32:05 executing program 5:

17:32:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:05 executing program 4:

17:32:05 executing program 1:

17:32:05 executing program 2:

17:32:05 executing program 3:

[  495.061782][T20855] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:32:05 executing program 5:

[  495.195533][T20855] 8021q: adding VLAN 0 to HW filter on device bond63
17:32:05 executing program 1:

17:32:05 executing program 4:

17:32:05 executing program 2:

17:32:05 executing program 3:

17:32:06 executing program 5:

17:32:06 executing program 4:

17:32:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:06 executing program 1:

17:32:06 executing program 2:

17:32:06 executing program 4:

17:32:06 executing program 3:

17:32:06 executing program 5:

17:32:06 executing program 1:

[  496.284026][T20918] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
17:32:06 executing program 4:

17:32:06 executing program 2:

17:32:06 executing program 3:

[  496.373465][T20918] 8021q: adding VLAN 0 to HW filter on device bond64
17:32:06 executing program 5:

17:32:07 executing program 4:

17:32:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:07 executing program 2:

17:32:07 executing program 1:

17:32:07 executing program 3:

17:32:07 executing program 5:

17:32:07 executing program 4:

17:32:07 executing program 4:

17:32:07 executing program 2:

17:32:07 executing program 5:

17:32:07 executing program 1:

17:32:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)

[  497.493115][T20978] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  497.598121][T20978] 8021q: adding VLAN 0 to HW filter on device bond65
17:32:08 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)

17:32:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

17:32:08 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_unix(&(0x7f0000000100)='\x00', &(0x7f0000000140)='.\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=unix,'})
syz_open_procfs(0x0, 0x0)

17:32:08 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
r4 = epoll_create(0x7fffffff)
r5 = fcntl$dupfd(r3, 0x0, r4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRES64], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

17:32:08 executing program 4:
r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_WKALM_SET(r0, 0x7001, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)

17:32:08 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)

17:32:08 executing program 3:
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0)

[  498.335270][T21040] =====================================================
[  498.342350][T21040] BUG: KMSAN: uninit-value in unix_find_other+0x30f/0xda0
[  498.349566][T21040] CPU: 1 PID: 21040 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0
[  498.358223][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  498.368263][T21040] Call Trace:
[  498.371570][T21040]  dump_stack+0x1c9/0x220
[  498.376442][T21040]  kmsan_report+0xf7/0x1e0
[  498.380862][T21040]  __msan_warning+0x58/0xa0
[  498.385479][T21040]  unix_find_other+0x30f/0xda0
[  498.390264][T21040]  unix_stream_connect+0x7c5/0x2450
[  498.395573][T21040]  ? security_socket_post_create+0x1ea/0x240
[  498.402067][T21040]  ? kmsan_get_metadata+0x4f/0x180
[  498.411107][T21040]  ? unix_bind+0x1bd0/0x1bd0
[  498.415691][T21040]  p9_fd_create_unix+0x2cf/0x690
[  498.420646][T21040]  ? kmsan_get_metadata+0x11d/0x180
[  498.426112][T21040]  ? p9_pollwake+0x350/0x350
[  498.430770][T21040]  p9_client_create+0xfdc/0x1dc0
[  498.435739][T21040]  ? kmsan_get_metadata+0x11d/0x180
[  498.440938][T21040]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  498.446740][T21040]  v9fs_session_init+0x2ab/0x2a10
[  498.451765][T21040]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  498.457913][T21040]  ? v9fs_mount+0xbf/0x1170
[  498.463043][T21040]  v9fs_mount+0x150/0x1170
[  498.467654][T21040]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  498.473840][T21040]  legacy_get_tree+0x169/0x2e0
[  498.478606][T21040]  ? xfs_fs_commit_blocks+0xda0/0xda0
[  498.484070][T21040]  ? legacy_parse_monolithic+0x2c0/0x2c0
[  498.490132][T21040]  vfs_get_tree+0xdd/0x580
[  498.494548][T21040]  do_mount+0x3624/0x53a0
[  498.498901][T21040]  __se_compat_sys_mount+0x3a8/0xa10
[  498.504707][T21040]  __ia32_compat_sys_mount+0x62/0x80
[  498.509995][T21040]  ? locks_show+0x580/0x580
[  498.514488][T21040]  do_fast_syscall_32+0x3bf/0x6d0
[  498.519509][T21040]  entry_SYSENTER_compat+0x68/0x77
[  498.524700][T21040] RIP: 0023:0xf7fd6dd9
[  498.528767][T21040] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  498.548631][T21040] RSP: 002b:00000000f5dd10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  498.557072][T21040] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000020000140
[  498.565497][T21040] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 00000000200001c0
[  498.573466][T21040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  498.581478][T21040] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  498.589442][T21040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  498.597438][T21040] 
[  498.599922][T21040] Local variable ----sun_server@p9_fd_create_unix created at:
[  498.607926][T21040]  p9_fd_create_unix+0x8d/0x690
[  498.612783][T21040]  p9_fd_create_unix+0x8d/0x690
[  498.618662][T21040] =====================================================
[  498.625662][T21040] Disabling lock debugging due to kernel taint
[  498.631797][T21040] Kernel panic - not syncing: panic_on_warn set ...
[  498.638388][T21040] CPU: 1 PID: 21040 Comm: syz-executor.2 Tainted: G    B             5.7.0-rc4-syzkaller #0
[  498.648792][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  498.659625][T21040] Call Trace:
[  498.662921][T21040]  dump_stack+0x1c9/0x220
[  498.667242][T21040]  panic+0x3d5/0xc3e
[  498.671176][T21040]  kmsan_report+0x1df/0x1e0
[  498.675688][T21040]  __msan_warning+0x58/0xa0
[  498.680198][T21040]  unix_find_other+0x30f/0xda0
[  498.684960][T21040]  unix_stream_connect+0x7c5/0x2450
[  498.691881][T21040]  ? security_socket_post_create+0x1ea/0x240
[  498.697886][T21040]  ? kmsan_get_metadata+0x4f/0x180
[  498.703021][T21040]  ? unix_bind+0x1bd0/0x1bd0
[  498.707628][T21040]  p9_fd_create_unix+0x2cf/0x690
[  498.712566][T21040]  ? kmsan_get_metadata+0x11d/0x180
[  498.718367][T21040]  ? p9_pollwake+0x350/0x350
[  498.722969][T21040]  p9_client_create+0xfdc/0x1dc0
[  498.727909][T21040]  ? kmsan_get_metadata+0x11d/0x180
[  498.733197][T21040]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  498.739004][T21040]  v9fs_session_init+0x2ab/0x2a10
[  498.744024][T21040]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  498.750085][T21040]  ? v9fs_mount+0xbf/0x1170
[  498.754584][T21040]  v9fs_mount+0x150/0x1170
[  498.759078][T21040]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  498.765139][T21040]  legacy_get_tree+0x169/0x2e0
[  498.769894][T21040]  ? xfs_fs_commit_blocks+0xda0/0xda0
[  498.775357][T21040]  ? legacy_parse_monolithic+0x2c0/0x2c0
[  498.781587][T21040]  vfs_get_tree+0xdd/0x580
[  498.786786][T21040]  do_mount+0x3624/0x53a0
[  498.791132][T21040]  __se_compat_sys_mount+0x3a8/0xa10
[  498.796432][T21040]  __ia32_compat_sys_mount+0x62/0x80
[  498.801722][T21040]  ? locks_show+0x580/0x580
[  498.806486][T21040]  do_fast_syscall_32+0x3bf/0x6d0
[  498.811512][T21040]  entry_SYSENTER_compat+0x68/0x77
[  498.816605][T21040] RIP: 0023:0xf7fd6dd9
[  498.820661][T21040] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  498.840269][T21040] RSP: 002b:00000000f5dd10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  498.848757][T21040] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000020000140
[  498.856768][T21040] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 00000000200001c0
[  498.864725][T21040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  498.873036][T21040] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  498.880992][T21040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  498.890379][T21040] Kernel Offset: 0x24000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  498.901992][T21040] Rebooting in 86400 seconds..