yz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000140)="161c0a8f4a4bb306781611a772c47adc64bd7e95654992913dd177d618d4e494b2caf472109944eb366f900134a740dac58335f40a18e2ef0f77d17d8ba72ad6df32b6ebf6420f560fe84978c2d31f8f34d1324826054409a3af57dacc5ca842c6c8", &(0x7f0000000240)=""/102}, 0x20)
r6 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  525.534789][T18889] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x600)

[  525.580054][T18894] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:15 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0)

13:17:15 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:15 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x800000000000000)

13:17:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x84040, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000000c0)={0x9, 0x4, 0x3ff, 0x0, 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  526.089751][T18924] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
close(r7)
setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, &(0x7f0000000040)="e9794ac5d3f5332dac99d66eb96bcde3b2d64ef05dda65115b208ab467", 0x1d)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80801, 0x0)
getsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @multicast1, @local}, &(0x7f0000000180)=0xc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  526.252208][T18936] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:15 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x700)

13:17:16 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/66)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000240)={@generic={0x3eee85c24bfb063b, "03f203a5e50966416de61ed28a988840c530eb8d490dff5e25eea30d5f907003cdfa959619a0924e60df458148555fd8b7f20b04ba7aad798d98c1ee7d549de68431356634e19bdd9b04a93decd51c7f4fe42df7573873a93e5a4f2e272292cef41a607269b20a6f5a69f36903d7637075f8dd5100a7520513338b4c9235"}, {&(0x7f00000001c0)=""/87, 0x57}, &(0x7f0000000140), 0x4}, 0xa0)

13:17:16 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xc00000000000000)

13:17:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb00)

[  526.646264][T18964] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  526.721451][T18972] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf00)

13:17:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="66b98703000066b89e79000066ba000000000f3066b8d03200000f23d00f21f866352000000b0f23f8baf80c66b80c2c7c8166efbafc0cb8fc7fef66b93209000066b80000000066ba000000000f302e3e263e0f01d0f0ff4e7d0f01c9baf80c66b8f8eeb08466efbafc0cb80a00ef67660f5b57000fc72a", 0x78}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1100)

13:17:16 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1000000000000000)

13:17:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
fsmount(r6, 0x514c433dcfbd7b21, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f00000000c0)={0x1e19, 0x0, 0x3016, 0x62137984, 0x5, {0x1, 0x3ff}})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x79, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:16 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0)

[  527.236875][T19009] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1700)

13:17:17 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1200000000000000)

13:17:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
getgroups(0x0, &(0x7f0000000040))
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  527.752751][T19040] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:17 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x200000, 0x130)
fchdir(r0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8f0496800e1156c5000000000e00"], 0xd)

13:17:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x404000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xff, 0x0, 0x0, 0x3, 0x0, 0x800000000509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x5}, 0x4015, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="2e3e2e0f01c066baf80cb81cca7086ef66bafc0ced660f38802bb9800000c00f3235002000000f3066baf80cb84c965282ef66bafc0cb80c000000ef660f143f66ba6100b8b8000000ef2e83a4dd84c2ffff01c4c1df7c4b00b9160a0000b80060bc8aba2a9e6c060f30", 0x6a}], 0x1, 0x30, &(0x7f00000001c0), 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000)

13:17:17 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0)

[  528.112059][T19066] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:17 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1400000000000000)

13:17:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000)

13:17:18 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x542c, 0x0, 0xcd}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
get_robust_list(r0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000140)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000400)=0x18)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40400, 0x0)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100))
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:18 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

13:17:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x80000, 0x0)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x20, 0x141, &(0x7f0000000240)="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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=""/26, &(0x7f00000000c0)=0x1a)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f00000002c0)={0x1ffffffffffffe96, &(0x7f00000005c0)=[{}, {<r7=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000300)={r7, 0x1})
ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f0000000000)={r7, 0x4})
ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000140)={r7, 0x3})

[  528.623698][T19094] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:18 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe0ff)

13:17:18 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2804000000000000)

[  528.922511][T19117] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x30b101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:18 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, [], 0xfe, 0x0}, @in6=@remote}, {0x0, 0x200}, {0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0xfffffffffffffefd)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10)
sendfile(r2, r3, 0x0, 0x37)

13:17:18 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0)

13:17:18 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffe0)

[  529.239115][T19139] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:19 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2a04000000000000)

13:17:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  529.419133][T19148] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x231860)

[  529.723772][T19176] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vcsu\x00', 0x103800, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000013fbff080000000000000000000000030900020073797a30000000000c000640140000009bb670f5e21545c9e7000000040900010073797a302f43561b466dc597000000046f301ad6bede140ab8c02ac76265a4a7"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000140)={0x6, 0x9, 0x30, "24c82e9934fd8bd69da2a034b06d37f9e80bab05184de6b80ac02a0dad7945dab37c7a571a16f11d187694a98ef1a64152fe471d69f4b39b9d289372", 0x2f, "0b4b090c1315a9c8c846f3c05344bfff938dac568a97cbc9c273adecc8207c856d672a96bb1b2e6e1ee42b9d6e0013a2913ea690f0f9556012df9811", 0x88})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r9, 0x4008ae73, &(0x7f0000000040)={0x1, 0x3})

13:17:19 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0)

13:17:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x343840, 0x0)
write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:19 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2b04000000000000)

13:17:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x94, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  530.211884][T19211] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:19 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x8, 0x121800)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000100)={0x8, 0x5, 0x83})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff)

13:17:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:20 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a7, 0x0)

13:17:20 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2c04000000000000)

13:17:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
r5 = accept4(r4, 0x0, 0x0, 0x0)
close(r5)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  530.659527][T19236] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

[  530.732596][T19246] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x406, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:20 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x204c0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000001c0)={0x65, ""/101})
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r3 = accept4(r1, 0x0, 0x0, 0x0)
close(r3)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x0, 'veth1\x00', {}, 0x1})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:20 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2d04000000000000)

13:17:20 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a8, 0x0)

13:17:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

[  531.345583][T19282] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@broadcast, 0x4e20, 0x7e8, 0x4e24, 0x1, 0xa, 0x0, 0x80, 0x33, r6, r7}, {0x6, 0x4, 0x7, 0x3df, 0x8, 0x11, 0x0, 0x6}, {0x3f, 0x5, 0x8001, 0x8}, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3505, 0x2, 0x2, 0x3f, 0x0, 0x1, 0x9}}, 0xe8)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r9 = open(&(0x7f0000000040)='./file0\x00', 0x202800, 0x22)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_SETCRTC(r12, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000000c0)=[0xfffffffe, 0xc3d2], 0x2, 0x6, 0x20000000, 0x800000, 0x8f57, 0x6, 0x0, {0x1, 0x1f, 0x9, 0x101, 0x2, 0x3, 0x0, 0x1, 0x5, 0x8001, 0x5, 0x690, 0x9, 0x4, "27671d46598e816aa540401252974d4a23ae8060870e56b0097977d590128cf8"}})
bind$ax25(r9, &(0x7f0000000140)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @null, @default]}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

[  531.494720][T19289] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

[  531.705678][T19309] device bridge15 entered promiscuous mode
13:17:21 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2e04000000000000)

13:17:21 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a9, 0x0)

13:17:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, r2, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

13:17:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x2401, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xd53100, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0x0, 0x38414262, 0x0, 0xf84, 0x2, @discrete={0x0, 0x80000001}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

[  532.085347][T19327] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:21 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000100)={0x5, 0x8})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @broadcast}}, {0x5}, {0x3, 0x0, 0x0, 0x9}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r1, r0, 0x3, 0xc, &(0x7f0000000140)="fc1f7a6d5a55dca6022df7ef", 0x7, 0x0, 0x80, 0x1a, 0x0, 0x1, 0x4, 'syz0\x00'})
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:22 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x3f00000000000000)

13:17:22 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0)

13:17:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5000000)

[  532.665177][T19360] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  532.687042][T19363] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x2, 0x4}}, 0x28)

13:17:22 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x5804000000000000)

13:17:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

[  533.161720][T19387] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:22 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ab, 0x0)

[  533.438929][T19402] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:23 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xa000000000000000)

13:17:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="2681e03378baa10066b87300000066efb803010f00d0ba4300ed660fddcf0f015b000f3266b9800000c00f326635004000000f30640f6105f01975e8", 0x3c}], 0x1, 0xc, &(0x7f0000000240)=[@cstype0={0x4, 0x5}], 0x1)
syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x3, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x5, 0x3f})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast1}], 0x10)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x2000, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x10800, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

13:17:23 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x64260d3aa38682e4)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  533.869211][T19421] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:23 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ac, 0x0)

13:17:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="64f30fc7b74d000f093e66660f73f4010fc7aacd860f3066b99f0800000f320f20c06635020000000f22c066b80500000066b9b56c00000f01d90f005fa92e0f00900000", 0x44}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

[  534.119157][T19435] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:23 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xe4ffffff00000000)

13:17:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf000000)

13:17:24 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
getsockname$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10)

[  534.558583][T19458] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040), &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff, 0x0, 0xfffffffffffffffa, 0x4})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000080)=""/19)
r6 = socket$inet(0x2, 0x3, 0x2)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
dup2(r4, r4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000005}]}, 0x2c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

[  534.723309][T19467] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:24 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ad, 0x0)

[  534.973534][T19472] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  534.995989][T19472] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
13:17:24 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xf6ffffff00000000)

13:17:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

[  535.253889][T19491] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  535.273664][T19492] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  535.372324][T19491] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
13:17:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x17000000)

13:17:25 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xfeffffff00000000)

13:17:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = socket$inet6(0xa, 0x80000, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000040)=0x68)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:25 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x4040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002540)={'vlan0\x00', <r6=>r5})
connect$can_bcm(r1, &(0x7f0000002580)={0x1d, r6}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:25 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ae, 0x0)

13:17:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)

[  536.016947][T19526] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  536.086479][T19523] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040), &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff, 0x0, 0xfffffffffffffffa, 0x4})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000080)=""/19)
r6 = socket$inet(0x2, 0x3, 0x2)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
dup2(r4, r4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000005}]}, 0x2c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

[  536.181066][T19526] device bridge1 entered promiscuous mode
13:17:26 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xff00000000000000)

13:17:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)

13:17:26 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  536.643713][T19557] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1af, 0x0)

13:17:26 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xff0f000000000000)

[  536.758826][T19547] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  536.819232][T19568] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  536.875897][T19547] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
13:17:26 executing program 3:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ashmem\x00', 0x40042, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x5, 0x9, 0x7})
fchdir(r0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/if_inet6\x00')
ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000240))
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x501001, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x1, 0x1, 0x2020, 0x0, 0xb, 0x7}})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x0, [], "6aba2fb6977ecd3b32706dd01592f52c"})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x60182300)

[  536.958835][T19580] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:26 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xffffff7f00000000)

13:17:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffff)

13:17:26 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:27 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0)

[  537.376602][T19596] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  537.448480][T19596] BFS-fs: bfs_fill_super(): Inode 0x00000004 corrupted on loop3
13:17:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
lstat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = getuid()
getresgid(&(0x7f0000000080)=<r10=>0x0, &(0x7f00000000c0), &(0x7f0000000280))
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x0, {0x80, 0x0, 0x7}, 0x18, r9, r10, 0xb5a1, 0x80000000, 0x80, 0x0, 0xeb25, 0x0, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x1, 0x40}}, 0xa0)
r11 = getuid()
getresgid(&(0x7f0000000080)=<r12=>0x0, &(0x7f00000000c0), &(0x7f0000000280))
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x0, {0x80, 0x0, 0x7}, 0x18, r11, r12, 0xb5a1, 0x80000000, 0x80, 0x0, 0xeb25, 0x0, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x1, 0x40}}, 0xa0)
setresgid(r8, r10, r12)
r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xe00, 0x0)
ioctl$PIO_UNISCRNMAP(r13, 0x4b6a, &(0x7f0000000300)="6a36d578c3ff01a0f245c1f252855d2094b1e7bdef3f01e2b7b628f4f790f72eb28d07aab02581a02fb45876b3af23a4d327d59344ea5efeb9d52d8bd3593eb0dab873166f951238454c78e8ef471e799d0c97f16aac86546c5a50691aac559fa03dc40c3b2bed2df8ea035fbe901a501d36a7f8328d29b985e6fbacf943fcb08ae42c61894baa7366a98b4fd7d720de3562b68e0750449c620e267b1ed8a46cd8fb10a0ed4485d5feedc0d144309b6c2200638811ba5ca62238c0ae1a8a3d5d24c615932db6e1624adee6b42ef4a3387b9019d43a292e08bb0bc9b1b1bc4f2715d5ea2d8eba98c05eafca745f5989c0820cd247e1e395d932e6d4968e03a6ee0e833d7b5ad61269893e9ed857290a9a5340d19fa3c4c903f328c050e124e80b1014da58ae6badfcc385253e54eaf36852b3d4f9b54d9103b8c3fa5b3d4caace28f54fba2be27eb104f2fd70a555e91b754bde67165d19551cba5eaf9ff0ab2c8bde97a716a82cda34d0e5ba4291de8d9e54f6ba5c8f489b1e055549cfd3ab93069109305f59a180d08a908dd6c5de988547b9b2959502ea9805871d63511f877c67378d5bde25f8e6d6a036dce315b634ea9ada0c458f75581e724848e6ee5cf0358bf3e4eb865911093706957da0312ef4f7d3646ce47bcbc7b39e28c565bb824c2a0c8cd658e1fb5ba46296339ee89e2b80835a4ac72ac367d1652b58e78e7e01783605c5ed6792039bcf197fa1d76f4b91827c305e6e1cfed6617e171d2c74b9772bd9c2d9761aa4842f704f1911023f74a6ad3abb26f2a2dae580c90807f1b109776a2b83dd925ff94da8fa34c1f30a82aa4ec318aa4ee93166a2618554524ac4a16618fe0c9adeadb134fd103fdd729c87e6188be4905cc5dc4a39bf911ba6fea6dfde2f774f777b08f8f2777fbadc244e1bbe585a55fe1563e61576b850f95d2847a7cd483711ed766482cabd931359a23ae1329152363fbbe23283b5f3f9f7d606f97388605b7d30d862370c92982ebe810da40b3f0db53149922e2b165a55801f0ee04a2457168b7648a39a1e38db315cd172baef21d6c33a3b9f77e4afcb6dc8df20c61784381695c7c4098ee28a89f1616b109f52b1b65a56dcc59d84dfbf385e93a84c03b20555215098bd8e8db15507cb9581e35535ecbf762fe6ed6d036046fb19d5bd173a3f09898a14c4f9eb5a0005b6c467f687504fe942443085dd81612ca2e8ecc1898fadfcd99523e96765301bf1355b2f8ed51c092053b8ca4af394144f69b69b19c73da11144ef9fb3f470e1e73a49d2b955a3c09f7409975030996f5c4d526fbab9d031eb042f60748661fdea0296c08d660fae559b2bba704a67bb676138f1814cc1c02209e9b353654e94928db5a54d0484f63e9d9bc98d17238e7595d09a8cf7282ab372cf0deb1622f87850ab747adc95cf200255c6361081c959909058b2a64ff1d4617e8ad8b3575578e589cc80fc8423b53f19d56f7577bb7d19d7584734fa880bb99458432c1cd95f7000a1dacbbaddd2e5e89a1a88aee9c6f02646ec698aa8155a6771c74d2870be80a62242922697088c8dfafeb0486897b960360f06f126588ed6b2020ee0cf48a1bf4d3fa0adda70930c4fc32a3fa63595b98a9fdeef2e0b60c85e7885aeba07f1439c1be2cf4593c34e660adf784e734733967ab38a64b4a9f7b4e5144944bd457fb9111c3e248336c8d0c68c846e98c9b047f58b774e8cc837b2a088d64b4cc426143bba0b52dbc80890933195c5e30908be9e407b03b11ac2e9e44c6f7ee374ab3380a26de07bacd0f85492e46a308a3e22d9fca75262335cf8011843131c90d04b3be52905e5cd595590d127dfb5d463baa5e33491b54d6dd8577d1a83fa8acf08a2d962259e660f1577510c67feb6878b17226f55fb0bc119f7ebfb69d8e8c6e9812708028cc526d439a66def8743b8bcb809572f26ea1717ec601c5807e96a179166e3b6c4dd6d96eb60a1891c4b53c4a361f14698fe20bea4cbf5d52819ebef765f551f15f9cdcbbfbe80c78fc4087edb246c5a5957bd39c10be42e12db3ebbe7ca9dcda8e52fd4364740ec2daa070848bf1818baa61f2f36f6a876a3f3f83e1d129498a2459382a6359d25b5025f3fdb795b1d96cb67bc8503137dff2ddcc21341001b77bbb2131a7dbbcccb36e365ec50d358e5aa0c447eb690ce6dc64bcb88e8abfced8eeecd4368d3aa7454815198fca64b0ecf81acbbde66b96d6a79b0be29da722e5117fbef7a0b9019cb245cffca0416976d73fa2c994a85b7aa2b0167acf28f5851d2f82a78b554fa69417990d119dc640a4fff8791fce6d4111039b93d2c0d6e40c0878c631b9972de41b14b8beeee705936b0c3083a00f91ced2e905d3fc42b80983b4652b4bcc54e5fd75801076b7a7c6b9418e82e3f4736e64b1101bc74e7e652bbe909737ce772114dc2d8f0f55b7f9731e31616898decf747a9f59a89abc6f5e359759cdd0b5c7e971d0d40a0f86aa30b0854efa417f99f7b22abbeeee1e532729bfd5186c533c457769ea5b5c46f70982763c279124aeff5822b75568ead7bd3d1032428971d0e4057ff3738c525418f5519b41f6f9a69bd0ca44e8214165f14de51a34ac3762817f03a2d8b8df13bfb475ff8ef05c4fea5fe6cab7fc26865c78d10047a10f5cc04fe0efe55c3b549d3106d8bd2e4cab57c5fbad6ffaabd60e0d1ae71b1ba37ccb51dedcee25bdc181705a7e7152341e7e48baeb18c54806fae01cf6f38b780a70451ffb33acfed9a8f2641bb8da58c38e0ff60049330a151a43b86d7b68300f39f546831e25ffffd3e1b06627b65528aa2b4a68fb4d3c9158391849f33d5e0b19aa99a3c3287cc849aae4f4ac4f7f64bf5f6732c5699c63563c9891b7f681f777ba08f0618469e1ff37d802c646103eeab21136b4e9af444a6df684fef23195238b59a432ffdaedcb1c97979c71b905c2b52eb97d97d58a8e7c4f23e6922cfda453667c1e54d7cd2e517f1cfa377a0383c59f155a5463f045579032cc426e82aebf5d1c5902acface47d1dde71415bc155ecaa0bece3b1828d3ce4180027651b4d780506e5ce2b6a1bbe3768de1c34e78bdff75ffd3372d70792103701e0489de7ae8fc549fac77a9b484c5526e2e2820fb1438e0c8ca2e5c408dc95b5f6e605c9b2183d699e80a0d936376dacc8933aaddc8176a0221f868aa2369fd459a704d52ea294000d097ad88bcc85994fc20f41f8e85e67b32007cbec630b101356cea3f7fedea7d3045b4e4bf8c963b54f6b887c5c04edfe985a09fcf1fc14d77351b1841209c7cd322527bcf6f1dddb1b61fb2e4f23eff6f39136276657852499277939938b90442163b03bb4975562c14afdf0f556a3cb7fee6ee3697894d63bf7aedbfea61a14b6d72cb93b7d3e0e16deac166a28543da6a27de7a245768f4f9b185424e2d0122441d8a6f103879b902228f1c7871afc2e3f486d62822c54444cd8c50d83edee6e6d1f678b003cc5dfed9b54590f88b1608f08ab4cc6661caee6801db09852c1d676f63194ae7a7fab6265838817e727fe607188a7e928e39448579aab63d17c3a368b31894cc315418b8f84df2fe9807cb77ca8fa043c19f7c66040ac232e554db02e0ca8f0b19c4c37cd04fb910f4824a996d522ae4c63a9eebff1ae3e63edfcd6760f5e6c62676116065714c6dc90e3b5b7ac5c29c6be8cb60a956a81abbb7b8d4086712b4e7c6f8f1eed66ea25567a842d395733ff75da3cea8df60d9d41ea726cef0fcdda98c5e719c1464c400e585db694092aa158604f93475a9a26021a576cf760696106eb7bee03ecfe5f29ba0c05cbe45a265676d5598fb3acd597cf13563a3c06f9cc8c81a5c91ab2ca2cf3c4e623934f2725f0cae36d19ea3a575d440d258abe07c1dd04d32a299d7c044363b2da4995d5e09bf9db6a8a6de612911a1fa9f085055dcb1f284ffaa896445442c99c698a2d0bb3283a1f4a282ab1fb18ffc8fe21e71f9b0678a4cfb8afd03a12b90aa25de797a215e9e541652f8fe8fddfce43ce77df9d56cb40684e6182738678adae33c6096b3744a9ec14d4e60bbc408331f57988cdcdaff3f4d235ccc2467aa391823fa54a13861ccb0dbd2ab1c9cf2502bae94ee063b94691e40c359bf36f5dec24a54eea776b2bca0e1a72337f19ad85e606bdb95c7de26a49911994507ed24ee68dfb2e65b4818f7d42808d6b47b96239bde7a073c64ee6567755853ef6c0b2d1dc35c43a5ca47035c781031f7e22a0d15e3d039ce14e966d27e0f9db2caf6b014d575df659f70cfaafa0451b09a3ddd1306603c3eaa2f2a46a1451da87822b1dd94aa9a3e435d2e79705b174a9549da6500df94f7c932ed2d98b4004c34c8e653e96051c24283c2179864630444eb81ddd92f9079871fd288d2ef05a8686b86bb20b28f5f176a339cb9cb9ffb802f972480795fbbc24d9d695519d87653b886e0f704f2d0e5b162227837df0532294431e8bdc171782aeda55e2d3489ef2d44f1d923d9f546885f5d1090c1102cec94e8b0664f0ce7ff2a79ffe27eb2c76d64ca49273c4f2e86416050ca7d5d6f0fe9d62fd8a4d521b6bb4d3bc05baa59fed61af98248b00bd5c839862c8f22d068e8d69a21cddfca3f1b0431fdebab3874c412abf8c97e33ce8bc70423865d38d18cd0839d34bfa45f56c236aad4be6eefe0327a63b5c539e4fc73b3927a815c48825e966cc4f6dffe89d148aca98973da4c4cb40d8dcbc967e682937cf4e2a4e0a96261c9ad9464dc5b925bce9f90a8de48efd798cd57222dfe43a1e481003760cbdc87e2b5045ec1e3a7d20de839c228d277efc30cf1a064c038791699d4f645c6f8daa76c7d2dd14c6f2629537faf67f7bdac1a0c5fd58e7de6a3ee0b317e1c14c2ebbe908e0bcb6e777459085beb1018f57f73ea999bb93c68daabb686e5d6b4fd4716023b7e6ba9ae3c852227968733d42ac10116a1e2829de8585d5e0a859d6b08ffbded292a269b93355374f192b33db54198809c7b10b23779ff868396e52fee31b0a794e8679d60492b7382273a6c9369f88cd89c338edb0d5f4054827bcebc81a02ab3af5c61dc1771e68c895655baea128f4dd34af1e18a948ba370f0202cfddb92a5304a5482313fcfd964f58ee8412f3d15348745a6bd8f39de85f14f4003c777764c749f88cf9d0922f94e6077222108618d4b5402f9488d83ac8de35774bac6349d8268ec8952de9dec99b0593c79bf00fff8e4c3993d986b3135d0ed4c83937fb81740c5a98663acf4d745757b1db7e84f6828331454987b8234a97edf3facd729129182b3120a3f6cc7ac0249f6f7fcd08e21d60b8a6440dac91c81ec3289318f97d0bb2ce24c8b5f77769ed2f4f4658877473c54558061967b63a3f44e807fb6e500a4b62cb6e3e8512e572a70df2de648b867eda69a736bfd5a35483f2a3393d97f5f26b7b94f2aad65410541bc008be8d28e5b3a425f755ff07788c9dcce58e78cefcd35dd0077839c18f66c1f5130f74e78089e78916635792c1cf0c39c7bf6cdf07b6bfe19cec86bb305d9015c62c038220340f941a547e4cd3c28f0f6eb5e8400ac72bc67cff931f0d540843e1b1025e5e16bf7cf375f0b79f6c0de9b5c8254b35329d676a4111d69aa93b5b16dfbc93556b9cdd478c16f282a7f6c79dbe74a262b4e26b15e0a246c7bc0d001a7618ba82c881850065592537ec714c9393fb44b398b39cc489865268e4c1817bf663bceb65e5068901263352f50f0cfd3fffb903")
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x2000000, 0xffff, {}, {0x3, 0x2, 0xf4, 0xff, 0x13, 0x6, "6ef53b96"}, 0x7, 0x6, @userptr=0x8, 0x3, 0x0, <r14=>0xffffffffffffffff})
r15 = syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1ce, r15, 0xc05, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000001380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)={0x4c, r15, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000800)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000600ac17b05b6f1faa7d29f700", @ANYRES32=0x0, @ANYRES32=<r16=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r16}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r16, 0x3}, 0x8)

13:17:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff)

13:17:27 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@rand_addr="f72849179d9ab0d892fded563e549e8d"}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  537.693597][T19613] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  537.851511][T19617] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:17:27 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xffffffff00000000)

[  537.946847][T19634] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:27 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0)

13:17:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)

13:17:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040), &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff, 0x0, 0xfffffffffffffffa, 0x4})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000080)=""/19)
r6 = socket$inet(0x2, 0x3, 0x2)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
dup2(r4, r4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000005}]}, 0x2c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

13:17:27 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x18f44}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r0, 0x4, 0x46800)

13:17:27 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b2, 0x0)

[  538.399517][T19652] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd)

13:17:28 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xfffffffffffff000)

[  538.629665][T19676] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:28 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x4d)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x7fffffff}, &(0x7f0000000200)=0x8)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  539.010119][T19674] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  539.018234][T19674] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  539.089799][T19699] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  539.097045][T19698] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffe0)

13:17:28 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0)
accept$netrom(r1, 0x0, &(0x7f0000000140))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0))
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141942, 0x0)

13:17:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b3, 0x0)

13:17:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040), &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff, 0x0, 0xfffffffffffffffa, 0x4})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000080)=""/19)
r6 = socket$inet(0x2, 0x3, 0x2)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
dup2(r4, r4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000005}]}, 0x2c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

[  539.470192][T19718] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000003)

13:17:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="66baf80cb892575a8def66bafc0cb000ee66420ff4592c67450f2245c4e37905bf0100000000b9800000c00f3235004000000f30470f005f00b9800000c00f3235000100000f30450f79d4420f230fd9a8bcc2c72f", 0x55}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x0)
setreuid(0x0, r6)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8)
r9 = getuid()
getresgid(&(0x7f0000000080)=<r10=>0x0, &(0x7f00000000c0), &(0x7f0000000280))
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x0, {0x80, 0x0, 0x7}, 0x18, r9, r10, 0xb5a1, 0x80000000, 0x80, 0x0, 0xeb25, 0x0, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x1, 0x40}}, 0xa0)
r11 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r11, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r11, 0x7)
r12 = accept4(r11, 0x0, 0x0, 0x0)
close(r12)
r13 = syz_open_dev$dri(&(0x7f00000006c0)='/dev/dri/card#\x00', 0x8000000080, 0x2042)
r14 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r14, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r14, 0x7)
r15 = accept4(r14, 0x0, 0x0, 0x0)
close(r15)
r16 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r16, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r17 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r17, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r17, 0x7)
r18 = accept4(r17, 0x0, 0x0, 0x0)
close(r18)
r19 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r19, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r19, 0x7)
accept4(r19, 0x0, 0x0, 0x0)
r20 = fcntl$dupfd(r19, 0x0, 0xffffffffffffffff)
r21 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r21, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r21, 0x7)
accept4(r21, 0x0, 0x0, 0x0)
r22 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r22, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r22, 0x7)
r23 = accept4(r22, 0x0, 0x0, 0x0)
close(r23)
r24 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r24, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r24, 0x7)
accept4(r24, 0x0, 0x0, 0x0)
r25 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r25, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r25, 0x7)
accept4(r25, 0x0, 0x0, 0x0)
r26 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/btrfs-control\x00', 0x8800, 0x0)
r27 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r27, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r27, 0x7)
accept4(r27, 0x0, 0x0, 0x0)
r28 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r28, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r28, 0x7)
r29 = accept4(r28, 0x0, 0x0, 0x0)
close(r29)
r30 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x10400, 0x0)
r31 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r31, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r31, 0x7)
r32 = accept4(r31, 0x0, 0x0, 0x0)
close(r32)
r33 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r33, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r33, 0x7)
r34 = accept4(r33, 0x0, 0x0, 0x0)
close(r34)
r35 = syz_open_dev$admmidi(&(0x7f0000000780)='/dev/admmidi#\x00', 0x7fe00000000000, 0x301101)
r36 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r36, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r37 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r37, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r37, 0x7)
accept4(r37, 0x0, 0x0, 0x0)
fcntl$getownex(r37, 0x10, &(0x7f00000007c0)={0x0, <r38=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r39=>0x0}, 0x0)
setreuid(0x0, r39)
r40 = getgid()
sendmsg$unix(r4, &(0x7f0000000940)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)="de76389834ff461486da76547c8ce101e0652b83d78cbb9813c0dd1604f4572c0a700218601a724d156ee65f170e9b81a5156ee0f926e06e203b78cda95974167bbe2e35a31fdad7bdc19f0efe636bdee965cdd1fe900eb39b6186f537f9c3a78c1da1b75367163db1a28ba3ab60f1a3c7e2aae5f0b337bc1d51e45538208ca5de558d54e2d792fd343f70d8bb6b24ed6ccef8fca18347f65cdd4b572e9b7b8400e1c6c5869295c93b0d", 0xaa}, {&(0x7f00000003c0)="2b12ad050c0d167bcebc50ec2f6432119fb94e4400497904c1016f262af9c25d4bece3e101e9a92fd72e5225db1f28d0967625bbf61188c28b62a9376fc4f227aca5c6e8def6fa2f78ff417eb13e22f684d273c8d9298cf1b51ce84c305d107b930203a29e9160ed98c6c549ee3a8cd14216cec768d6590c82398cfaef25150af577c03fec6ba7a17f9e9614e03eacce0e4076378b91aeda1a4a5da531add0b6e816b34e1f187bdd2b227717047fa1bbd4ea166e806cae9b20510abcc2d481e5f2760a1c86110d65b56e125423d5cafd24fd85f789", 0xd5}, {&(0x7f0000000240)="bb7310fb4fe806d3c719c756728379361a3867ca4ea9fad09a82b7f230cf53ff32e9b3b8e9e212a67655beb0613749b69283fc785f238ea956ba61a236757f189302a128adb8", 0x46}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c00965747c300800100000002000000d894b0a17231e4d8b95140", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0000000001000000168c654770b57601442abfb5fc9895e5705d224a6cf0c0a03a31d00ea236c5912c26ca61b5ab6e47370882bf618aabbd", @ANYRES32=r12, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r18, @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r23, @ANYRES32=r2, @ANYRES32=r24, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r25, @ANYRES32=r0, @ANYRES32=r26, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r27, @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r32, @ANYRES32=r34, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="000000001c0fd92e1b0000000100000002000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="04000000"], 0x108, 0x40011}, 0x80080)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0)

13:17:29 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(r2, &(0x7f0000000a00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x98, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2f99}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x98}}, 0x20008884)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r4)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000c40), 0x4)
close(r6)
sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28009200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x231}, 0x1, 0xfc, 0x1f, 0x6, 0x19, 'syz0\x00', "ab964ef2b1e46f7e27e241f90d70f92723de42a24b0024e45fbb58386bbacf7b", "2d23f3127bb4626b03e5b5659e71d986e02b4ef4aa236d529a9177b2998b4c7a", [{0x1, 0xda93, {0x3, 0x2}}, {0x9, 0x300, {0x1, 0x3f}}, {0x4, 0x8001, {0x0, 0x80}}, {0x8, 0x100, {0x3, 0x1}}, {0xc0, 0x5, {0x0, 0x3}}, {0x4, 0x6, {0x0, 0xbb}}, {0x1ff, 0xad, {0x1, 0xffff2dfa}}, {0xbcea, 0x7, {0x3, 0x8000}}, {0x5, 0x8da, {0x1, 0x4}}, {0x8000, 0x2, {0x0, 0x9}}, {0x7, 0x6, {0x3, 0x55}}, {0x8, 0x401, {0x2, 0x2}}, {0x401, 0x3, {0x0, 0x9}}, {0xf4d, 0xfff8, {0x2, 0x2}}, {0xc0, 0x8, {0x2, 0x1}}, {0x6, 0x0, {0x2, 0x1}}, {0x0, 0x4, {0x3, 0x1}}, {0x5, 0x9, {0x3, 0x4}}, {0xfc01, 0x8135, {0x2, 0x400}}, {0x7f, 0x1, {0x1, 0xf15f}}, {0x1cce, 0x3f, {0x0, 0x8}}, {0x3, 0x5, {0x3, 0x9}}, {0x8, 0x1, {0x2, 0x5}}, {0x1000, 0x7, {0x0, 0x7}}, {0x0, 0x2, {0x0, 0x200}}, {0x1ff, 0x1, {0x1, 0xfff}}, {0x3, 0x0, {0x1, 0xd0}}, {0x6, 0xfffc, {0x1, 0x7fff}}, {0x100, 0x3, {0x3, 0xfffffff7}}, {0x0, 0xd55, {0x0, 0x1}}, {0x100, 0x9, {0x0, 0x8001}}, {0xf000, 0x8001, {0x0, 0x40}}, {0x200, 0x8000, {0x0, 0x8}}, {0x1f, 0x0, {0x1, 0x463}}, {0x9, 0x1, {0x2, 0x2}}, {0x6, 0x9}, {0x0, 0x4, {0x3, 0x6}}, {0x40, 0x5, {0x2, 0x9bb}}, {0x4, 0x8000, {0x0, 0x7}}, {0x8, 0x20, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x6b, 0x7, 0x7fff, 0x8, 0xc, 'syz0\x00', "98adcb2055a7c3e8bd89f0cd0612b2174ceec825af1f23f9f52d06781268a61f", "bbe548cd14163beb2c3d3194218ad2ee7c4dfb83660c815c76b23abb20becf76", [{0xff, 0x4, {0x1, 0x3}}, {0x9, 0x61, {0x3, 0x1}}, {0xff01, 0x101, {0x2}}, {0x4, 0x1, {0x1, 0x8000}}, {0x7fff, 0x6123, {0x1, 0x40}}, {0x6, 0x200, {0x3, 0x2}}, {0x200, 0xccb, {0x0, 0x5}}, {0x2, 0x9, {0x1, 0xffffffff}}, {0x9, 0x3f, {0x3, 0x1}}, {0x4, 0xdbb, {0x0, 0x17}}, {0x4c, 0x9, {0x2, 0x7}}, {0xbc5c, 0x4db3, {0xfd84f2f55d69cd46, 0x4}}, {0x7, 0x5, {0x0, 0x800}}, {0x8, 0x9, {0x3, 0x6898}}, {0x3, 0x20, {0x0, 0x1}}, {0x3ff, 0x2, {0x2, 0x3}}, {0x8, 0x80, {0x5, 0x9}}, {0xfc00, 0x9, {0x0, 0xa0a7}}, {0x3f, 0x3, {0x3, 0x101}}, {0x100, 0x8000, {0x0, 0x262}}, {0x7fff, 0x1, {0x1, 0x2}}, {0x20, 0x7, {0x1, 0x140a6326}}, {0x1, 0xfffc, {0x2, 0x2f}}, {0xff, 0x3, {0x0, 0x6}}, {0x100, 0x1ff, {0x1, 0xfffffff8}}, {0x7, 0x1, {0x0, 0x4}}, {0xac3, 0x5, {0x2, 0x9}}, {0x3f, 0x8, {0x2, 0x4}}, {0x7d, 0x3ff, {0x3, 0x480165ca}}, {0x3, 0x0, {0x0, 0xbbd}}, {0xfffb, 0x0, {0x0, 0x7}}, {0x8, 0x0, {0x3, 0x3}}, {0x5af, 0x7ff, {0x1, 0x6}}, {0x4, 0xc4aa, {0x3, 0x4}}, {0x4, 0x4, {0x3, 0xa8}}, {0x1, 0x1ff, {0x1, 0xd76}}, {0x401, 0x40, {0x2, 0x8}}, {0x200, 0x7ff, {0x0, 0xec6}}, {0x7, 0x1, {0x2, 0x1400000}}, {0x7, 0x400, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x7fffffff}, 0x3, 0xd, 0xe9, 0x100, 0x22, 'syz1\x00', "3fb25740591cabef779e6f99a3a8d449f4f7020423f67b759a642c99300cfe8f", "e044de29f1b16c1c7eb3eb85b3ea1ca9b84000decce35a85add5bd48888d6c72", [{0x9, 0xffff, {0x1, 0x5}}, {0x8, 0xea, {0x3, 0x9dff}}, {0xff81, 0x9, {0x3, 0x9}}, {0x3, 0x7f, {0x3, 0x200}}, {0xa68, 0xfff8, {0x3, 0x401}}, {0x5, 0x6, {0x0, 0x1}}, {0xbb60, 0x0, {0x2, 0x7}}, {0x8000, 0x3f9f, {0x1, 0xffffff80}}, {0x0, 0x1800, {0x3}}, {0x6, 0x0, {0x0, 0x8}}, {0x7ff, 0x800, {0x2, 0x1}}, {0x41db, 0x400, {0x3, 0x4}}, {0xfff, 0x7f, {0x2, 0x4}}, {0x81, 0x3, {0x0, 0xee5}}, {0x9, 0x3f, {0x1, 0xfffffffe}}, {0xa618, 0xfff, {0x1, 0x81}}, {0x80, 0x9, {0x2, 0xf04c}}, {0x0, 0x69de, {0x2, 0x1}}, {0x3f, 0x0, {0x3, 0xff}}, {0x3, 0xc000, {0x1, 0x22}}, {0x1, 0x8, {0x1, 0x2}}, {0xefe9, 0x200, {0xa4df34b150144678, 0x8000}}, {0x5, 0x2, {0x3, 0x3}}, {0x89c, 0x100, {0x0, 0x3f}}, {0x4, 0x0, {0x0, 0x800}}, {0x400, 0x5, {0x2, 0x3}}, {0x505d, 0xfff, {0x2, 0x7fffffff}}, {0xb88c, 0x3ff, {0x0, 0x401}}, {0xfaf4, 0x28, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0x8}}, {0x9, 0x1, {0x2, 0x9}}, {0x8000, 0xfff7, {0x3, 0x9c}}, {0x7, 0x20, {0x1, 0x20}}, {0xe4, 0x5, {0x3, 0x5}}, {0x5, 0x3, {0x2, 0x8}}, {0x1f, 0x1, {0x2, 0x80000001}}, {0x3f, 0x8001, {0x2, 0xfffffffa}}, {0x8, 0x6, {0x1, 0x20}}, {0xfca, 0xd2ec, {0x2, 0x4}}, {0x0, 0x8, {0x1, 0x9}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x81}, 0x20000000)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000c00)={0x2, 0x2})
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
accept4(r7, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r11, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00', r11})

13:17:29 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
listxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=""/93, 0x5d)
syz_open_dev$tty1(0xc, 0x4, 0x4)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7f483ea7e700)

[  539.729348][T19744] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  539.850126][T19744] BFS-fs: bfs_fill_super(): Inode 0x0000001c corrupted on loop4
[  539.933195][T19752] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  539.947498][T19735] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  539.963985][T19735] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  540.021319][T19757] device bridge1 entered promiscuous mode
13:17:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000)

13:17:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x400480, 0x0)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000001c0)={0x3f, 0x8, 0x2})
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b5, 0x0)

13:17:29 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100))
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000140)={0x8, 0xd85, [0x3ff, 0x0, 0x0, 0x9, 0x80], 0x400})

13:17:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040), &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff, 0x0, 0xfffffffffffffffa, 0x4})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000080)=""/19)
r6 = socket$inet(0x2, 0x3, 0x2)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
dup2(r4, r4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000005}]}, 0x2c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

[  540.494620][T19766] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  540.529715][T19766] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4
[  540.534611][T19793] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe7a73e487f0000)

13:17:30 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x1416c2)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x80000008, 0x100, 0x8, 0xfb14, 0x1, 0x1, 0xdb}, {0x80000001, 0x6, 0x6, 0x18f, 0x0, 0xfffff801, 0xfffeffff}]})
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:30 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1f, &(0x7f0000000400)=""/4096)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000140)='auxv\x00')
write$P9_RWSTAT(r2, &(0x7f0000000240)={0x7, 0x7f, 0x2}, 0x7)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x9, 0x3, 0x4, 0x100000, 0x3, {0x0, 0x2710}, {0x4, 0x0, 0x1b, 0x5, 0x7, 0x3f, ',Rss'}, 0x4, 0x3, @planes=&(0x7f00000000c0)={0x5c7, 0x2, @userptr=0x5, 0x9}, 0x5, 0x0, r3})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000400)="c4411d556900b8010000000f01c166ba4300b018ee660fc6dd64b805000000b9090000000f01d90fae430066400fef7700f20f2c3d0400000066baf80cb8bab16f8def66bafc0c66ed44f4"}], 0xaaaaaaaaaaaab2c, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x48, r7, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x48}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000426bd7000fcdbdf250e0000000800050000080000a0e6f0f362c63fc83b1705f465e356189fda12347245ff78b2097fbdddbe7e4003385d00569cf01f4b3ed3dc02bacba176c4757453b424b234c0acdf"], 0x1c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x40000)
r8 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)

13:17:30 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b6, 0x0)

[  541.061535][T19819] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:30 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@rand_addr=0x5}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x181100, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  541.139167][T19822] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  541.165440][T19803] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  541.199340][T19803] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  541.268289][T19840] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  541.275821][T19840] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4
13:17:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000)

13:17:31 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x810004, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000100)={0xf8, 0x3, 0x6, 0x40})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x5, 0x3, 0x1})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r6)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:31 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b5, 0x0)

13:17:31 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b7, 0x0)

13:17:31 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=""/41, 0x29}, 0x2000)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000440)=0x7ff, 0x4)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  541.670078][T19856] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
13:17:31 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b5, 0x0)

13:17:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)

13:17:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  542.121359][T19879] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:31 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b8, 0x0)

13:17:32 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100))
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000140)={0x8, 0xd85, [0x3ff, 0x0, 0x0, 0x9, 0x80], 0x400})

13:17:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000002000000)

13:17:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:32 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
chroot(&(0x7f00000000c0)='./bus\x00')
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r2 = semget$private(0x0, 0x20000000102, 0x0)
semop(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
setreuid(0x0, r3)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000440)={{0x2, r3, r4, r5, r6, 0x40, 0x8}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

[  542.676663][T19910] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  542.706376][T19920] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:32 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b9, 0x0)

13:17:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000)

13:17:32 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
read$alg(r0, &(0x7f00000000c0)=""/69, 0x45)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000001c0))

13:17:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(r2, &(0x7f0000000a00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x98, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2f99}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x98}}, 0x20008884)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r4)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000c40), 0x4)
close(r6)
sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28009200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x231}, 0x1, 0xfc, 0x1f, 0x6, 0x19, 'syz0\x00', "ab964ef2b1e46f7e27e241f90d70f92723de42a24b0024e45fbb58386bbacf7b", "2d23f3127bb4626b03e5b5659e71d986e02b4ef4aa236d529a9177b2998b4c7a", [{0x1, 0xda93, {0x3, 0x2}}, {0x9, 0x300, {0x1, 0x3f}}, {0x4, 0x8001, {0x0, 0x80}}, {0x8, 0x100, {0x3, 0x1}}, {0xc0, 0x5, {0x0, 0x3}}, {0x4, 0x6, {0x0, 0xbb}}, {0x1ff, 0xad, {0x1, 0xffff2dfa}}, {0xbcea, 0x7, {0x3, 0x8000}}, {0x5, 0x8da, {0x1, 0x4}}, {0x8000, 0x2, {0x0, 0x9}}, {0x7, 0x6, {0x3, 0x55}}, {0x8, 0x401, {0x2, 0x2}}, {0x401, 0x3, {0x0, 0x9}}, {0xf4d, 0xfff8, {0x2, 0x2}}, {0xc0, 0x8, {0x2, 0x1}}, {0x6, 0x0, {0x2, 0x1}}, {0x0, 0x4, {0x3, 0x1}}, {0x5, 0x9, {0x3, 0x4}}, {0xfc01, 0x8135, {0x2, 0x400}}, {0x7f, 0x1, {0x1, 0xf15f}}, {0x1cce, 0x3f, {0x0, 0x8}}, {0x3, 0x5, {0x3, 0x9}}, {0x8, 0x1, {0x2, 0x5}}, {0x1000, 0x7, {0x0, 0x7}}, {0x0, 0x2, {0x0, 0x200}}, {0x1ff, 0x1, {0x1, 0xfff}}, {0x3, 0x0, {0x1, 0xd0}}, {0x6, 0xfffc, {0x1, 0x7fff}}, {0x100, 0x3, {0x3, 0xfffffff7}}, {0x0, 0xd55, {0x0, 0x1}}, {0x100, 0x9, {0x0, 0x8001}}, {0xf000, 0x8001, {0x0, 0x40}}, {0x200, 0x8000, {0x0, 0x8}}, {0x1f, 0x0, {0x1, 0x463}}, {0x9, 0x1, {0x2, 0x2}}, {0x6, 0x9}, {0x0, 0x4, {0x3, 0x6}}, {0x40, 0x5, {0x2, 0x9bb}}, {0x4, 0x8000, {0x0, 0x7}}, {0x8, 0x20, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x6b, 0x7, 0x7fff, 0x8, 0xc, 'syz0\x00', "98adcb2055a7c3e8bd89f0cd0612b2174ceec825af1f23f9f52d06781268a61f", "bbe548cd14163beb2c3d3194218ad2ee7c4dfb83660c815c76b23abb20becf76", [{0xff, 0x4, {0x1, 0x3}}, {0x9, 0x61, {0x3, 0x1}}, {0xff01, 0x101, {0x2}}, {0x4, 0x1, {0x1, 0x8000}}, {0x7fff, 0x6123, {0x1, 0x40}}, {0x6, 0x200, {0x3, 0x2}}, {0x200, 0xccb, {0x0, 0x5}}, {0x2, 0x9, {0x1, 0xffffffff}}, {0x9, 0x3f, {0x3, 0x1}}, {0x4, 0xdbb, {0x0, 0x17}}, {0x4c, 0x9, {0x2, 0x7}}, {0xbc5c, 0x4db3, {0xfd84f2f55d69cd46, 0x4}}, {0x7, 0x5, {0x0, 0x800}}, {0x8, 0x9, {0x3, 0x6898}}, {0x3, 0x20, {0x0, 0x1}}, {0x3ff, 0x2, {0x2, 0x3}}, {0x8, 0x80, {0x5, 0x9}}, {0xfc00, 0x9, {0x0, 0xa0a7}}, {0x3f, 0x3, {0x3, 0x101}}, {0x100, 0x8000, {0x0, 0x262}}, {0x7fff, 0x1, {0x1, 0x2}}, {0x20, 0x7, {0x1, 0x140a6326}}, {0x1, 0xfffc, {0x2, 0x2f}}, {0xff, 0x3, {0x0, 0x6}}, {0x100, 0x1ff, {0x1, 0xfffffff8}}, {0x7, 0x1, {0x0, 0x4}}, {0xac3, 0x5, {0x2, 0x9}}, {0x3f, 0x8, {0x2, 0x4}}, {0x7d, 0x3ff, {0x3, 0x480165ca}}, {0x3, 0x0, {0x0, 0xbbd}}, {0xfffb, 0x0, {0x0, 0x7}}, {0x8, 0x0, {0x3, 0x3}}, {0x5af, 0x7ff, {0x1, 0x6}}, {0x4, 0xc4aa, {0x3, 0x4}}, {0x4, 0x4, {0x3, 0xa8}}, {0x1, 0x1ff, {0x1, 0xd76}}, {0x401, 0x40, {0x2, 0x8}}, {0x200, 0x7ff, {0x0, 0xec6}}, {0x7, 0x1, {0x2, 0x1400000}}, {0x7, 0x400, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x7fffffff}, 0x3, 0xd, 0xe9, 0x100, 0x22, 'syz1\x00', "3fb25740591cabef779e6f99a3a8d449f4f7020423f67b759a642c99300cfe8f", "e044de29f1b16c1c7eb3eb85b3ea1ca9b84000decce35a85add5bd48888d6c72", [{0x9, 0xffff, {0x1, 0x5}}, {0x8, 0xea, {0x3, 0x9dff}}, {0xff81, 0x9, {0x3, 0x9}}, {0x3, 0x7f, {0x3, 0x200}}, {0xa68, 0xfff8, {0x3, 0x401}}, {0x5, 0x6, {0x0, 0x1}}, {0xbb60, 0x0, {0x2, 0x7}}, {0x8000, 0x3f9f, {0x1, 0xffffff80}}, {0x0, 0x1800, {0x3}}, {0x6, 0x0, {0x0, 0x8}}, {0x7ff, 0x800, {0x2, 0x1}}, {0x41db, 0x400, {0x3, 0x4}}, {0xfff, 0x7f, {0x2, 0x4}}, {0x81, 0x3, {0x0, 0xee5}}, {0x9, 0x3f, {0x1, 0xfffffffe}}, {0xa618, 0xfff, {0x1, 0x81}}, {0x80, 0x9, {0x2, 0xf04c}}, {0x0, 0x69de, {0x2, 0x1}}, {0x3f, 0x0, {0x3, 0xff}}, {0x3, 0xc000, {0x1, 0x22}}, {0x1, 0x8, {0x1, 0x2}}, {0xefe9, 0x200, {0xa4df34b150144678, 0x8000}}, {0x5, 0x2, {0x3, 0x3}}, {0x89c, 0x100, {0x0, 0x3f}}, {0x4, 0x0, {0x0, 0x800}}, {0x400, 0x5, {0x2, 0x3}}, {0x505d, 0xfff, {0x2, 0x7fffffff}}, {0xb88c, 0x3ff, {0x0, 0x401}}, {0xfaf4, 0x28, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0x8}}, {0x9, 0x1, {0x2, 0x9}}, {0x8000, 0xfff7, {0x3, 0x9c}}, {0x7, 0x20, {0x1, 0x20}}, {0xe4, 0x5, {0x3, 0x5}}, {0x5, 0x3, {0x2, 0x8}}, {0x1f, 0x1, {0x2, 0x80000001}}, {0x3f, 0x8001, {0x2, 0xfffffffa}}, {0x8, 0x6, {0x1, 0x20}}, {0xfca, 0xd2ec, {0x2, 0x4}}, {0x0, 0x8, {0x1, 0x9}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x81}, 0x20000000)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000c00)={0x2, 0x2})
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
accept4(r7, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r11, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00', r11})

13:17:32 executing program 3:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000200)={0xfff8, 0x0, 0x3ff, 0x40, 0x6, 0x3f, 0xf000}, 0xc)
r5 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = openat(r8, &(0x7f00000001c0)='./file0\x00', 0x55bb00, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x7)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='bfs\x00', 0x0)
fchdir(r0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x4, 0x4)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0xbc)

13:17:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x80, 0x0, 0xf, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x6, 0x9, 0x1}, 0x8)

13:17:32 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ba, 0x0)

13:17:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000)

[  543.304792][T19951] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  543.405436][T19961] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  543.443869][T19968] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  543.526161][T19961] BFS-fs: bfs_fill_super(): Inode 0x0000001c corrupted on loop2
13:17:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x7, {0x1, 0x1, 0x4973c9ac, 0x800}, {0xb15, 0x4, 0x8001, 0x81}, {0x6, 0x800}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140), 0x0, 0x8}], 0x810c28, &(0x7f0000000380)={[], [{@subj_type={'subj_type', 0x3d, 'self(sy\x00\t\x00\x00\x00\x00\x00\x00\x00_type}^.'}}, {@smackfsdef={'smackfsdef', 0x3d, '#ppp0GPL!'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))

13:17:33 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000000c0)="dc26020d521b0e87d4e015463fa1fbba8aad988d8d92d93e95c7fcd038508d785d730aa2fdd26e77ffe549e49ba11cd883fc434e5db92a9044b686a47ac63dfd48af02e3c6820bc2628d230461dc8f24beb55f183baf03f99fb001b8117be874b0f9914e0dbd9a4a962430da240f542afb04a3323bd97d88a2b467af5f93e8a859d2418c28bf1892659e343ba677bb0aa49fd361546c263f2267881a5b48dde43c74c0ef61f76f917a50c67817ae8665d6124be0a399f47a64e372f6", 0xbc)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000)

[  543.836846][T19978] device bridge16 entered promiscuous mode
[  543.900009][T20003] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000)

13:17:33 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bb, 0x0)

13:17:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/125, 0x7d})
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="650fc732660f3825900010000066f30fc7376680c904f011650ab9800000c00f3235002000000f3066b82f018ec00f01dfd8eeb9800000c00f3235002000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4800, 0x0, 0x20000, 0x2, 0x100, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  544.216597][T19968] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
13:17:33 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
chroot(&(0x7f00000000c0)='./bus\x00')
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r2 = semget$private(0x0, 0x20000000102, 0x0)
semop(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
setreuid(0x0, r3)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000440)={{0x2, r3, r4, r5, r6, 0x40, 0x8}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

13:17:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000)

13:17:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bc, 0x0)

13:17:34 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=<r3=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x6, 0x2, 0x0, 0x7fff, 'syz1\x00', 0x1bc9}, 0x0, 0x100, 0x10000, r3, 0x7, 0x81, 'syz1\x00', &(0x7f0000000280)=['TIPC\x00', '\x89\x00', 'udp\x00', 'TIPC\x00', 'udp\x00', 'nodevcpuset\x00', '@$Vmd5sum\x00'], 0x2a, [], [0x7, 0x4, 0x3ff, 0xbc93]})
listen(r1, 0x7)
r4 = accept4(r1, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0161fbf", @ANYRES16=r6, @ANYBLOB="2b0400000000000000000100000000000000014100000000001700000000000000003a000000"], 0x40}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x40030)

[  544.576569][T20043] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  544.590678][T20050] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000)

13:17:34 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bb, 0x0)

13:17:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$tun(r6, &(0x7f0000000140)={@val={0x0, 0x1a}, @void, @llc={@snap={0xfe, 0x1, "fbd2", "9e3025", 0x8917, "b00a608a0456689001d49beefcffddfee247d5b26adb59535720b6e0bf580da6a28af048094f40a496f9d213b4808e797776b27fb5c6455023095bc339a00c8d79932dbc9fff218b1569efb64ad44a4c1c263198c00136448ecf83108901f2a08947166663e3843939060d6398c18f59d9851f5e2ebb9fbe6b40d4962a3e5dfe3cd1417b9e2f2e883ccc03b0920548ce"}}}, 0x9d)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="ba4a5f42b963f0c6"}})

13:17:34 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="dce6b1846e2dea0db799e58283ff5b25e9c9a34aa1035bc43d6c3ddcc69a6b89e7b54c1e6932cb906a4c444dbec5d9330f1fc0ad2527329df8854af08a2aa2880acf8810740249a0204a49b4763fc92cceb71123ddf3603ce2f089b44ab673ea929d0ce7365c0cd523e7ae17409b86979d728c7548c0fa1b80b5f6313b0bb8807c7783e28bb5a39078581c236df239fbf4f07fc892aeb6c4c48e843dde45285c06", 0xa1}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000)

13:17:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bd, 0x0)

13:17:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x48, r5, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x48}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x7c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x95)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  545.285677][T20086] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=84b1e6dc)
13:17:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb000000)

13:17:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000)

13:17:35 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0xa428b80334c792cf, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0xa, @capture={0x0, 0x0, {0x7}, 0x8, 0x769e}})
listen(r0, 0x7)
r2 = accept4(r0, 0x0, 0x0, 0x0)
close(r2)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

13:17:35 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @loopback}}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x15a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0)
io_uring_setup(0x5c8, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0xcb})
r7 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0)

[  545.842495][T20123] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:35 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0)

13:17:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000)

[  546.072669][T20136] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2c00000000000080)

13:17:35 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0)

13:17:35 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x4e22}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:36 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0)

13:17:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x0)
setreuid(0x0, r10)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@loopback, 0x9, 0x401, 0x4e22, 0x2, 0xa, 0x20, 0x80, 0x62, r6, r10}, {0xf2f, 0x8, 0x8, 0x800, 0x1, 0x2, 0x10001}, {0x2, 0x5, 0x2, 0x1}, 0x20, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in6=@rand_addr="3db34c7fc2c48cbdbc8086d0781f1e33", 0x4d2, 0x32}, 0x2, @in6=@remote, 0x0, 0x4, 0x1, 0x20, 0x200, 0x1, 0x3}}, 0xe8)
close(r8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40401000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0xc004140)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  546.629000][T20176] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:36 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0)

13:17:36 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e20}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000100)={0x101, "744f2f4cd4bf955763a3e9975d9cd3eefb6deb0cc23a570339167253aa5020e4", 0x2, 0x1})
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0)

13:17:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000)

13:17:36 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa, 0x1}], 0x13, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
fcntl$setlease(r0, 0x400, 0x2)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x40})

13:17:36 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0)

[  547.093673][T20204] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  547.122848][T20204] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4
[  547.125524][T20205] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
13:17:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6018230000000000)

13:17:36 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0x0)
write$rfkill(r0, &(0x7f0000000100)={0x1000, 0x3, 0x3, 0x0, 0x1}, 0x8)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:37 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r2, &(0x7f0000000400), 0x1000)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:37 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c1, 0x0)

13:17:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x8, 0x7, <r1=>r0, 0x0, &(0x7f0000000000)={0x990a7e, 0x8, [], @value64=0x8}})
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140), 0x2)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:17:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x800000000000002c)

[  547.562965][T20232] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:37 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00')
fchdir(r2)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
bind$netrom(r3, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380))
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r4=>0x0, 0x0})
close(r4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r6, 0xddff}, 0x8)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(&(0x7f00000002c0)='./file0\x00')
setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x3})
write(r7, &(0x7f00000001c0)='s', 0xffcf)
r8 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r8)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x2401, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xd53100, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0x0, 0x38414262, 0x0, 0xf84, 0x2, @discrete={0x0, 0x80000001}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  547.832160][T20254] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  547.863131][T20246] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xa8fb0e1600c9ffff)

13:17:37 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0xa0a00, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000300)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x8d, 0x1d2, 0x3, 0x4, 0x4, 0x9, "a62c881f996b002e5e58583572ad3971eb9f804418e0ae00bc4f353a9d27f451b02af113efed1d7eda2811f945b6996f6bf7d8a976af41d9ed5f8a64281cf9f22dac832f7434a5e7e667d03df8a64b1f9f3524aa4be463b45307bb0df43d56c4100f461144c30378370b3b0bf1a412b09b2484eaf5aad2e6fb206a8bba2ebc42102023c0b26160b7339571fd57"}}, 0x1a5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:17:37 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0)

13:17:37 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a9, 0x0)

13:17:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffffffffffff)

13:17:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000002680)={0x9c0000, 0x7, 0x3, <r7=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990969, 0x1, [], @value64=0x7}})
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x402081, 0x0)
ioctl$BLKROSET(r11, 0x125d, &(0x7f0000002740)=0x7fff)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r12=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x70, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000026c0)={r12, 0x4}, 0x8)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
process_vm_readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/172, 0xac}, {&(0x7f0000001480)=""/143, 0x8f}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f00000001c0)=[{}, {&(0x7f0000002540)=""/186, 0xba}, {&(0x7f0000002600)=""/118, 0x76}, {&(0x7f00000000c0)=""/13, 0xd}], 0x4, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:38 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

13:17:38 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a9, 0x0)

13:17:38 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
chmod(&(0x7f0000000100)='./bus\x00', 0x21)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  548.949299][T20310] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000)

13:17:38 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0)

13:17:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c3, 0x0)

[  549.283005][T20323] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:38 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3f)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:39 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0)

13:17:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffc900160efba8)

[  549.735666][T20341] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:39 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0)

13:17:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c4, 0x0)

13:17:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000)

13:17:39 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0xbd}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f0000000400)="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")

13:17:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:39 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:39 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:17:40 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffe0)

13:17:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x182, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
accept4(r4, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xa4, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/62, 0x3e, 0x1, 0x1}, @fda={0x66646185, 0x7, 0x0, 0x28}, @fda={0x66646185, 0x5, 0x0, 0x7}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}, @increfs_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/202, 0xca, 0x2, 0x2f}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}], 0x7b, 0x0, &(0x7f0000000500)="53ff577cf3cc8621af24c86d1748e2893409845c856dcbcf5f90750e9293d86a8f5bd619f0b59c29b90004d219ac1dabf523b1ba6dad41eb6f5c94b7e906a88262fe444f79c55e68efa789779a551ea0e5ce9786d8e2f7586d8351046df1aa7f1b63687dd96fee6dbd1c7ed9720233a57764ff9157409b9945917f"})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x220, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  550.527909][T20390] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:40 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x501200, 0xa)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00')
syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x792b1d17588cbf5b}, 0x4004)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="51d44632f04c3ecb4bb2de858614be0c30b203c4551437d8f9d07af774ff7f105cefaf121d8d589bd4db2ba2612c29058aadf884042d93d391601c388f46c4f045c45da2b0454b475428cbdba6903e611f7d4ad5d030e8e24acfc9e1a18385f79616f6e79e", @ANYRES16=r1, @ANYBLOB="20092dbd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c5, 0x0)

[  550.768777][T20403] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:40 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:40 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x23)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0x9b0008, 0xffffffb4, 0x3f, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0xa10904, 0x80000001, [], @p_u8=&(0x7f00000000c0)}})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
mlock(&(0x7f000001d000/0x3000)=nil, 0x3000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

13:17:40 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8, {0x10000}}, 0x18)

13:17:40 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c6, 0x0)

[  551.289020][T20427] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  551.343876][T20435] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:41 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000010100001040063b64a4c0eb1ecad6727df", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x70, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x34}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x85}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x22, 0x2, "b0c31e2659ac9c07695703756d3dfe39642a39f029e102dce824a9de0418"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7f}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x1)

13:17:41 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)="03c585416d1aa06d6931ead6d5a41e1bcc60c8a67dea1b745365b1d063e68d79094a60315ae3092981b7d0615afb8e7c6d5a25d82ae8e52bc253f510875fab118c70209e9a784c6c548b3af12fed028c83b6de50856731ea0e92fab59513760e6c406a2627b95afa694084f2a8db5582df01113efa95a6bfc0b0f083ff1d80b33ca7508f996a5e", 0x87}, {&(0x7f00000001c0)="d390393a7955ce87f917df285ae166884d20ca6492df1aad871f1d9b606639f41f2a005b5cf2f01f8c5665ecbc67e4361e9cf16ab38f7f8409311c09645af5a7d1c40240c545fceef136be23f9649c0f32b1c77b2290acde071b837cb57f9700cdd1326f0fcadb9023e3b26d14d135868ffada988c3ec6a5c6427ffe14cad72f664e233610d9d4775305b4a24ec067d53c25d69ebb45c91cdd3c13ac395cc6aeec081e4ca5ef4f35d2db43af34615f4e7c32d9fef971eb80b7089856fcb610d1928282fd67c05302c07aea712554cf8217dc66dae52252", 0xd7}, {&(0x7f0000000400)="82946d7d7368f9f741649356076cfec5c5f53ae203b17aa67fc3a3de365a464ea803e5af94edc828e716ba30dff40cc4efe5bf28d358d321f3db5fe3c4673fabff4aa88ce05cf2bef651c1eaa62cb2e1566a74581add24bf677360aa10989418d6f882aaa1d95abc9a2913205e2d1e", 0x6f}, {&(0x7f00000002c0)="83dc95fa551815b1c6d37726083209a12a127fb0469de4ad0ee4eb8f2c41ff7a14669b539cbcba4d418c3b73209418a9da1ca031d426", 0x36}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="f497315a2e82e5e7385f1d3f26f86d30002ab65b5ec04ff712445146cae9bb4390ed3b8491a2fd9098d1f2138b2156285b8c2c31251d8c78d065d1dd0c45f515f7f9e14329b123d4ae16652553da4bd49f85232979aed03516340e16fa4d011ded9d86e7331bb40708cd1d9af8f7f92e537a7c88a3babb73658a16cca8076be0b309d0775947a7e64a67f815a992956483ef42241394cbde52c314ba62b1dd013e933ef1fcd4e0e74a3afd33c851d30df12d42eb81d4a1fff9107c367edd4789b02a490da8701fe660c1fc81a5c4bfee3f0ecffc7870a04dd4bc1768692f9477", 0xe0}, {&(0x7f0000001580)="a5f04e3600a505da4d88fc71557d0b27a057201a07c5601c41af921c5e0b14fc6efcdcddb787d4a8e331e0215051abe9457a06c50581addd35c8b91189ee3488e80822d7bb2f32423370f9ec350464f9de662e5526436c52b305321eb92e7da68852ff5a26d5222a32858482215687bb8a1888dcc3b8206e70a43706b008", 0x7e}], 0x7, &(0x7f0000001680)=[{0x48, 0x108, 0x3, "319027f56cd6229d6fe128d5b9d9d6c7962ad816b21125c3f9ea6a90c80dc39ad58a2f9a6f49ce72586f9c4e017ee32bc9702c"}], 0x48}, 0x4001)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setxattr$trusted_overlay_nlink(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='trusted.overlay.nlink\x00', &(0x7f00000017c0)={'U-', 0x6}, 0x16, 0x7)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  551.620613][T20453] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:41 executing program 4:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  551.827827][T20462] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  551.874854][T20466] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0xfffffffffffffbfd, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r8, &(0x7f0000000300)="6514558e3977948306fc4c7d40922fe1e9a5a571bd88fbe5646d13bed75a0e866d59daf04adb01fb94e494bd74b33655fa055ed5ec62e0ecbd38c2d6a5025f3b7f2427be8404864f8017211fe42b86f5083663f57b28dd5662815df7057b4a069bd4bf25f81ce36eb76c9679f54f9a0cc634cbdf5018c78d795b93f31deac9025030e0934e28ceec3ad7995f3e56fac9f2ae8cb40805fd679678b7847eae1939094b38a4c75ffc70f428e6f81e4c18596706f39ff61a38a2c28ca03c94691bd38d518635cb83fc996aa52d1675d60d845c0e3957f1a017cee6e1c68030cc431368fe99", &(0x7f0000000400)="fbb4c5ec892e76d42ffb4562171e1ef0818d22d8d93c8f8fee33ccdf82d81d377f3a3440c5222aa414f8f4bb2392157fd33dd65b5391cd912cbc31b7c925c91f756aad00176d87793ab9a67dd003fe1df7038564f81c30c5e2ec62bda104a10f29b75d8b333d568375178f0b32999168723c6d5a461d57b2ef2c613c8c84799c75374ef1a4429b4f489a5714fee13c72d6073dcd5bd927d751b747f961c5d61a1d41aa674c7109ae71da9b45ce5e7778d7b2981138aac705d0418d22950fe597b67cec73afd4a386c1", 0x2}, 0x20)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = openat(r11, &(0x7f0000000000)='./file0\x00', 0x22a542, 0x52)
ioctl$SG_GET_ACCESS_COUNT(r12, 0x2289, &(0x7f00000000c0))

13:17:41 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c7, 0x0)

13:17:41 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, r8, 0x2f, r4}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  551.986244][T20474] device bridge2 entered promiscuous mode
[  552.016052][T20466] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:41 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:41 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:41 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000180)="dc", 0x1}, {&(0x7f00000000c0)="98df47cb4ecaba4e62b607429c101679fa83cb86883a78e5196b3d9f09810e2c418c224ceb45943baaeaabb140e923d73b7083bc743f2412dbb0d76eee5f22bc373e20d89b16a0be418e07f3b9b85da42df7f01c08846e3ad884096e4425a1e42269238d65c8d140cb5278c3980c43355cca851de2be6f977e169d6576b888e1e90dfd701523d6609468116806dbbe4fc5555b382edab5730f623476c17d6279", 0xa0}, {&(0x7f00000001c0)="e945fa2ceff1b70548d82fb23bc94f3b6ed552b8b0cd8311dd99fb", 0x1b, 0xff}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  552.334674][T20478] device bridge6 entered promiscuous mode
13:17:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c8, 0x0)

13:17:42 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0)

[  552.580948][T20508] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000)
13:17:42 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x2, 0x1, 0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x50d, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa03, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:42 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:42 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0xc, @raw_data="11de75b114940980304f0776cf64b3d1c237abae6a3e4b9036c4faae152e2145fcc1cbb9873135616b33307fac8f691c363ba6b7a06fc5adfd2e1e35a7df6dac572d082871237f2f063703957c2df0c10d5ebcc2d4f55feb504d413c43832a53c6e412ef5e6ed6cfac08b13239a83da5b76753c95e38eeb721a1cd5bf0d203f1c3000c284d7a9a563a63a757e72d1668601de9e4094f697b267641e02dce46717405ceee7719e61d6f5d8d9ad789d811ec7a6ef45ad4d907543f9bf522d8b5ff28f371188c5fdf08"})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xd)
fchdir(r0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80000, 0x105200)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:42 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1c9, 0x0)

13:17:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x1, 0x8, 0xffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  553.098315][T20534] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  553.185001][T20540] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000)

13:17:42 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ca, 0x0)

13:17:43 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/asound/seq/clients\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000a40)=@ccm_128={{0x303}, "b87fee455331042b", "b3f2d0e4e44ff984e9a951c877866aeb", "abf01ea9", "b95afa3fd7a73612"}, 0x28)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @broadcast}, &(0x7f00000000c0)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:43 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffff80000001, 0x38000)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x18)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:43 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

[  553.718869][T20575] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:43 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:43 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
r3 = accept4(r2, 0x0, 0x0, 0x0)
close(r3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="e87d15d9a3c950f7841ee45462f656000050cb443abfa70915000e6e9b65a765d5e5b18eb598ed6a22de8eac50d68c38824c0c417721a7c071c6381d574072343601dd6f379c0c05c12231150242981f06276455ad80d9df06af59634443ed51edfcb7020e7ced5e0566b4ba8c1eaedd", @ANYRES16=r4, @ANYBLOB="000325bd8da71fb12141617000fedbdf0000000000010001000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  554.081435][T20594] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0)

13:17:44 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:44 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0)

[  554.695215][T20621] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:17:44 executing program 0:
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:44 executing program 2:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1cc, 0x0)

13:17:44 executing program 2:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:44 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0xffff, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

13:17:44 executing program 2:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
close(r7)
syncfs(r7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"})

13:17:45 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1cd, 0x0)

13:17:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x4)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
syslog(0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
accept$netrom(r4, &(0x7f0000000240)={{0x3, @default}, [@rose, @null, @default, @rose, @null, @netrom, @null, @null]}, &(0x7f00000000c0)=0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x2, 0x8}, {0x4, 0xffff7fff}]}, 0x14, 0x3)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGETKEYCODE(r9, 0x4b4c, &(0x7f0000000380)={0x5b, 0x3})
write$P9_RSTATu(r7, &(0x7f0000000300)={0x6e, 0x7d, 0x1, {{0x0, 0x50, 0x0, 0x6, {0x1, 0x4, 0x5}, 0x40000000, 0x6, 0x100, 0xb0, 0x6, 'system', 0x1, ')', 0x0, '', 0x16, 'eth0security-vboxnet1!'}, 0x9, '/dev/kvm\x00', 0x0, r8, 0xffffffffffffffff}}, 0x6e)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000480)={0x2}, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
write$P9_RREADLINK(r7, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))

13:17:45 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:45 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ce, 0x0)

13:17:45 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1cf, 0x0)

13:17:46 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:46 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:46 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

13:17:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000140)={0x1, 0x100, 0x0, 'queue1\x00', 0x8001})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0xd)

13:17:46 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x42040, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x118, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x400}, @CTA_TUPLE_REPLY={0x9c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @broadcast}}, {0x14, 0x4, @rand_addr="9ba3ffac932f9b9316d119d8e41f7b25"}}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={[], [], @multicast1}}}}]}, @CTA_ID={0x8}, @CTA_PROTOINFO={0x58, 0x4, @CTA_PROTOINFO_TCP={0x54, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xfa}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xff, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xcd, 0x9}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x7f}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x4, 0xce}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48080)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d1, 0x0)

13:17:47 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
accept4$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:47 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x7fffffff, 0x7f, <r6=>r1, 0x0, &(0x7f00000000c0)={0xa2095b, 0x1, [], @p_u16=&(0x7f0000000000)=0x4}})
ioctl$RTC_PIE_OFF(r6, 0x7006)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:47 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0)

13:17:47 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x800000}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f00000017c0), 0x259, 0x4000000000000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x8}}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:47 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x60000, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88002012}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0008000100010000000800010001000000080001000200000008000100020000000800020002000000080002000200000008000100020000000800010001000000080001000200"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4004084}, 0x44840)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:48 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:48 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d3, 0x0)

[  558.502356][T20774] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getpid()
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x450400, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
accept4(r4, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000001c0)={0xa20000, 0xeff, 0x80000, <r7=>r6, 0x0, &(0x7f0000000000)={0xa603e9, 0x3f, [], @p_u32=&(0x7f0000000280)=0x5}})
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000140)=0xfc1)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r10, 0x19)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:48 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x2194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0xd48, 0x3, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000140)=""/125)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:48 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:48 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d4, 0x0)

13:17:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
dup(r4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
r5 = accept4(r2, 0x0, 0x0, 0x0)
close(r5)
getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @broadcast}, 0xc)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

13:17:48 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:49 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="bdf8d8d589e0044ba5b7f986bce00108bfc5aa813a1b759cd55ea4dbf1e52ae71b58f14cc8675e7e3793f8f6d682ccdcc4c848c3c96bcebbc5319a322a939187a7d2d5c0ebb158454310", 0x4a}, {&(0x7f0000000140)="c453711373cdab0ea020579295cd301696cfe942e03aa494e747a24e1b790b34", 0x20}, {&(0x7f00000001c0)="4d5065e811adaa5dea0e1cdaf8b28273acb89f8295782809d7c95889d09e03e372b1e6c0c25b48d1b8cfba9520e758e58a61c5868e4c5f5ef1aed3ba9f6b1c7da9b77de4b735eee2d0ae48a6596a24d1eb6d5cc3a9f6e1e358778f7e0e4cf636c0e6003b753f57b0", 0x68}, {&(0x7f0000000400)="3824cff21eb565b175afcb2f0706444e0c486708ce2b8d95ed6ca649d0410f150a82f974ccdf498a294ba47d755bfc129d0ed9abd24803e3ea4833bfc46fff81d07bf534d9968812af00c45ff11df41560e6d8ca72680a6f015460f9d4ff55f284eed46b55413baca7939f7be5acb356eccdaaf3fbde136c7b967d5e56b38838cd2911d11ae38f02cacf9479b75dbb6ea6243fc5bf3a27a46c2fa1fe3842ecbd5e9900c5ed3b3efadf2d6236b569a86e9ce4f8c961b5e43c3b269ab370af6859c29c49", 0xc3}, {&(0x7f0000000240)="687df76839dec5b5bb60f92e19717192af71aa19fbc9a85f8d1f8f702e8880bfe592717b0b108f4dcfbf44895ebb2cdb61553803724c0cba2b7d2dd28b8d1078bf1ded574a230da51b0c2a9d77b92fd149d6be207d6585bd5547e64620022af27805bd7c72b73b452b21430c489712a2fb3293f81375bc8485ce8c4e7d25a595d75cbe56776b05e7f6bf73e980c74fd782fe5c594874c831e1fd1590a85f04457d72e3", 0xa3}, {&(0x7f0000000500)="14dc9c7dfd8070cb2250a6a9d73c1c0c002d4dcd64859cf5b1f3b7e9f55c", 0x1e}, {&(0x7f0000000540)="0eac0ff5", 0x4}], 0x7, &(0x7f0000000600)=[@ip_retopts={{0xcc, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x2d, 0x2, [{0x2, 0x12, "8e1f35cb3be393e065dd89b58402c34a"}, {0x2, 0x6, "30767f71"}, {0x1, 0xf, "f68018787a87f0bbefc871138c"}]}, @cipso={0x86, 0x33, 0x0, [{0x1, 0x12, "cc540591619e18c3d999531ef596d5d0"}, {0x5, 0x7, "9e6aaab8f6"}, {0x5, 0x4, "1bdc"}, {0x5, 0x10, "449096cf650b7fdc5633910fe652"}]}, @timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0x9, [{@multicast1, 0x9}, {@broadcast, 0x35e}, {@empty, 0x3}, {@rand_addr=0xffffff00, 0x8}]}, @generic={0x88, 0xf, "ad2789507b0d7fed457c98768a"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x6, [0x2]}, @generic={0x0, 0x11, "3db5d7a131291c5f38038f7d8beae1"}, @noop, @ra={0x94, 0x4}]}}}], 0xd0}}, {{&(0x7f0000000700)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000740)="cecd621f8bbebfd1684cba1ec5622b9563c5e2caaf3df0a74424725e859f063ba44cd5927fb9e5a18c590b9f7eca3ce320113fee2cc92910b755bc3ddbf63984a68f9ae00480373254e4e3d214ca04fb0655dbd3a20c068fb0c06d884d21b50985649c2b8b2fd55198a62913683f56e8192765d1973e59e0468367f0f40140e860d5273be452207f14dae25e9174e1d9c703faa257aad25bda695df6e3d537c24fd5e6b0fab140d56866552ca5a9836a1b21bbce7511d6cc5cfd0b70c68b47182b8c0e0ed0546533", 0xc8}, {&(0x7f0000000840)="68039698e650417c128b4535b3488d07dea69e6ec808f17616eccbcc385963d604141195f8a99421472ec203660cb231db32174f975a750e682f3f40f225985b060c5d6a23c3ede13ebb08bb4041346e0bc56f3968b16fc50f177ca1764339d566156f9562d66c50e33f8fae93cca6eaeb2d90072229525f55f0c329b55fde36d4694e640d12c6c4661ce8141897316e9856168e4ff72451c2d77ca636052f32a012f348a388655b1c4404a95c425496f1847ccbef70ab98c05483b6e8dd4937b9bd48", 0xc3}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="f68f8c2a431e267c3cfa1b95d4ad7e6e01691a4fc2c9bd9fabbe5e0f681637cbc8446612296c615f837fe130d21f5d90cd33927842f00a24b010ef3eb5b442cadb44dda1", 0x44}, {&(0x7f00000019c0)="49771342dda9eee429d2605939c5be6dfdcd10639aca7df9c54cc27ec0aac0729c04194d03ac3e95a06cde8368edd72d4c886603cb1a106f10a72a5edadc683d34b6136aae00416f9f1eb78c73e4838a16be131a17010439257cbb93b0abae87f1e4c773e373d68978f957722d9441a555ce6ac7b68abed8cdff5e6a719d791795fd6ab059ca1c9d97b2f2acd96a0d7f8182852f", 0x94}], 0x5, &(0x7f0000001b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x60}}, {{&(0x7f0000001b80)={0x2, 0x4e24, @rand_addr=0x2}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001bc0)="1054f8e7a448a89bde76f2a7cafe7c691a67a0f61d7c8ff2eaaca0215d1545d4de7cbd68bca52bc6f7b0cdf84d402095f68418d17a832fc9a10f22ac9294de2a59be27b5ff46a5c686da416d87c0bb4a2564edca49a43fea3195d64d95829b3357b29312215941598162fa721075c93645d267ac9189650080f1690e59ae9c34693b6522c0d3812ca189346ed8867d6fbfe0248ca43f831bcf1ab15c35b113fa26bc", 0xa2}, {&(0x7f0000001c80)="8793beb17cf22e0362523336e8b7b7452f77eb58923d9ff07cb6f6dc2aca1a761beeff619aa8e761f003cb5172acf1cb93e840af3a017b3f34f4d96155844af1c084d56f27a67aa4b4481f8d951d90bf5dd964e0cddb4c7f70050eb9892dd53625657d6fa39cca52821dc90cce1182429f36d80d3d014adc27240169adcc282f5c005d14fe2e262cb0293faf997e55772784715724b5782ff841e21196168305a09f5bbe6c65b970e22ad7e76c021d448c71e8e4ac577d68a35690f8a3d2ee33", 0xc0}], 0x2, &(0x7f0000001d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffab6}}], 0x18}}, {{&(0x7f0000001dc0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001e00)="9b56a26334e02301a7f18a161a1f48ec52e9ab0541679e756ebd36d2ab811b64265da309f6ecfd7948da3c187f6d984bde78208245803f473e7e2418f6475166ff71cb882395c89865c386dec506f348d1074b3a7145d5f6ca679ece5ffacc9f040dc012cba95806ccc43951bf8f594cf5dd9a7b000685703084f7188a421897bbf6170e17e7318b6ea68623aab646278fcd92572c33a19703f68738993402dce8e6aa65c375", 0xa6}, {&(0x7f0000001ec0)="e68cbf83cf0bb7d38d4419fee71c0978182cf75bf0d17529cde8da5846bc33e7fef476e32438bb110ba393e843c121f6f9aea0da5d59853a2cdf54a665ec28505ed754217ce50d70f7989af06ac357deae5410919752c9707f08f73a00824e631b93db10bd12879c206e73deb70feca3b61337a8aefd724611106004880c64fb49fea35a6c3d65898a4b6e539a2ce8aadeb18aae0108cca2900b32a39fc299c9", 0xa0}], 0x2, &(0x7f0000001fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x34, 0x2, [{0x0, 0xa, "6d6dfb44c6029754"}, {0x6, 0x12, "e5314db60b2c73d6e775968670a35473"}, {0x0, 0xf, "22ac76251cec944bcda4adce53"}, {0x1, 0x3, "13"}]}, @ssrr={0x89, 0xb, 0xf7, [@multicast2, @loopback]}, @generic={0x94, 0xd, "ce2d5a939c31565d2f27db"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xbd, [@multicast1, @remote, @local, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x6, 0x11, "3f909a9578f25d7b2392093d629746"}, {0x0, 0xe, "49a0e6761ec3c1c94c6b206b"}]}, @end, @timestamp_addr={0x44, 0x14, 0x4f, 0x1, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}]}, @timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0xc, [{@remote, 0x9}, {@local, 0x8}, {@loopback, 0x1000}]}, @end, @end, @timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x0, [{@rand_addr=0x631d, 0x8}, {@broadcast, 0x910}, {@multicast2, 0x6}, {@remote, 0x4998dd46}, {@empty, 0x7}]}, @generic={0x94, 0x9, "94341cda7bd0d8"}, @timestamp_addr={0x44, 0x2c, 0x1d, 0x1, 0x6, [{@empty, 0x6}, {@remote, 0x3}, {@remote, 0x5}, {@multicast2, 0x4}, {@multicast1}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@empty, 0x400}, {@multicast2, 0x594}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0xc3f, @multicast1}}}], 0x190}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002180)="52d7b8dc51d477a10f90a5eb89c5e3796e214979da08954292e9c8ff1976dbfedfe7b19b9d6c2194fbb50c4078c4766b07a0f3019b50d116f002c9f49e05c41a8f71b7ac5dcf7592c18d5d2797a8f472c7977d0074f70eb1d5618e7cf2ad44e472eaa7c8bc756572f8", 0x69}, {&(0x7f0000002200)="988207b11c67a5b5162fe151bfcd4a455afbcc9536ad912a156cb03766d2c74e628d4b5433a19be81273cc81bd075b2df5259217345387fe82f55c16aa2289492bf738098c8864ba6c1e333f6ac8950d1d1c27b699bcfb589dc7705eadb68c135ee22063a30cd65eb395f7d27a58a4fe064e517698651b5c240ed5cf7c01bfed38b65679f50d1b7ae75832425251a07cd1a2cfe62d4f18a3082d831aeb256bc5c1f0bf9449eb8d5e971b74626be066271e83f0d3e84e0d93572b34d6cad1e0f1835b00a42a9575796a", 0xc9}], 0x2}}, {{&(0x7f0000002340)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000002380)="2b88b7150626bc8088b5f92a153f4dad3e7c468e3045f4a5da0ad7fbb2921bcf79df64c525826b479f8caedc4d9df7eba68a052a48a435e0aba475fd35d32d6f3b51dd34dd8dff7e952032964ac1ce718e35d525b4e8d95c42e7b7e241b6510ff969ff20f3cc46563d7c6ab0fe87c398ac04ae45198f1fbdebf99729d5c3f18b0cd1ddb10ba80c65d62e53ef33678a801d7fdaa2ede226191bceb90d637f4a0ff13e73eeece94c51a747ad30f99b75085adfd05a6105cf36084f9224a88e6fb19e5916c5824f25b6c412d71f8e09d7fcd06b", 0xd2}, {&(0x7f0000002480)="728fa97ae191f478872cd9cda2c4753639c431b3a9775d635bf6a68ff321b266402efcbd6cb0fddb6f0715399e7e77f2aa322712be4c37fd69c8a043e65a515b29699be9db8db1076714c44f4e0cec7aba0ad71e482c21758c9ab0120bc92dc43ff947457f736077eb0a1980a13f126bc169ac4cb24468fed024ff862b53a6", 0x7f}, {&(0x7f0000002500)="c3982591ea42a79043044fc3334d4b90cecf0a7f34e3b5ad60c0cecb8e9ce5798a3baf661279bbfc290ba50da20eb111266f08613cdeebf3d2dccc9f27f665a4d9fa0cdce41948d43bb88452a2f04f6f726e4f6f54f676f31691ae45ce1ce10ede69dc9a352f7c90d11e040159a48dfc084095d8f7df14aca2f00921acd39f6b4c6c5dcfd3782bd1485a7e22d4afde54b00c1d", 0x93}], 0x3}}], 0x6, 0x10000011)

13:17:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d5, 0x0)

[  559.708751][T20828] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:49 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xf)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x18, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x82, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x357, 0x6, 0x0, 0xa, 0x17, 0x10, "a4203870deac8aecb157af94f92b9245a2a8030cd4f3cb2efcfe604e64acad178d530bb6a719940c981ed164f4129be3eb909615a6a3b2b358682dac13b2baf7", "019513f54d4a974fc4f3a5aa27174a1f3f802f406571a431394c7b5e447d8151e8e9c768ded7cbea82a1caddf21c005b21bd455b48a59649a9571627e6222a1e", "740b86cb5fc9389a6debf7c41dff9c36e8ac30edea3b1a85bbb152d4430f1495", [0x0, 0xfffffffffffffff7]})

[  559.893662][T20828] device bridge3 entered promiscuous mode
13:17:49 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socketpair(0x15, 0x6, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x10000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x28000001}, 0x0)
fchdir(r0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x4200, 0x60)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:49 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d6, 0x0)

13:17:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x9, 0x3, 0x4, 0x4, 0x3, {}, {0x0, 0x8, 0x1f, 0x40, 0x0, 0x3, "21cd832c"}, 0x8000, 0x3, @fd=r4, 0x2, 0x0, <r6=>r5})
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r8, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r8, 0x7)
r9 = accept4(r8, 0x0, 0x0, 0x0)
close(r9)
sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1e0, 0x1, 0x2, 0x200, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x14, 0xa, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x6}}]}]}, @CTA_EXPECT_MASTER={0x8c, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0xf922}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_MASK={0x44, 0x3, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x32}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x242f}, @CTA_EXPECT_TUPLE={0xc8, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @rand_addr="58263857297c19f503326c2d938514c5"}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x1b}}}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x280}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f00000004c0)=0x2, 0x4)

[  560.539331][T20864] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:50 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:50 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
socketpair(0x1d, 0xa, 0x1, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000604539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @rand_addr="39f92ca326a6e7b962718ea9068acaac", @mcast1, 0x80000001, 0x3, 0x6, 0xdcf2805ae44c88dd, 0x8, 0x824403d2, r4})
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0x209401, 0x1)
fchdir(r5)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d7, 0x0)

13:17:50 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

[  561.195406][T20890] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  561.208352][T20890] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3
13:17:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d8, 0x0)

[  561.324246][T20895] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  561.343341][T20895] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3
13:17:51 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:51 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000400)="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", 0x1000})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  561.802389][T20910] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x44)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)

13:17:51 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:51 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d9, 0x0)

13:17:51 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0))

[  562.268140][T20928] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:52 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1da, 0x0)

13:17:52 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:52 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}, 0x9}, {{@in6=@rand_addr="c6b593546a2df1d2415c39f105050c8e", 0x0, 0x6c}, 0x0, @in6=@rand_addr="6d90e3ff3eaed0d4a8c97336271a8e37"}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x800)
setreuid(0x0, r1)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f00000001c0)='./file1\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000200)="bccdf1c379f04b9065bcbe484a4d1852e92fbca29683a79830510344fdd816ed0e7f0be2e72255f09d203f8ac3eee78e50b42720fda0adbeebc9ea41655ece1670df2c29af3c3523fc7942b39996d90f77b2936b3e538eefd0dd013ca5bfc194ba1a5fddfa9f963eb2ab6c15a44d546a0eb47881d8ac238f1bb67cc5bd6979f823bfddef07e19871556e2967c054e4ebc905e158", 0x94, 0xa4d2}, {&(0x7f0000000400)="7e1262b123b960f5db3b9a42bf98fdf573e42280ab27bbed42645b1c34b87020adc80492db98f7e7e54bf88421e503dd5c2cf387270780003b22ae9d4db1e6700eff53e5c0355515848d1d6453b676b36c1a1f2b8f08592c5260c64cda2fd9f2882cc37cc39bea7665c7e601a37c32677c347baef224970bec122d3bd63a7bf1d9fb044935e8d6c1fca52f8bb93c3bf908439077df0ca341e19e66109475c2cd9774effdec9e9e71edbc339aadc3cc9cac68484fb8b795f71ca523f7053259bf1ce8", 0xc2, 0x1000}, {&(0x7f0000000500)="ab0e774ac6731ac3c2ddf80bb23535d5fbaed9aed8ffffc70389d80dfb5d667307ff7bb93c8f72659b68b2bbd4fd477ed91429cbc56f6db4cfc99a9685f7fa9440b7184bc34530227b662455cb4c2cb6015cfde9a47588efa8b5a3aadf6a1c7238c0242f909b8ba0", 0x68, 0x7}, {&(0x7f0000000580)="4d50f99bbcde6524c1098d2be4ed34c044f4b96f5322453a8ed9e00f09516cc46b1547e5027a30ef5f646156bdec80bd8db71f1c8b13e48d32d00b660439be32e7f46e345f32a52b055056bc98cd3306a1655a4d93cfc99e3d596c491b64e55c2959", 0x62}], 0x20, &(0x7f0000000680)={[{@rescan_uuid_tree='rescan_uuid_tree'}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@ssd='ssd'}], [{@obj_role={'obj_role', 0x3d, 'bfs\x00'}}, {@dont_hash='dont_hash'}, {@seclabel='seclabel'}, {@euid_eq={'euid', 0x3d, r1}}, {@appraise='appraise'}]})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1db, 0x0)

13:17:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x12400, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000140)="9f5e2f6a08abf7ba8c4dd371b32f6e4f47a2354aae621ee1d2a1f130e34bb0b616632e2c49489623e47c3a3a40c8046eeef00f06ad3ce724cf2289cb48883c5ed7aa951070eca97f07e8cb7d644e7ad196ff7ea4ff029ab8670af296e6234990fad36ba6dbbe64666135b36161ff25a5dbe52c8bd5989b1f552e9d42170203b2ac8768190a3ff95cceec0ec559f69ebbe02b1531f1f7034498c97be50af922377b46f927790bb4e21ddfa63e7b01bc123dc80435"}, 0x20)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  562.910901][T20950] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  562.968737][T20950] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
13:17:52 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x41, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4880)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:17:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1dc, 0x0)

13:17:53 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3, 0x2}, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:53 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0)

[  563.698892][T20986] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1dd, 0x0)

13:17:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
accept4(r3, 0x0, 0x0, 0x0)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:53 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0)

13:17:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1de, 0x0)

13:17:53 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, 0x0, 0x0, 0x0)

13:17:54 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, 0x0, 0x0, 0x0)

13:17:54 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa, 0xfffffffffffffffc}], 0x429bc18d5d3454b, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
r5 = accept4(r4, 0x0, 0x0, 0x0)
close(r5)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r3, 0x40, r5}, 0x10)

13:17:54 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, 0x0, 0x0, 0x0)

13:17:54 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1df, 0x0)

13:17:54 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3, 0x2}, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:54 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e0, 0x0)

[  565.305779][T21041] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:17:55 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e1, 0x0)

13:17:55 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/250)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
fchdir(r0)
unlink(&(0x7f0000000400)='./bus\x00')
connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x20, 0x7f, 0x5, 0x1, 0x1f, 0x1}, 0x75}, 0xa)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x88682, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x1a81)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  565.985927][T21060] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:55 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e2, 0x0)

[  566.059730][T21060] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
13:17:55 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

[  566.310217][T21060] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  566.369721][T21060] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
13:17:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e3, 0x0)

13:17:56 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)

13:17:56 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1cc, 0x0)

[  566.726473][T21083] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @broadcast}, &(0x7f00000000c0)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:17:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e4, 0x0)

13:17:56 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, <r11=>0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000100000001000000004d8bda9d3e43decbcd20a3bf0ebead61ee9905c57ff298f9476129db65a607219bb1f27327322e1ecbabb2ceb4b05d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="010000603f00000004000080040200009e9d7de821bb459d"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x3ff)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e5, 0x0)

[  567.526730][T21105] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  567.558990][T21105] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
13:17:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e6, 0x0)

13:17:57 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/asound/seq/clients\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000a40)=@ccm_128={{0x303}, "b87fee455331042b", "b3f2d0e4e44ff984e9a951c877866aeb", "abf01ea9", "b95afa3fd7a73612"}, 0x28)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  567.935791][T21109] sctp: [Deprecated]: syz-executor.3 (pid 21109) Use of int in maxseg socket option.
[  567.935791][T21109] Use struct sctp_assoc_value instead
[  568.132194][T21120] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:17:57 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

13:17:58 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e7, 0x0)

13:17:58 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, <r11=>0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000100000001000000004d8bda9d3e43decbcd20a3bf0ebead61ee9905c57ff298f9476129db65a607219bb1f27327322e1ecbabb2ceb4b05d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="010000603f00000004000080040200009e9d7de821bb459d"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x3ff)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  568.505905][T21131] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  568.645895][T21138] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  568.669847][T21138] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:17:58 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40100, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000400)={0x0, 0x5, 0xffff, [], &(0x7f00000002c0)=0x3d})
fchdir(r0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
r3 = accept4(r2, 0x0, 0x0, 0x0)
close(r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@loopback, r4}, 0x14)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:58 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e8, 0x0)

[  568.960989][T21146] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  569.089311][T21142] sctp: [Deprecated]: syz-executor.2 (pid 21142) Use of int in maxseg socket option.
[  569.089311][T21142] Use struct sctp_assoc_value instead
13:17:58 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, <r11=>0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000100000001000000004d8bda9d3e43decbcd20a3bf0ebead61ee9905c57ff298f9476129db65a607219bb1f27327322e1ecbabb2ceb4b05d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="010000603f00000004000080040200009e9d7de821bb459d"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x3ff)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  569.317266][T21160] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  569.332443][T21160] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:17:59 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1e9, 0x0)

13:17:59 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x9c0000, 0x100, 0x401, <r6=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a72, 0x5, [], @p_u8=&(0x7f00000001c0)=0x3f}})
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), 0xffffffffffffffff, 0x2}}, 0x18)
ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000100))
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r7 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r7)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  569.869277][T21177] sctp: [Deprecated]: syz-executor.2 (pid 21177) Use of int in maxseg socket option.
[  569.869277][T21177] Use struct sctp_assoc_value instead
13:17:59 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, <r11=>0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000100000001000000004d8bda9d3e43decbcd20a3bf0ebead61ee9905c57ff298f9476129db65a607219bb1f27327322e1ecbabb2ceb4b05d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="010000603f00000004000080040200009e9d7de821bb459d"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x3ff)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:17:59 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ea, 0x0)

[  570.089170][T21180] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:17:59 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000280)=0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
close(r7)
getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000140)=0x80, &(0x7f0000000240)=0x2)
fchdir(r5)
setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x3, 0x5, 0x380000, 0x40, "ae2e4e295cbb60aae055de6dd90c5adf82dcdc15d9757cd717f6a023b43a3beff630d010a8ced60fbef5e24f649fb279471b1488caeac0739b00ba7941e71729"}, 0x4a, 0x1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  570.340342][T21189] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  570.390088][T21189] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:00 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1eb, 0x0)

[  570.827565][T21194] sctp: [Deprecated]: syz-executor.2 (pid 21194) Use of int in maxseg socket option.
[  570.827565][T21194] Use struct sctp_assoc_value instead
13:18:00 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, <r11=>0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000100000001000000004d8bda9d3e43decbcd20a3bf0ebead61ee9905c57ff298f9476129db65a607219bb1f27327322e1ecbabb2ceb4b05d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="010000603f00000004000080040200009e9d7de821bb459d"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x3ff)

13:18:00 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ec, 0x0)

[  571.210129][T21196] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  571.230503][T21196] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3
[  571.412597][T21217] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  571.429496][T21217] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  571.746751][T21222] sctp: [Deprecated]: syz-executor.2 (pid 21222) Use of int in maxseg socket option.
[  571.746751][T21222] Use struct sctp_assoc_value instead
13:18:01 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, <r11=>0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000100000001000000004d8bda9d3e43decbcd20a3bf0ebead61ee9905c57ff298f9476129db65a607219bb1f27327322e1ecbabb2ceb4b05d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="010000603f00000004000080040200009e9d7de821bb459d"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004)

13:18:01 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ed, 0x0)

[  571.951594][T21230] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  572.038574][T21230] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:01 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ee, 0x0)

13:18:02 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
bind(r0, &(0x7f00000000c0)=@phonet={0x23, 0x40, 0x40, 0x9}, 0x80)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000140)={0xff, 0x81, 0x8})

[  572.489385][T21236] sctp: [Deprecated]: syz-executor.2 (pid 21236) Use of int in maxseg socket option.
[  572.489385][T21236] Use struct sctp_assoc_value instead
13:18:02 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, 0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})
clock_gettime(0x0, &(0x7f0000000440))

13:18:02 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1ef, 0x0)

[  572.799152][T21255] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  572.894037][T21263] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  572.902847][T21263] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:02 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e21}, {0x0, 0x0, 0xd1e, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x6e6bb0}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty, 0x80}}, 0xe8)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0xa)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000fddbdf25030000000c00060000000000000000000c00070008000100", @ANYRES32=r4, @ANYBLOB="0c00070208000100", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

13:18:03 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f0, 0x0)

[  573.400299][T21270] sctp: [Deprecated]: syz-executor.2 (pid 21270) Use of int in maxseg socket option.
[  573.400299][T21270] Use struct sctp_assoc_value instead
13:18:03 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @llc={0x1a, 0x103, 0xab, 0x5, 0x7f, 0x20, @remote}, @xdp={0x2c, 0x5, 0x0, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1})

13:18:03 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f1, 0x0)

[  573.728795][T21288] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  573.747455][T21288] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:03 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f2, 0x0)

[  574.130790][T21288] sctp: [Deprecated]: syz-executor.2 (pid 21288) Use of int in maxseg socket option.
[  574.130790][T21288] Use struct sctp_assoc_value instead
13:18:03 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={<r3=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r3, 0x1, 0x10, 0x0, 0x40}, &(0x7f0000000240)=0x18)
r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x404040, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:03 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)
syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x51e, 0x240c0)

[  574.507545][T21312] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  574.532267][T21308] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  574.540048][T21312] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:04 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f3, 0x0)

[  574.948994][T21312] sctp: [Deprecated]: syz-executor.2 (pid 21312) Use of int in maxseg socket option.
[  574.948994][T21312] Use struct sctp_assoc_value instead
13:18:04 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f4, 0x0)

13:18:04 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x80, 0x1)

13:18:05 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f5, 0x0)

[  575.395854][T21335] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  575.451591][T21335] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:05 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:05 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f6, 0x0)

[  575.777733][T21350] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  575.829954][T21344] sctp: [Deprecated]: syz-executor.2 (pid 21344) Use of int in maxseg socket option.
[  575.829954][T21344] Use struct sctp_assoc_value instead
13:18:05 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)
dup(r5)

13:18:05 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x18)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x3, 0x4)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000100)={0x5, 0x1, 0x4, 0x6, 0x11, 0x200})

13:18:05 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9a0000, 0x7, 0x1, <r0=>0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0972, 0x5, [], @value64=0x4}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x4)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d384ffad4a399af665ac71ec3ae2054bb5cde1727bd31867d42ba1ed42dc356c9f0624733ed753992a03dc6a3b1a2a631cf6bdfb07c093da0ace", @ANYRES16=r3, @ANYBLOB="ff0f26bd7000fcdadf250b00000008000300", @ANYRES32, @ANYBLOB="2b003900090000000a000900ffffffffffff0000050033000200000008000300", @ANYRES32, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048000)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf4a1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008014}, 0x40000)
r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x50000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000740)=r5)

13:18:05 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f7, 0x0)

[  576.285836][T21364] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  576.309403][T21364] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  576.372952][T21368] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:06 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f8, 0x0)

13:18:06 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x1}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  576.792448][T21364] sctp: [Deprecated]: syz-executor.2 (pid 21364) Use of int in maxseg socket option.
[  576.792448][T21364] Use struct sctp_assoc_value instead
13:18:06 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)

[  576.923746][T21391] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:06 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
fcntl$setsig(r1, 0xa, 0x2f)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x7, 0xf, 0x4, 0x81000400, 0x74b, {r2, r3/1000+10000}, {0x3, 0x0, 0x4, 0x7f, 0x0, 0x40, "cef1c4c1"}, 0x1, 0x2, @userptr=0x5, 0x7, 0x0, <r5=>r4})
ioctl$VT_DISALLOCATE(r5, 0x5608)

13:18:06 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1f9, 0x0)

[  577.256120][T21402] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:07 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
wait4(r0, &(0x7f0000000140), 0x2, &(0x7f00000001c0))
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x420100, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000100)={0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x32, 0x10000, 0x76}, 0x2c)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  577.377265][T21402] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:07 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fa, 0x0)

[  577.538070][T21414] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  577.676445][T21423] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:07 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  577.850498][T21402] sctp: [Deprecated]: syz-executor.2 (pid 21402) Use of int in maxseg socket option.
[  577.850498][T21402] Use struct sctp_assoc_value instead
13:18:07 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x80000000, 0x100, 0x1}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffc, 0x2}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x10, 0x3, 0x6}}, 0x14)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d14, &(0x7f0000000100))
fchdir(r3)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  578.091434][T21438] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  578.156554][T21444] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
13:18:07 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fb, 0x0)

13:18:07 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=<r9=>0x0, &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={r9, @in6={{0xa, 0x4e23, 0x4, @remote, 0x401}}, 0x0, 0x40, 0x969, 0x560139b3, 0x6}, &(0x7f00000006c0)=0x98)

13:18:08 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x3, &(0x7f0000000240)=[{&(0x7f0000000400)="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", 0x1000, 0x5}, {&(0x7f0000000140)="723edcb5921ecc0874a3d030b943195475aa7af87b", 0x15, 0xffffffffffffffe1}, {&(0x7f00000001c0)="f33b8708a4ca53129a1503b2d6e0e5311e2c3da3e8cb00f1900f75c48e79b93b64693a9ac4283ed02e19780d72e51f1976c0192a7896953121478cc32c3f18e8fce0888806e3007645785afa386b17997bea056d29a9b160", 0x58, 0xc152}], 0x210000, &(0x7f0000001700)={[{@nouuid='nouuid'}, {@logbufs={'logbufs', 0x3d, 0x8}}], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'Y\xf9/\xabVv\xaa/\xed\xd7\xcf`\xeeXX+\xf6R\x91\x0f\xb8S\x1d\xa9\xbb|\xdf\xd0a\x17ngT\xfd]D4\x90\x14h\xbd\xa3\x11\x99)X\x88\xe5v\xfd\xc9\xc0\xd1\x9a\x10v\x11\xd4\xb6\xb6\xd0\x11\xcc\x9b\x0e\xe0,\xe7\x92g9\xda`\xf3\xf9\xebd\x8cLp8\xfe\xb3S\x06\xac\xc86\xde\xfa\xa2\x16n\x8fYs\xf8\xd5\xb7\x0f&\xf3F\xed\xf9d\xf8Mt?\xff\xef3P\f(\xb7\xc5\xc1\x92\bL\xb5\xb7\x9bK\xd9v\v@\xd0g\xa2\x98\x96\xa0U\xc6\x01\x87\x9c\xb4&\xff\xbc\x87m\x82\xd8P9\xd1*\xd4\xb4q\xb7\x8a^\xe4\xbf\xac\\\x9e\xd5X\xbd\xf5\xc1@\xb4\x87\xc19\xbb:\xb7J%\x05\xb4\x82\bPgNt\x02\x83\xf0\xfc\x1e\x8a)1P\xfd\x7fg{\x85\xcc5)\xb1\x88S\xfd\xc8A\x0f\xd7\xe1\xe6'}}, {@subj_type={'subj_type', 0x3d, 'trusted\x00'}}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, 'bfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'bfs\x00'}}]})

[  578.413211][T21456] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  578.421185][T21456] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  578.677256][T21466] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:08 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fc, 0x0)

[  578.742585][T21456] sctp: [Deprecated]: syz-executor.2 (pid 21456) Use of int in maxseg socket option.
[  578.742585][T21456] Use struct sctp_assoc_value instead
13:18:08 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580), &(0x7f00000005c0)=0x4)

[  579.082717][T21482] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:08 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x22, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  579.130996][T21482] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:09 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fd, 0x0)

13:18:09 executing program 4:
r0 = semget$private(0x0, 0x4, 0x1a4)
semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000400)=""/184)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x7, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @local, @remote, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast]})
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x40, r6, 0x42b}, 0x40}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc080)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x1ff, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000140))

[  579.503619][T21502] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  579.558507][T21502] BFS-fs: bfs_fill_super(): Inode 0x00000004 corrupted on loop4
13:18:09 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

13:18:09 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x8}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x96}, {0x0, 0x0, 0x0, 0xa38}, 0x0, 0x0, 0x0, 0x1, 0x7}, {{@in6=@initdev={0xfe, 0x88, [], 0x2, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  579.727190][T21482] sctp: [Deprecated]: syz-executor.2 (pid 21482) Use of int in maxseg socket option.
[  579.727190][T21482] Use struct sctp_assoc_value instead
[  579.840556][T21515] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:09 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000580), &(0x7f00000005c0)=0x4)

13:18:09 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0)

[  580.354632][T21531] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  580.419488][T21531] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:10 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x5, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800c1}, 0x4000000)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000100)={0xd91, 0x101, 0x7fff})
ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f00000000c0))
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x2)

13:18:10 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x202, 0x0)

[  580.614000][T21545] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  580.783072][T21553] sctp: [Deprecated]: syz-executor.2 (pid 21553) Use of int in maxseg socket option.
[  580.783072][T21553] Use struct sctp_assoc_value instead
13:18:10 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x280, 0x8e)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x9d, &(0x7f0000000140)=0x1)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:10 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0), 0x0)

[  581.069177][T21562] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:10 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000000c0)=""/165)

[  581.210524][T21569] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  581.227986][T21569] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:10 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x203, 0x0)

13:18:11 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x204, 0x0)

13:18:11 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[  581.948732][T21593] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:11 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, {}, {0x100400000000, 0x0, 0x800000000, 0x2}, 0x0, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e23, 0x7, @mcast2, 0xe57d}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f00000000c0)={<r6=>0x0, <r7=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_mount_image$nfs4(&(0x7f0000000240)='nfs4\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x1, &(0x7f0000000400)=[{&(0x7f00000002c0)="611cf3f3ec8b25546ca2ac48db8f95da", 0x10, 0x7}], 0x110000, &(0x7f0000000440)='\"selinux#\x00')
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
accept4(r10, 0x0, 0x0, 0x0)
setsockopt$sock_void(r10, 0x1, 0x0, 0x0, 0x0)
r11 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x2, 0x0)
stat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getuid()
getresgid(&(0x7f0000000080)=<r14=>0x0, &(0x7f00000000c0), &(0x7f0000000280))
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x0, {0x80, 0x0, 0x7}, 0x18, r13, r14, 0xb5a1, 0x80000000, 0x80, 0x0, 0xeb25, 0x0, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x1, 0x40}}, 0xa0)
fchown(r11, r12, r14)
r15 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000100)={0x4, 0x3, 0x4, 0x200000, 0x5, {r6, r7/1000+10000}, {0x3, 0x1, 0x81, 0x7, 0x2, 0x5, "8586f33f"}, 0x7f, 0x7, @fd=r15, 0x20, 0x0, r2})
r16 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r16, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r16, 0x7)
accept4(r16, 0x0, 0x0, 0x0)
r17 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r17, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r17, 0x7)
r18 = accept4(r17, 0x0, 0x0, 0x0)
close(r18)
r19 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r19, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000200)=0x37)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  582.004558][T21593] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  582.124985][T21601] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:11 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x205, 0x0)

13:18:12 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x206, 0x0)

13:18:12 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)

[  582.680871][T21619] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  582.717204][T21619] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:12 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x207, 0x0)

13:18:12 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  583.233220][T21639] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:12 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:18:13 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x208, 0x0)

[  583.403517][T21647] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  583.419468][T21647] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:13 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x209, 0x0)

13:18:13 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x5, 0x1, 0x7, 0x2, '\x00', 0x10000}, 0x2, 0x40, 0xd9e, r0, 0x6, 0x8001, 'syz1\x00', &(0x7f00000000c0)=['\\eth1md5sum+ppp0\x00', 'bfs\x00', 'vboxnet1em1vmnet0\x00', 'bfs\x00', '@@posix_acl_access-,vboxnet0\x00', 'vmnet0\x00'], 0x4f, [], [0x0, 0x7, 0x7fff, 0x800]})
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
r3 = dup(r2)
openat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r4)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:13 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)

13:18:13 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@caif=@util={0x25, "78d2d6ba13fe4a0b43321e87c7457719"}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="943e3cda89b9ea7d17761e105cdb3c670e5cd8f94c025312cc317093b1c977e8c275df194b07866cf1b1c4b0ec601dedc616b6c710f9b5aeb518c4dcaf4194311ca21c703bae0c2bd243641b2c26ca07cb4a0c8b62dfa11cc7f97acbb1", 0x5d}, {&(0x7f0000000240)="1e7c9292b40f34462757227ff14a95df857a0e9130c76b8746299598b18329a667bb8a87267eaf64860b7163b099c59ac666800f8de79944e8f19ea8c88e228708b575752679dfa7a8792482f2cbb5e7625dd12787a471", 0x57}], 0x2}, 0x20000000)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  584.009278][T21668] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  584.115951][T21668] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  584.145076][T21673] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:13 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x20a, 0x0)

13:18:14 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

[  584.616824][T21690] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  584.634015][T21690] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:14 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x20b, 0x0)

13:18:14 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)

[  585.066215][T21705] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  585.100317][T21705] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:14 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr=0x9, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, {0x0, 0x0, 0xfffffffffffffffe, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3})
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:14 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x20c, 0x0)

[  585.455234][T21720] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  585.479448][T21720] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4
13:18:15 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)

13:18:15 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x20d, 0x0)

[  585.671988][T21728] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  585.708996][T21728] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:15 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

13:18:15 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x20e, 0x0)

[  586.123122][T21742] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  586.152365][T21742] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:16 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
prctl$PR_GET_KEEPCAPS(0x7)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
kexec_load(0x5, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x0, 0x100000000, 0x3}, {&(0x7f0000000100)="c303896dbe26e4209f15eb4af6b5e9c1e329e7ef846fac4c1ee26880f1af41cfa6f31c310d2c79c93e67a157e3d12f8798018ff824dc0ab290b7fd3e16438f185ed227ca10b277f95b63eeb4fec642a22fb3f67bd57d77ea7c6487faab5c4664bdc53c78e2530f1bcc6d", 0x6a, 0x4, 0x2}, {&(0x7f00000001c0)="ddafde60c39167b8535964b4de5c2ef0f8028e2b45c61ffb025928070ccab61238e0b3839ab3d5", 0x27, 0x3e5f, 0x9}, {&(0x7f0000000200), 0x0, 0x7fffffff, 0x7}, {&(0x7f0000000240), 0x0, 0x101, 0x3f}], 0x80000)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:16 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$inet6(0xa, 0xa, 0x8010000000000084)

[  586.461195][T21757] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:16 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000400)="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", 0x1000)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  586.633851][T21762] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  586.657991][T21762] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:16 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x20f, 0x0)

[  586.915533][T21775] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:16 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@remote}, {0x1}, {0x1, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0xeb, 0x3ff, 0x4, 0x9, 0x383})
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:16 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[  587.325251][T21790] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  587.352274][T21788] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  587.366263][T21788] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:17 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x210, 0x0)

13:18:17 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')

[  587.820664][T21805] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  587.834489][T21805] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:17 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x211, 0x0)

13:18:17 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
fcntl$dupfd(r3, 0x406, r1)

13:18:17 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x212, 0x0)

[  588.282283][T21820] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  588.350449][T21820] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:18 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x37}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x4)
r1 = socket$inet(0x2, 0x9, 0x76)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e)

[  588.571223][T21829] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:18 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x213, 0x0)

13:18:18 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:18:18 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$dsp(r3, &(0x7f00000000c0)="19589757d5dd60fbbd513366990e0e7ac470716052b97d933da93f88055c9eabdfbe5e466098eb37f3f7054e0f61bf036928c520c2e21c7d16bd1eb3d8edb0c7d162e24172493763365ff5c493e8c78937f26e2408fd56e718aad9d0338fc7fb746fe141705231de1a1fe998e5b1fba9e5ba83450bc7e74b94498d6edc9bbb941e411bd54873df1c48660cbf2aa5ae886e0662478537b49dee5c036d544e8b91212dfba1ec60c53e32bcad144f253b", 0xaf)

[  588.964782][T21846] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  588.993626][T21846] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  589.049160][T21852] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:18 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x214, 0x0)

13:18:18 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
recvmsg$can_raw(r2, &(0x7f00000008c0)={&(0x7f0000000900)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/36, 0x24}, {&(0x7f0000000700)=""/206, 0xce}], 0x6, &(0x7f0000000880)}, 0xc0012141)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x1380455, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@rq={'rq', 0x3d, 0x800}}, {@rq={'rq'}}, {@sq={'sq', 0x3d, 0x81}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_type={'subj_type', 0x3d, '&'}}]}})

13:18:19 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

[  589.352971][T21865] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40a080, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={<r7=>0x0})
r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000480)={r7, 0x0, r8})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r8, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0xff, @loopback}, 0x1c)
listen(r9, 0x7)
r10 = accept4(r9, 0x0, 0x0, 0x0)
close(r10)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000003c0)={0xa30000, 0x8, 0x3fc000, <r11=>0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x3037a, 0x2, [], @p_u16=&(0x7f0000000340)}})
accept$ax25(r11, &(0x7f0000000400)={{0x3, @bcast}, [@null, @bcast, @netrom, @rose, @bcast, @remote, @remote, @rose]}, &(0x7f0000000300)=0x48)
r12 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x109)
getsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000000240)={@local, @dev}, &(0x7f0000000280)=0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
write$P9_RUNLINKAT(r15, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7)

[  589.449114][T21869] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  589.462712][T21869] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:19 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x215, 0x0)

13:18:19 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x216, 0x0)

13:18:19 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x800, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x0, @in=@rand_addr=0x18811060}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2000402, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100))
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:19 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)

13:18:20 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x217, 0x0)

[  590.486522][T21905] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000)
13:18:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
shmget(0x2, 0x3000, 0x10, &(0x7f0000007000/0x3000)=nil)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  590.592666][T21907] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  590.626927][T21907] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:20 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x200a, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:20 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

13:18:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
signalfd4(r4, &(0x7f0000000000), 0x8, 0x800)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:20 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

13:18:21 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)

[  591.390780][T21944] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  591.586242][T21953] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  591.602992][T21953] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:21 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x219, 0x0)

13:18:21 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

13:18:21 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[  591.994571][T21966] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  592.150484][T21972] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  592.172401][T21972] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:21 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)

13:18:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
accept4(r6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x5, 0x3, 0x4, 0x4, 0x6, {}, {0x4, 0x1, 0x7, 0x6, 0x0, 0x6, "5fe8a8a9"}, 0xfffffffe, 0x4, @offset=0x3, 0x6, 0x0, <r7=>r6})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$TUNSETOWNER(r7, 0x400454cc, r8)

13:18:22 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x21a, 0x0)

[  592.567513][T21991] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  592.605570][T21991] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:22 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x21b, 0x0)

13:18:22 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)

13:18:22 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@rand_addr=0x800}, 0x0, @in=@empty}}, 0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008094}, 0x40000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18, 0x0, 0x7, {0x7}}, 0x18)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x8000, 0x0)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000240))
ppoll(&(0x7f0000000140)=[{r0, 0x5008}, {r8, 0x200}, {r9, 0x4002}], 0x3, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x9]}, 0x8)
fchdir(r6)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  592.939272][T22004] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  592.946786][T22004] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:22 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

[  593.205741][T22014] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  593.236103][T22014] BFS-fs: bfs_fill_super(): Inode 0x00000004 corrupted on loop4
13:18:22 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x21c, 0x0)

[  593.351043][T22021] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  593.369411][T22021] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f2227f40f20c00f22c04bba2000ed66d22f66b97609000066b80e00000066ba000000000f306567670f79120f013b650f218e", 0x33}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x7, 0x3c5, <r6=>0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990a90, 0xe40, [], @string=&(0x7f0000000000)=0x6}})
io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:23 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

13:18:23 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x21d, 0x0)

[  593.880481][T22043] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  593.889719][T22043] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xeba}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000))

[  593.998169][T22049] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  594.116707][T22049] BFS-fs: bfs_fill_super(): Inode 0x00000004 corrupted on loop4
13:18:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x88)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000280)={0x100000000, <r5=>0x0, 0x0, 0x10001})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000002c0)={r5, 0x2})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r13, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r13, 0x7)
accept4(r13, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r12, 0xc0205647, &(0x7f0000000340)={0x980000, 0x7, 0x9, <r14=>r13, 0x0, &(0x7f0000000300)={0x990af8, 0x9, [], @value64=0xffff}})
ioctl$SIOCX25SCAUSEDIAG(r14, 0x89ec, &(0x7f0000000380)={0x1, 0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r15 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @phonet={0x23, 0x74, 0x2, 0x2}, @ax25={0x3, @null, 0x1}, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='bond_slave_0\x00', 0x7fff, 0x9, 0x5})
r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4001, 0x0)
ioctl$VIDIOC_S_OUTPUT(r16, 0xc004562f, &(0x7f00000001c0)=0x7f)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

13:18:23 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)

13:18:23 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x21e, 0x0)

13:18:23 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000100)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x200400, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
r5 = accept4(r4, 0x0, 0x0, 0x0)
close(r5)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='bfs\x00', 0x0, r5)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="a13a0203a8166b82791bb09254bbe28f00000700aaaaaaaaaa10aaaaaaaaaabb980a1b57fc5fffffffffffffaaaaaaaaaa22ffffffffffffaaaaaaaaaaaade622babe2b0a2505993a7b7701bc16d7bb5b98da2969f602413cc62e99e0bcdbd1bb25e99787364746c40a11214a084bb2cb39dc24ea50a13b33e5b"])
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r6)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x7}}, 0x0, 0x0, 0x19, 0x0, "b040bbd6573f42954cfa219a6229293b07390ddde34a8b9c61f5028574d1bcadca6d18315deb4713776b111c2332a0e4fcbc9d520e6ee210110fa2d624fe1df33d60eb43f36ab573c644743c651a7647"}, 0xd8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  594.509035][T22072] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  594.553637][T22072] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  594.702271][T22081] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:24 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x21f, 0x0)

13:18:24 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:24 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x220, 0x0)

[  595.198289][T22104] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  595.242242][T22104] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = gettid()
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
ptrace$setopts(0x4206, r4, 0x4, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
capget(&(0x7f0000000000)={0x20071026, r3}, &(0x7f00000000c0)={0x6, 0x1ff, 0xffffffff, 0xffff953a, 0x8, 0x40})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:25 executing program 2:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:25 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=0x1000)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="0f20e035000020000f22e0460f4000420f070f01c2d1f7c482999c7d68c744240051000000c744240200000100ff2c24360f01df3e440f0f14a4bb440f20c0350d000000440f22c0", 0x48}], 0x1, 0x28, &(0x7f00000000c0)=[@dstype3={0x7, 0x7}, @cstype3={0x5, 0x6}], 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  595.703228][T22122] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
accept4(r3, 0x0, 0x0, 0x0)
r4 = dup(r3)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x3c, @multicast1, 0x4e23, 0x2, 'ovf\x00', 0x2a, 0x0, 0x20}, 0x2c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x23)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x7fff, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x40, r10, 0x42b}, 0x40}}, 0x0)
r11 = syz_open_dev$mouse(&(0x7f0000005480)='/dev/input/mouse#\x00', 0x0, 0x2080c2)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005500)='nl80211\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f00000055c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005580)={&(0x7f0000005540)={0x30, r12, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}]}, 0x30}}, 0x40000)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:25 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x221, 0x0)

[  595.810271][T22131] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:25 executing program 2:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

[  596.042587][T22146] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003
13:18:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x50000, 0x0)
statx(r3, &(0x7f00000000c0)='./file0\x00', 0x2000, 0xfff, &(0x7f0000000300))
syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/156})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x1178c5f6f2bef0b1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
keyctl$join(0x1, &(0x7f0000000580)={'syz', 0x3})
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x50382, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000180)="660f71d652c4e205cf55006764660f38826700c4e115ef3d2511000066baf80cb852e43087ef66bafc0cb00ceec4c2d1dfed66baf80cb8307d5788ef66bafc0cb8d0b92040ef0f20070f20c035000000800f22c00fe9e4", 0x57}], 0x1, 0x9, &(0x7f0000000280)=[@flags={0x3, 0x200000}, @flags], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  596.259007][T22150] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:26 executing program 2:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x222, 0x0)

13:18:26 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000000080), 0x2, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x43b, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000003c0)="ba4000ec440f20c0663503000000440f22c0baf80c66b8b254858e66efbafc0ced670fc7ae0d0000000fc71a0f35f30f1ad4baf80c66b85ce9c18e66efbafc0cb87936ef3e360fe734f2d1f3", 0x4c}], 0x1, 0x40, 0x0, 0x0)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200081, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x20}, 0x7, 0x2, 0x2, 0x1, 0x0, 0x9}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$P9_RXATTRCREATE(r6, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000180)=0x1042, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f00000002c0)=""/118, &(0x7f00000001c0)=0x76)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
name_to_handle_at(r11, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0xbb, 0xffffffff, "70ab50d229e120e0aee50ec4b87fa26f6f3a633d8de1adcf58323cce9c230258c148f9c21c0a14cf48d7d7eb3c074161995de4c9546ab83fe5739b65929bbe83cc692493b09863792577eb0d7bd33a00d15c4e2abc7f3fbaa814b27578c35fae91b1435522b35f87fdf2fa0e41c310b279e4625182e87e6222717cc8e5db531db07d2231668be4f106da1cfb1e774f46231e9174ff106eff834448f5db6ad5653ae80b9a6d13588ecbedb1f4a85653e85a17e9"}, &(0x7f0000000240), 0x0)

[  596.935906][T22172] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  597.130119][T22186] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000)
13:18:26 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:27 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x223, 0x0)

[  597.392062][T22199] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:27 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x3f, 0x4)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000001c0)={0x4, 0x0, [], {0x0, @bt={0x4, 0x8000, 0x1, 0x2, 0xba, 0x6, 0x9, 0x6, 0x0, 0x7, 0x50a, 0x3f, 0x80000000, 0x3, 0x8, 0x1a, {0x3, 0x1000}, 0x1, 0x7}}})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  597.695624][T22208] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:27 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:27 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x224, 0x0)

[  597.913748][T22221] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:27 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x8, 0x4, 0x4, 0x0, 0x401, {0x0, 0x2710}, {0x2, 0xc, 0x0, 0xa2, 0x3f, 0xf2, "4642bf05"}, 0x3, 0x2, @userptr, 0x4, 0x0, <r3=>0xffffffffffffffff})
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0xdb6, 0x400, 0x9, 0x4, 0x2, "ad589d3907facf04f4dfaa565575a5865b707d"})
r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r4)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000000)={0x7f, 0x6, 0x1, 0x2f, 0xd, "df8fe7778be4847b"})

13:18:27 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

[  598.304938][T22234] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x225, 0x0)

[  598.476263][T22245] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x226, 0x0)

13:18:28 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:28 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x452882, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00b72b98c2390cc4d2580a000e8d5451ecd260a9f5432392edf12e80c7a8f7627e5901af78e5492a1167cf76f2b5990da4648a35841bd1e6b0d82a1c17e694973f8b945b18e66f50e6991f3c1faf4bdd68a812612611639f0b85dbb5abbd61bf74890aeaa3488bf3e934c109e5b8849781ed916d52d41b8c034d2c13b1a03f958b45dd57f06e660108175302a77f46695c70f2eb9401286f2738ddff9495a1e5ca9d8165940a46cd4050fb3dc026482723fc9c181e9effce976e03fee11e1648ef1af785c659362e600a7bc358adeedd822657", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@mcast1, 0x40, r4})
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'mangle\x00', 0x40, "f40622f8628190f75143ac60cf25e3170fd4e560e951ddd1a83d6706f93a51955eac5513ebc35460d8ffc1fd4227d33fc2c71a6ee351b087321533f739d7b456"}, &(0x7f0000000580)=0x64)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x34, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80)
listen(r6, 0x7)
accept4(r6, 0x0, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
ioctl$sock_inet6_tcp_SIOCATMARK(r11, 0x8905, &(0x7f00000005c0))
fchdir(r5)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  598.946300][T22263] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  598.986778][T22263] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  599.102508][T22271] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:28 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

[  599.186883][T22276] device bridge2 entered promiscuous mode
[  599.232073][T22271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  599.336778][T22283] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  599.361115][T22283] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x227, 0x0)

13:18:29 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

[  599.598357][T22293] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  599.626681][T22293] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:29 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x228, 0x0)

[  599.882137][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
13:18:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x444100, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/dlm-control\x00', 0x103800, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001500)='/dev/uinput\x00', 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001540)=[r2, r3, r4, r0, r0, r6, r7, r0], 0x8)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c900e2f148939700", @ANYRES16=r13, @ANYBLOB="2b0400000000000000000100000000000000014100000000001700000000000000003a000000"], 0x40}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r11, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81008800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r13, 0x419, 0x70bd2d, 0x25dfdafd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

13:18:29 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r2 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt(r2, 0x81, 0xfffffc01, &(0x7f0000000400)="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", 0x1000)

13:18:29 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x229, 0x0)

13:18:30 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x9, 0x2, 0x8c, 0x76, 0x1, 0x1f, 0x36}, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x101800, 0x0)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x8a602, 0x27)
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4080)
fcntl$setpipe(r3, 0x407, 0x7)
ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000300))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
modify_ldt$read_default(0x2, &(0x7f0000000000)=""/12, 0xc)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
r5 = accept4(r4, 0x0, 0x0, 0x0)
close(r5)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x60000, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88002012}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r8, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="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", 0xfc}, {&(0x7f0000000740)="37d9fdfee8d566c9121dc03e3a9cf971ae3c64ffc726", 0x16}, {&(0x7f0000000780)="2016a130f560f4985a334031b5ea856755604c85f7f3d982ce1339661cb83220aa6e4f0fb78c3eaeb907060aad3920e089e22e61f5213fb5b0330ec42fff8bb00cad99d30767b4fa9f434ab5c301ec4cf6e48d9dd0c62deee1c008abe833cc7ab7059256977571bfa32f762b352a02f4f493c0b6647e815918e00e906b85fc1b78c8", 0x82}], 0x4, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}, 0x4010)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x44, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40090)

[  600.652891][T22334] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:30 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22a, 0x0)

13:18:30 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="92b33cbf4133cc6e"}})
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:30 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000019c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000001ac0)=0xe8)
setxattr$security_capability(&(0x7f0000001940)='./bus\x00', &(0x7f0000001980)='security.capability\x00', &(0x7f0000001b00)=@v3={0x3000000, [{0x4b, 0x200}, {0x10000, 0x12}], r3}, 0x18, 0x1)
r4 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}}}, 0x20)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001900)='/dev/qat_adf_ctl\x00', 0x48900, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ff0f26bd7000fcdadf250b00000008000300", @ANYRES32, @ANYBLOB="2b003900090000000a000900ffffffffffff0000050033000200000008000300", @ANYRES32, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000018c0)={0x1, 0xfffffffffffffebd, 0xfa00, {&(0x7f0000000300)}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x2}}, 0x18)
syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x5, &(0x7f0000001840)=[{&(0x7f00000001c0)="15caf5a6f0da5472f41aff7a59e3044df5845b30f57277288f1ffc5f8d85f079c14080e5867d97b45610efa4255fe00eb2156676fb83c4b573ededfd9d83cf570eb7fe19261e7129e14b1c5552a01f5d2a6da8306455a4d20613758520192b06e78b55a35dd016bb8a2447ab97c50a05ddd4600484d3b2d4b6e60706d6d53c354c438f9f400e1451710b8b40278d4a019141efba1f1caa5df711ba97f46a39c6cfedd95519d3484b94c110b3aa28b661e46d6e1656ba9f336baeae6d9d51284fef25c3717e8c0bd8447e3f28819dbb611459c308", 0xd4, 0xff}, {&(0x7f0000000600)="f6269d18e55090a09ca8f3d80921bb922ab67f758d995f095eae7a6ecf6adf2c3a737aa749f5ddd6083b40374525a34e96474bd42b8d9bb4be21e9ad44f30187e60479f8504ce85f253fada8a40bf8b8a353bcea2566f138a8097d97da54b0324864f1be132c9180016f393ce7460150e021500d864e3a722fa7904ea34eb7b529474c2b56fac4ff0bd22410a3", 0x8d, 0x8a}, {&(0x7f00000006c0)="9cf8447e7996b157aede4a52e4ccd6807afdee40ded20a4dc394fc45cf1f0450ff10b3549e5abbde27e1befa6237630e50728b45a090e16089b381cb9a92b9a1ecc6d93f60663c92d4a11f1c1c13efea8ef4ea078080fc95f60a1d774474cdebae9ab9077bc7085f0eb05487bd7e36ee87e528444af82e5f044ae262c18ee5ec9f5f8da62d9508099ad443201052e224dbed92d915ab52e90f41aca664eac138a8d5892e66ac5fd95e077974aa171409f983cf9b61e663a23431de10161b7e9655ce0293d112", 0xc6, 0x407e54a3}, {&(0x7f00000007c0)="a724bef78b9524e68f997a82c4685d0b5e9deba342c65cef9f30b5371b022c3f14c7a29caa4e1ea89ab9763cd18787ef37763462430c02543c9fff065015d84d1a8ff8d48985557d0ebf5804fa334c7cfec2a4b3cbc007eb46645453861d1d771e81dc36ea771031c8011c24cfdf9472a5165d", 0x73, 0x95}, {&(0x7f0000000840)="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", 0x1000, 0x8}], 0x904000, &(0x7f00000002c0)='wlan0\x00')

13:18:30 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:30 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22b, 0x0)

[  601.226382][T22361] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x40, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:31 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:31 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r6, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX=r3, @ANYBLOB="ee", @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES16]], @ANYRES64=r3], 0x5}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20040000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r9)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  601.645890][T22376] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$P9_RLCREATE(r5, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x10, 0x7, 0x3}, 0x8001}}, 0x18)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:31 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22c, 0x0)

13:18:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="de365776bad004ed36263e0f01d4f30fc73166b91803000066b80098000066ba000000000f300f01f4660fd4413166b9940300000f320f09670f07", 0x3b}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000300)=""/182)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000012000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r8, &(0x7f0000000140)="2c413e124b77b6bdd5d0e3487d5ab02b45a6ea0b5fa2ebae256f6574e36fccf3a63e556ab7d8e56a23c329ae76c049810582e07cdb110e0e5bbd85960ebb787b598a9762ebc83241cc5ddf55843e1d445c54717633865cc74f3ad6d7d797cc770ef55aacbf71af9b07e2829997e75b94fc601f096571a038f229767b", &(0x7f0000000240)=""/164, 0x4}, 0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r9, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r9, 0x7)
accept4(r9, 0x0, 0x0, 0x0)
mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x10, r9, 0x373ff000)

13:18:31 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

[  601.938981][T22407] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:31 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:31 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0)

13:18:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getpid()
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:31 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22d, 0x0)

[  602.302349][T22431] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  602.415197][T22441] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:32 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0)

[  602.633371][T22450] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:32 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22e, 0x0)

13:18:32 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0)

13:18:32 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x3c)

13:18:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
accept4(r3, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
dup3(r3, r4, 0x80000)

13:18:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  603.080666][T22473] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  603.247922][T22482] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:32 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22f, 0x0)

13:18:32 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

13:18:33 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  603.669142][T22505] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$P9_RSYMLINK(r4, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x80, 0x4, 0x5}}, 0x14)
geteuid()
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00')
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r9, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r9, 0x7)
r10 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x2000)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in=@initdev}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8)
accept4(r9, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000380))
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x24004004)
r11 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000140)={[0x6c25, 0x1, 0xd4, 0x7ff, 0x9, 0x5, 0x80000001, 0x1000, 0x2, 0x400, 0xffffffff, 0x4, 0x9, 0x20, 0x10001, 0x6], 0x5000, 0x40102})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13:18:33 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x230, 0x0)

13:18:33 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

[  604.287140][T22517] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  604.426755][T22529] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000000c0)=0x3, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x40000, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000180)=0x1, 0x4)

13:18:34 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x77, 0x4)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:34 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

[  604.855761][T22544] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = dup2(r2, r0)
setsockopt$inet6_udp_int(r3, 0x11, 0x39, &(0x7f0000000000)=0x4, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x2b, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x231, 0x0)

[  604.965136][T22547] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x880, 0x0)
connect$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x1, 0x2, 0x6, 0x94, 0x9, "b34d9d70df38a120079d2988ab0d0ceedd6f5b2012ed958d9272de849966c5c59fea35fb7a3191a2299b82b58ee73307bd2bc8ac41cdc5f0d8f70c95c9e735", 0x2a}, 0x60)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f00000001c0)=0x8)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:18:34 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0)

13:18:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$l2tp(0x2, 0x2, 0x73)
r9 = fcntl$dupfd(r8, 0x406, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000000c0)=0x6)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="b50923c2a4bcff8f2d3a1066465a5ded7ea3a4b6", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x70, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e23, 0x100000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff}}}, 0x84)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x232, 0x0)

[  605.591960][T22577] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:35 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0)

[  606.004373][T22594] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x233, 0x0)

13:18:35 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0)

13:18:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x100000001, 0x400)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:35 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22a, 0x0)

[  606.459885][T22612] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:36 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @multicast2}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x204400, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r1=>0x0, 0x0})
close(r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002bbd7000fbdbdf250e00000023003400c6a34f948471835495af0d0f5fbbeb5476763503bc28bd764479f8d589254e0d0400e20004001601"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r9, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r9, 0x7)
accept4(r9, 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104419300e51400000000000000c8563286c646968291a1e40cf23c50e79f3b47609bccbce64987abe3967ece7592ded1a3077a7e723e60063570e843a98c5a20ebe6d376417ea2d312ca273597f45766e18b37a6f66b5ee0659ac93b0df5ca8851a8745fd831d4488136892050090aff79cdbd321722dedec69630d5ec21830a7009e1652d3dd99b420c", @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000", @ANYRES64=r9], 0x4}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000001540)={0x11b4, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb8, 0xac, "bd4d99a59ffd32d732f2f5ccba5183042701a87fdcb56feda5c6fa02bf1ff0d745a5d8ef5814ba72ca1f58a13c84e1df3a8bee67d4c14f8c22aafb5440c7ac8293dd6e8306a9920eda322c6b2d4f38ea1bda90be70b948d6e04d1582771fabe245cceb6fa8093e1c06f8051c41f99e947c3dc0ac575809033a55e9a5682f8201be6f719433496976c3efee6c68ae2a061cd1436212d51cb81b03be36cf66a8bb45d35216ff9fc7bc13c17ab588e0128918f1fd17"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc1, 0xbe, "c9d6de75c5e4931d1215975b1f8f9a6b88b9a5d70c4d744eb85e41fd2c351d772936fd1601f957c384ffa5afd344183c76bbab243c7b9f5a6ea1407f7ffb5083155d84ae9ec0fe184b8d5f6b1662834ca4e5d090437b7641b8f7d8e42fc41211c460aceb451ccda1c4d21e7033cf996cf6d03b14ec51f3eb56c2b7db4992f30ff7e9d185ca1fed03e7fe3a4d40927e1c461ea673cafa00c60951d41c29cfbefffd7dec9ea73b63451a3822c59c2630a7df0a28c05a772714269ee7d9b9"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x11b4}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={<r12=>r11})
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f00000002c0)=0x401, 0x4)
r13 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r15 = gettid()
ptrace$setopts(0x4206, r15, 0x0, 0x0)
tkill(r15, 0x3c)
ptrace$cont(0x18, r15, 0x0, 0x0)
ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r15, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r14, 0x8901, &(0x7f0000000440)=r15)
fchdir(r13)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:36 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x234, 0x0)

13:18:36 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0)

13:18:36 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x233, 0x0)

13:18:36 executing program 5:
futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)=0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  606.824136][T22627] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  606.929207][T22634] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:36 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0)

13:18:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:36 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@multicast1}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="3e472c908f3aa8f34f08a268d849f8cc3da215f4d61416ab0eadbd5de570710e02f2c62913b31e7d3e53fdddbe1313d3dcc884cf667768e5f19f07c857474a232621026d6959534f169304f175a08dec08bd01a3df350297756b18522fd61508b5b8b5edfcbfdcfdc1e9e169583693370cd7e5cba59f2a0eaace56cc760cdf3ea7b45a1f4d63c9cf870f575ab45e57e767a9a4a18300497609718be175c7027e5e05dfbabbab6c3f4dfb2ad043947fdf0ef2c6a351046db2216f0c17d274c1d818cca004de16cd799fc566b4753267e97247638673f272e788c2c38c24a13ecf843bc27bd1b5dc0c", 0xe8, 0xff}], 0x110d050, &(0x7f0000000400)={[{@disable_roll_forward='disable_roll_forward'}, {@lfs_mode='mode=lfs'}], [{@measure='measure'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x82801, 0x0)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000500)=0x80)
fchdir(r1)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000540)={0x7, 0x7, 0x4}, &(0x7f0000000580)=0x28)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:37 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x235, 0x0)

[  607.461524][T22652] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:37 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0)

[  607.735224][T22666] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:37 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x4000, 0x0)
sendmsg$inet_sctp(r2, &(0x7f0000001540)={&(0x7f0000000240)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="5eca7522d5df5b18210768720934089bbfe026", 0x13}, {&(0x7f00000012c0)="b8d5a37b0854bf87e13932d48d9d6672e2bc9181682c0ec4b22bc9e87fdecb43a16139d0956e611c77e4094cb4ecebe95cf33968b36aa0d673a2e005e5bcf53a997f0dc87780b97b27b912585b388812e8f5389978bc3daf89", 0x59}, {&(0x7f0000001340)="28b61abc11c7c9345c52c52740df3cae8435e50fb3b44d3718177c300dc6ae0b5090bb65dc1c040c22fca5c1d7d54852e1afd627381dc41b89bb078a192b1e295245df2501d88299ea8adea2beb7a27a0c28ec33182fdb4b9ba4a8353a17261e7ff3d5558f60bf55aa5afdb48a036081c14e51cbdfec2196e8971fb8e7a60d1d1e78d09bbe9957cb88fcaa450e9077d893ef831543939ec8bb1c6f20140d5a0332d0fff9c88439b7c605cfb4a7eafc0fa767b2c4beac2ff219e70bea32454cfe8788abcadc0f1c68ed6bb793805d7892057916fd68c42424", 0xd8}, {&(0x7f0000001440)="70a2167258a26caea7bbec58c04677bcb018411fb38ae143aa7e4aa1", 0x1c}], 0x5, &(0x7f0000001500)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18, 0x8041}, 0x4000041)
r3 = fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000180)={0x990000, 0x2a, 0xfffffffc, r1, 0x0, &(0x7f0000000140)={0x9b0907, 0x7e51, [], @p_u32=&(0x7f00000000c0)=0x4}})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r9 = openat(r3, &(0x7f0000001580)='./file0\x00', 0x40040, 0x42)
connect$vsock_stream(r9, &(0x7f00000015c0), 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

13:18:37 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x22a, 0x0)

[  607.819927][T22666] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
[  607.847372][T22672] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:37 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x236, 0x0)

13:18:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000000)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  608.129824][T22674] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:37 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0)

[  608.233548][T22674] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
13:18:38 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x452882, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222c0ee84b2b1efe6d13e632f6ded42fa3aa394ade7dfe439c76a22067b3534442da88bc9000000000000000000000006ecaca54d794a5a919f9962d7a8fee9f51bde4b337aa96ae5110ccfa4c041cdc43c764362bb2ebe86fb64adfc4400b0a1f2e4fdfc6b95536f957269959c073d4bdfa354a13e0976b8323f482"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00b72b98c2390cc4d2580a000e8d5451ecd260a9f5432392edf12e80c7a8f7627e5901af78e5492a1167cf76f2b5990da4648a35841bd1e6b0d82a1c17e694973f8b945b18e66f50e6991f3c1faf4bdd68a812612611639f0b85dbb5abbd61bf74890aeaa3488bf3e934c109e5b8849781ed916d52d41b8c034d2c13b1a03f958b45dd57f06e660108175302a77f46695c70f2eb9401286f2738ddff9495a1e5ca9d8165940a46cd4050fb3dc026482723fc9c181e9effce976e03fee11e1648ef1af785c659362e600a7bc358adeedd822657", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@mcast1, 0x40, r4})
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'mangle\x00', 0x40, "f40622f8628190f75143ac60cf25e3170fd4e560e951ddd1a83d6706f93a51955eac5513ebc35460d8ffc1fd4227d33fc2c71a6ee351b087321533f739d7b456"}, &(0x7f0000000580)=0x64)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x34, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80)
listen(r6, 0x7)
accept4(r6, 0x0, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
ioctl$sock_inet6_tcp_SIOCATMARK(r11, 0x8905, &(0x7f00000005c0))
fchdir(r5)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:38 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x38c00, 0x40)
accept4$x25(r2, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000480)=0x12, 0x800)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r3 = accept4(r1, 0x0, 0x0, 0x0)
close(r3)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x48}}, 0x4811)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  608.614435][T22696] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x3, 0x5aa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000180), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x1a, 0x8863, 'bridge_slave_0\x00', 'caif0\x00', 'bridge_slave_0\x00', 'batadv_slave_0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0xfe, 0x176, 0x1a6, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x5}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x339, 0x8035, 0x2, @remote, 0x0, @rand_addr=0xa47, 0xff000000, @random="ded57143d867", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local, [0xff, 0xff, 0x0, 0x0, 0xff], 0x28}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x3, 0x1f, 0x0, 0x0, "1bf83ff39b13f33ea11610236a9b2c6413ce679ace6bf5ec385b2ca8e0ddbbd1d46d2bbabb4bd1d65a956418e50fcbbbb966cc07c541c619e2fa7fff5c2aac6a"}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x6, 0x0, 0xa01, 'veth0_to_bond\x00', 'ipvlan1\x00', 'macvtap0\x00', 'veth1_to_bridge\x00', @dev={[], 0x3a}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xbe, 0x1ee, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffff8, 'syz1\x00', {0xe5e}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfff, 'system_u:object_r:modules_dep_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{0x0, 0x1, 0x1b, 'macvtap0\x00', 'veth0_virt_wifi\x00', 'team_slave_0\x00', 'vcan0\x00', @dev={[], 0x37}, [0xff, 0x0, 0xff, 0x0, 0x7f, 0xff], @dev={[], 0x15}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xae, 0x156, 0x186, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x1, {0x4}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x7, 0x4, 0x0, 0x0, "41353d4ca66a9fdc8cc9d24b312a1dc914d195b28a0ae60ebb07d3fdaa1445ce76b09c9c80041be33e4a1bae9879dc9bf26927e5173165630815f9fe1dee3acf"}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000001}}}}]}]}, 0x622)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000140)={0x0, 0x800, 0x8, &(0x7f00000000c0)=0x2cc})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

13:18:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x237, 0x0)

13:18:38 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0)

[  608.893917][T22709] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  608.910877][T22708] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  608.965325][T22716] device bridge4 entered promiscuous mode
[  609.049509][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  609.168338][T22729] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  609.228829][T22715] device bridge4 entered promiscuous mode
13:18:39 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0)

13:18:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x101904, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000140)={0x80000001, 0xa, 0x4, 0x800, 0x1, {0x0, 0x7530}, {0x3, 0x8, 0xff, 0x6, 0x0, 0x1, "5ba14b02"}, 0xff, 0x3, @userptr=0x9, 0x4, 0x0, <r5=>0xffffffffffffffff})
ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  609.463556][T22738] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:39 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0)

13:18:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x238, 0x0)

13:18:39 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

[  609.732695][T22753] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:39 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x20010, r2, 0x1)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open(&(0x7f0000000100)='./file1\x00', 0xb0082, 0x162)

13:18:39 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0)

13:18:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x239, 0x0)

[  610.065137][T22763] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:18:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  610.244761][T22770] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  610.253499][T22767] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:40 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

13:18:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x113600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x1, 0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:40 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @remote}}}, 0x90)

13:18:40 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0)

[  610.742422][T22794] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  610.771206][T22794] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:40 executing program 5:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x88c, 0x80)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x1, @default, @bpq0='bpq0\x00', 0xfffffffa, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1)
ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000002000000010000bfda9e000000000600000000000000010000000000000007000000000000000000000000000000200000000000000006000000000000b78ab0fc187fa35400ff0300000000000004000000000000000800000000000000000000000400000000080000000000000100000001000000060000000000000003000000000000000700000000f7a8c9b70d7900000001800000000000005f"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:18:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23a, 0x0)

[  610.799132][T22803] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  610.961622][T22806] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:40 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0)

13:18:40 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000008c0)={'batadv0\x00', <r5=>r4})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0xfc, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, {}, {0x0, 0x2000, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r6)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:40 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

[  611.219305][T22821] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3f)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:41 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23b, 0x0)

[  611.393173][T22828] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  611.414763][T22828] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:41 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0)

[  611.456745][T22834] device bridge5 entered promiscuous mode
[  611.633966][T22840] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:41 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

[  611.850278][T22840] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
[  611.922225][T22853] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:41 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23c, 0x0)

13:18:42 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0)

13:18:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23d, 0x0)

13:18:42 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
unshare(0x600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
fstatfs(r0, &(0x7f0000000000)=""/95)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  612.359241][T22866] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:18:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
accept4(r3, 0x0, 0x0, 0x0)
mmap(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x1, 0x1010, r3, 0xe000e000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  612.474067][T22877] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  612.535643][T22866] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23e, 0x0)

13:18:42 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)

13:18:42 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)

13:18:42 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  612.991652][T22899] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  613.179274][T22904] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  613.225165][T22904] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:42 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)

[  613.320318][T22911] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xaf75bd6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23f, 0x0)

13:18:43 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:43 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x80, 0x0}}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x800, 0x2)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
getpgrp(r1)

[  613.608406][T22926] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
13:18:43 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)

13:18:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x13, 0x1, 0x4, 0x81, 0x2, @remote}, 0x10)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  614.017189][T22943] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  614.048070][T22946] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  614.092355][T22943] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
[  614.152197][T22949] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  614.251309][   T27] audit: type=1804 audit(1579439923.880:52): pid=22954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir687975868/syzkaller.Nyj1PR/392/bus" dev="sda1" ino=16993 res=1
13:18:44 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x23b, 0x0)

13:18:44 executing program 0:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x240, 0x0)

13:18:44 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r4, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x11c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff5e19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xcc40}, 0x4000080)
close(r3)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r8=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r8, 0xb3b}, 0x8)

[  614.759835][T22973] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  614.767571][T22974] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  614.820180][T22973] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
13:18:44 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

13:18:44 executing program 0:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x43}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x241, 0x0)

[  615.118666][T22990] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  615.140720][T22990] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  615.243744][T22994] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:18:45 executing program 0:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
shmget(0x2, 0x3000, 0x10, &(0x7f0000007000/0x3000)=nil)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:18:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x242, 0x0)

[  615.682849][T23017] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:18:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:45 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:45 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
fcntl$dupfd(r3, 0x406, r1)

13:18:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  616.189174][T23039] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:18:45 executing program 3:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
accept4(r6, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
accept4(r10, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESOCT=r5, @ANYRES32, @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR, @ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16=r6, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="02d9a163880c1fd87799bda389d93164e1b3c93646b9f69996714fba42c2f6c2b62577bc5e6c067f8c32e965399ee6c9c990a4638326a513976b01736a318b55a7da360fabbc714a89b133a10bcfcb67ff13dcb10d40adc629590634b54c2eb573cea0793bee39579a39c068289a3247bca526642e017017f36581e6beabe643ccdbc653bc501148ba3899e0c667af6a6ad5b54941d5ea3dc35593408f1b123e9a19cb0c682bb5e0fc5d42eb5284adf740fc6435f2ced30c7e84", @ANYRES16], @ANYPTR64=&(0x7f0000000840)=ANY=[], @ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="7de9f1ba94d2d38c11e48688e8d240b3e7c3a93d3894e8607bfc3cd2cebab7543c32b159645c8c47f6e52ea906a82bc781d0dda65f63eef773cd1d6ec272737767191153bc91180bda5f8d6c3e2f754426098eaaa0", @ANYPTR, @ANYPTR64], @ANYRESDEC=r10], @ANYRESDEC=r9], @ANYRESHEX=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x3}, 0x1, 0x0, 0x0, 0x2}, 0x20040800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x8}, {0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3503, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4}}, 0xe8)
r11 = semget$private(0x0, 0x20000000102, 0x0)
semctl$IPC_RMID(r11, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa, 0x7}], 0x2, 0x0)
r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x202, 0x0)
setsockopt$inet6_buf(r12, 0x29, 0xd2, &(0x7f0000000400)="77e187ec2a7a20862c951d0022f678aed27eef4060e2d7d9fb8b851e99c843a54469883a6a5e64c3dd851d4039009a639379f013a330121a95472c680e409b5775d9fab4bd98d5397886309e94f475f00e5f0174c70edbae1fa1e31aebafd83e9be9a14b2fd2272b03b7bb64181dfafffc862daa71a2068b442f9165420cd5ef155524f37f41f964a1ec58078394f67b64528a90b6c259f25efe6c1cfd6e15db614a3f3b43ab2eb53bb0cca04de80485415bac1bde6d43255b8ed8d5c4ce486d1259ec2b4b985f6a4b0f7f4ff2df3f53ffdfa6b1f82250d392562e931f1111c34d486f901c361760", 0xe8)
r13 = semget$private(0x0, 0x20000000102, 0x0)
semop(r13, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1)
semtimedop(r13, &(0x7f00000000c0)=[{0x3}, {0x0, 0x3f65, 0x800}, {0x2, 0x1400, 0x800}, {0x7, 0xff, 0x800}], 0x4, &(0x7f00000002c0)={0x77359400})
r14 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r14)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  616.303037][T23044] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x243, 0x0)

[  616.361587][T23044] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
13:18:46 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x1, 0x1, 0x2000, &(0x7f0000013000/0x2000)=nil})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  616.684170][T23068] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  616.744406][T23052] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
13:18:46 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x224000, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r1)
fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0xa, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)

13:18:46 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x22541, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x244, 0x0)

[  617.010331][T23084] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  617.036340][T23084] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[  617.125405][T23088] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:18:47 executing program 3:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10)
fchdir(r0)
open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x84)

13:18:47 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10001, 0x50000)
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:18:47 executing program 2:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
accept4(r6, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
close(r8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
accept4(r10, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESOCT=r5, @ANYRES32, @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR, @ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16=r6, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="02d9a163880c1fd87799bda389d93164e1b3c93646b9f69996714fba42c2f6c2b62577bc5e6c067f8c32e965399ee6c9c990a4638326a513976b01736a318b55a7da360fabbc714a89b133a10bcfcb67ff13dcb10d40adc629590634b54c2eb573cea0793bee39579a39c068289a3247bca526642e017017f36581e6beabe643ccdbc653bc501148ba3899e0c667af6a6ad5b54941d5ea3dc35593408f1b123e9a19cb0c682bb5e0fc5d42eb5284adf740fc6435f2ced30c7e84", @ANYRES16], @ANYPTR64=&(0x7f0000000840)=ANY=[], @ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="7de9f1ba94d2d38c11e48688e8d240b3e7c3a93d3894e8607bfc3cd2cebab7543c32b159645c8c47f6e52ea906a82bc781d0dda65f63eef773cd1d6ec272737767191153bc91180bda5f8d6c3e2f754426098eaaa0", @ANYPTR, @ANYPTR64], @ANYRESDEC=r10], @ANYRESDEC=r9], @ANYRESHEX=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x3}, 0x1, 0x0, 0x0, 0x2}, 0x20040800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x8}, {0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3503, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4}}, 0xe8)
r11 = semget$private(0x0, 0x20000000102, 0x0)
semctl$IPC_RMID(r11, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa, 0x7}], 0x2, 0x0)
r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x202, 0x0)
setsockopt$inet6_buf(r12, 0x29, 0xd2, &(0x7f0000000400)="77e187ec2a7a20862c951d0022f678aed27eef4060e2d7d9fb8b851e99c843a54469883a6a5e64c3dd851d4039009a639379f013a330121a95472c680e409b5775d9fab4bd98d5397886309e94f475f00e5f0174c70edbae1fa1e31aebafd83e9be9a14b2fd2272b03b7bb64181dfafffc862daa71a2068b442f9165420cd5ef155524f37f41f964a1ec58078394f67b64528a90b6c259f25efe6c1cfd6e15db614a3f3b43ab2eb53bb0cca04de80485415bac1bde6d43255b8ed8d5c4ce486d1259ec2b4b985f6a4b0f7f4ff2df3f53ffdfa6b1f82250d392562e931f1111c34d486f901c361760", 0xe8)
r13 = semget$private(0x0, 0x20000000102, 0x0)
semop(r13, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1)
semtimedop(r13, &(0x7f00000000c0)=[{0x3}, {0x0, 0x3f65, 0x800}, {0x2, 0x1400, 0x800}, {0x7, 0xff, 0x800}], 0x4, &(0x7f00000002c0)={0x77359400})
r14 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r14)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  617.620498][T23111] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x245, 0x0)

[  617.727963][T23116] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  617.757169][T23116] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:47 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x10001}, {0x2, 0x0, 0x0, 0x2}}, {{@in=@empty}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ff0f26bd7000fcdadf250b00000008000300", @ANYRES32, @ANYBLOB="2b003900090000000a000900ffffffffffff0000050033000200000008000300", @ANYRES32, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048000)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1cbf957b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4080)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:47 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})

[  617.911073][T23128] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:47 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x3}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

[  618.068101][T23139] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  618.078866][T23138] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  618.086472][T23139] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x3, 0x3, 0x9, 0x3, 0x10, "73667001d664390e00e6afbe66077e02266e46"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:47 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

13:18:47 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8)
syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./bus\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="da89461235b6a8dc84d3a3270c4e52043a9ba5ca949481b84f9303b7c5fb3a24ca601cc44c49b525ff22800a2a2698d9b2eb5ba943475e810449cfb6fd1c6e3a437154c4ce1c0d63c394834d609a2fba8b3a61431d89a0e464dfbbdd25f6a7976ef2e21c7ca95ebf19d382f070b1b3c7d334b90c91ffd127b47c7bd17af1382269b5919542039c1e962f2390581845486ca24f03f592be8e31b6904d02b7816b7e8714bcecd7069827cacad9ab5934f099d8f72e249ffac1301e5bae23", 0xbd, 0x401}], 0x1000480, &(0x7f0000000500)=ANY=[@ANYBLOB="7362736563746f723d3078303030303030303030303030306666662c6d61703d61636f726e2c7362736563746f723d3078300f30303030303030303030386364662c6d61703d6e6f726d616c2c657569643d", @ANYRESDEC=r1, @ANYBLOB=',mask=MAY_APPEND,\x00'])

13:18:48 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x246, 0x0)

[  618.446107][T23129] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  618.579319][T23163] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  618.606524][T23163] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0
13:18:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x9b0000, 0x81, 0x4, <r4=>r3, 0x0, &(0x7f0000000000)={0x0, 0x9, [], @ptr=0x2351}})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:48 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2d8f, 0xa, &(0x7f0000000740)=[{&(0x7f00000001c0)="01e259a9cf7201fbdb58ea46242517a6baf403e6f399981782fe460ed77d8c6a28becc55643488ff9e4a6a9b8154b940728b64ec23b0f52832d99b26b9b9242e826089573cd70e338e8ad9ab917e1c01725edf235647", 0x56, 0x1fec4174}, {&(0x7f0000000240)="a68bf58b1919dce2d49bf805bde8ebcaab20e27b00b922fc131b2962ea9d9e3f75585d58a27ffe98c25d79aeb7fd82bdeab1d5b81bb1e6bac4faae7787715f3d821860fd3d3081e54e05c23d0cb37d8f7fa00cd5c473ddef7f", 0x59, 0x4}, {&(0x7f0000000140), 0x0, 0x100000}, {&(0x7f0000000400)="19f9be61b990eaf2b2e2f4498d7c50ad0251b0ac924f17d27e43c764940bd01c758edd9574f8ec333c99b85422172476f9f3dd4b9f79442cf2e28e11b4b0d15bed", 0x41, 0x6}, {&(0x7f0000000480)="4ea4dad9f66d47d964af688ecb321a26f55d465f4dea5438aa38e9ab2c1a30b418cd30e07176ac8c049758a55b688374f2763c38dbaeea9a357763f928ac9bea085a0f87dc5bfd85c4548150154741e88580c59a6d49a6a12dabec02828895f7c36b006a839c3e723f", 0x69, 0x99d}, {&(0x7f00000002c0)="baed81e1e50160fb84ea0d1203eeda832cf630ef", 0x14, 0xff}, {&(0x7f0000000500)="36bd9a3dd486c7835abfe2ef86fdc8bd1bee68c5afacd1895411c652ff70fbc4fdfadc30cdbd8ed3dad48fce83903f38acc6591686f1af0d10982a9321ce5f5d452840acf10defb89e7cd3f1ddf73c32429b0d93933275015a91aee92ca8205349563208d687d74ca370bd4136a76ffd79b62da2fb735f06a353735518da587082ccf87474e42d666b20a70cc91bd11af7a12b1c4b792381fa717ec15abfa665d40316363f8d44b65d638721c6cfd4d2dc4ecfc37088bbd65ac9e34c502a8ff494d7cc1083b8b4e7cbe97a98f7cf3c44", 0xd0, 0x5a}, {&(0x7f0000000600)="29786cab", 0x4, 0xc3f9}, {&(0x7f0000000640)="c1e88ffebc640561c6260ae2205a", 0xe, 0xff}, {&(0x7f0000000680)="5a2bb2915f85bac9eec05160ac70e764f38c057da3cbadf2b085ffc8eae0a454b2a70881a291806d825acfaf3dca1c1ca778fb9652cad1a9fd3dbe2d6cc20597950569d8141eb30d86be502716dfb81132fe44f292acd2ea67150444501b7954923fd83d1578807bc3979d6267bb28c1601e1aa5e5c506f94ca9993fabe29fd72ccd2dbe52bab4780061b42de502cc0b52771686f0c4922fb81bcc39", 0x9c}], 0x203c808, &(0x7f0000000840)={[{@shortname_mixed='shortname=mixed'}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@nonumtail='nnonumtail=1'}], [{@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute'}}, {@fsmagic={'fsmagic', 0x3d, 0xf8}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bfs\x00'}}, {@dont_appraise='dont_appraise'}]})
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  618.759669][T23179] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:48 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:48 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x5, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800c1}, 0x4000000)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000100)={0xd91, 0x101, 0x7fff})
ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f00000000c0))
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x2)

13:18:48 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x247, 0x0)

13:18:48 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x400, 0x6, 0xa3, 0x5}, {0x1, 0x0, 0x5}, {0xfcc, 0x2, 0x0, 0x1}, {0x1, 0x0, 0xeb}, {0xce, 0x0, 0x8, 0x2}, {0x37a, 0x1, 0x2, 0x2}, {0x5, 0x80, 0x2, 0x8804}]})
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x3, <r7=>0x0}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000400)={r7, 0x46, "c6ba3c85d32e0c5824dc5785c36dad8a3323c6cfc95b736dab80bdc0a4b1caa19cb562a213884a5b08301cc38c283e30e5952bfadb86a07effbe274e71fd737617f9a03df0cf"}, &(0x7f00000002c0)=0x4e)
r8 = accept4(r3, 0x0, 0x0, 0x0)
close(r8)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200)=[r2, r0, r8, r9], 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  619.109086][T23196] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0)
write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x1, 0x4, 0x7}, 0x10001}}, 0x18)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x9, 0x1, 0xffff0000, 0x6, 0x4e3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:49 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:49 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x1d}}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffff}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x100000, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x400}}, {@sq={'sq', 0x3d, 0x7fff}}, {@common=@debug={'debug', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x5}}, {@common=@cache_none='cache=none'}, {@rq={'rq', 0x3d, 0xfffffffffffffff8}}, {@rq={'rq', 0x3d, 0x7fffffff}}, {@sq={'sq', 0x3d, 0x2720}}, {@timeout={'timeout', 0x3d, 0x10000000}}, {@rq={'rq', 0x3d, 0x4}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, ']nodevvmnet0trustedsecuritywlan0+eth0*'}}, {@measure='measure'}]}})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x248, 0x0)

13:18:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x41, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x4e)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [<r8=>0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r10 = socket$inet(0x2, 0x4000000805, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = dup3(r10, r11, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r13 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r14 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r14, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r14, 0x7)
r15 = accept4(r14, 0x0, 0x0, 0x0)
close(r15)
bind$inet6(r15, &(0x7f0000ef8cfd)={0xa, 0x4e22, 0x6, @empty}, 0x1c)
listen(r13, 0x7)
r16 = accept4(r13, 0x0, 0x0, 0x0)
close(r16)
sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="528610090000009e902301e01a836ec9762098cd76819ade49513dfa95c78754c3cf26e3473e5e4f2cb43dbff977fc95b6a8ff8ae606ea19d1666e9d09eff84cd75861fa9300ff07c6abb88273f87d52b7d54ed2c51fb97c6342964fc3fbfe77732dda6000d939d5d417db74d009408b0bbba60349f5daf01f4bdaffce9b7a0548f1b142a66039af2fe11f827dc59f57be127df5a8831a36cf5338d4eb313625b554492deeb32703fd607fa06e848813c9c77c26bcf98d300926e7145ffa2016d08f36e2a6b05f6c3502fdcccda602282c0300000040000000007bf0920d6fe0356e7802708343c966fcf0", @ANYRES32=0x0, @ANYRES32=<r17=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x70, &(0x7f000059aff8)={r17}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={r8, 0x1000, 0x3ff, 0x8, 0x5, 0x6000, 0x7ff, 0x6, {r17, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x81, 0x9, 0x1965, 0xca, 0x1}}, &(0x7f00000000c0)=0xb0)

[  619.714001][T23237] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x249, 0x0)

[  619.797876][T23223] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:49 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2d8f, 0xa, &(0x7f0000000740)=[{&(0x7f00000001c0)="01e259a9cf7201fbdb58ea46242517a6baf403e6f399981782fe460ed77d8c6a28becc55643488ff9e4a6a9b8154b940728b64ec23b0f52832d99b26b9b9242e826089573cd70e338e8ad9ab917e1c01725edf235647", 0x56, 0x1fec4174}, {&(0x7f0000000240)="a68bf58b1919dce2d49bf805bde8ebcaab20e27b00b922fc131b2962ea9d9e3f75585d58a27ffe98c25d79aeb7fd82bdeab1d5b81bb1e6bac4faae7787715f3d821860fd3d3081e54e05c23d0cb37d8f7fa00cd5c473ddef7f", 0x59, 0x4}, {&(0x7f0000000140), 0x0, 0x100000}, {&(0x7f0000000400)="19f9be61b990eaf2b2e2f4498d7c50ad0251b0ac924f17d27e43c764940bd01c758edd9574f8ec333c99b85422172476f9f3dd4b9f79442cf2e28e11b4b0d15bed", 0x41, 0x6}, {&(0x7f0000000480)="4ea4dad9f66d47d964af688ecb321a26f55d465f4dea5438aa38e9ab2c1a30b418cd30e07176ac8c049758a55b688374f2763c38dbaeea9a357763f928ac9bea085a0f87dc5bfd85c4548150154741e88580c59a6d49a6a12dabec02828895f7c36b006a839c3e723f", 0x69, 0x99d}, {&(0x7f00000002c0)="baed81e1e50160fb84ea0d1203eeda832cf630ef", 0x14, 0xff}, {&(0x7f0000000500)="36bd9a3dd486c7835abfe2ef86fdc8bd1bee68c5afacd1895411c652ff70fbc4fdfadc30cdbd8ed3dad48fce83903f38acc6591686f1af0d10982a9321ce5f5d452840acf10defb89e7cd3f1ddf73c32429b0d93933275015a91aee92ca8205349563208d687d74ca370bd4136a76ffd79b62da2fb735f06a353735518da587082ccf87474e42d666b20a70cc91bd11af7a12b1c4b792381fa717ec15abfa665d40316363f8d44b65d638721c6cfd4d2dc4ecfc37088bbd65ac9e34c502a8ff494d7cc1083b8b4e7cbe97a98f7cf3c44", 0xd0, 0x5a}, {&(0x7f0000000600)="29786cab", 0x4, 0xc3f9}, {&(0x7f0000000640)="c1e88ffebc640561c6260ae2205a", 0xe, 0xff}, {&(0x7f0000000680)="5a2bb2915f85bac9eec05160ac70e764f38c057da3cbadf2b085ffc8eae0a454b2a70881a291806d825acfaf3dca1c1ca778fb9652cad1a9fd3dbe2d6cc20597950569d8141eb30d86be502716dfb81132fe44f292acd2ea67150444501b7954923fd83d1578807bc3979d6267bb28c1601e1aa5e5c506f94ca9993fabe29fd72ccd2dbe52bab4780061b42de502cc0b52771686f0c4922fb81bcc39", 0x9c}], 0x203c808, &(0x7f0000000840)={[{@shortname_mixed='shortname=mixed'}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@nonumtail='nnonumtail=1'}], [{@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute'}}, {@fsmagic={'fsmagic', 0x3d, 0xf8}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bfs\x00'}}, {@dont_appraise='dont_appraise'}]})
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  619.990252][T23254] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:49 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:49 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x9, 0x40000)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x4c0901, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24a, 0x0)

13:18:50 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:50 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_GET_SPEED(r3, 0x551f)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  620.615074][T23280] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:50 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24b, 0x0)

[  620.803518][T23295] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:50 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24a, 0x0)

13:18:50 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  621.039144][T23304] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0xc0000)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000140)=0x5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:18:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24c, 0x0)

13:18:50 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x7fff}, &(0x7f0000000100)=0x8)

13:18:51 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

[  621.415696][T23318] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  621.490853][T23326] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:51 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24d, 0x0)

13:18:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x41, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x4e)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [<r8=>0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r10 = socket$inet(0x2, 0x4000000805, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = dup3(r10, r11, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r13 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r14 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r14, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r14, 0x7)
r15 = accept4(r14, 0x0, 0x0, 0x0)
close(r15)
bind$inet6(r15, &(0x7f0000ef8cfd)={0xa, 0x4e22, 0x6, @empty}, 0x1c)
listen(r13, 0x7)
r16 = accept4(r13, 0x0, 0x0, 0x0)
close(r16)
sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="528610090000009e902301e01a836ec9762098cd76819ade49513dfa95c78754c3cf26e3473e5e4f2cb43dbff977fc95b6a8ff8ae606ea19d1666e9d09eff84cd75861fa9300ff07c6abb88273f87d52b7d54ed2c51fb97c6342964fc3fbfe77732dda6000d939d5d417db74d009408b0bbba60349f5daf01f4bdaffce9b7a0548f1b142a66039af2fe11f827dc59f57be127df5a8831a36cf5338d4eb313625b554492deeb32703fd607fa06e848813c9c77c26bcf98d300926e7145ffa2016d08f36e2a6b05f6c3502fdcccda602282c0300000040000000007bf0920d6fe0356e7802708343c966fcf0", @ANYRES32=0x0, @ANYRES32=<r17=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x70, &(0x7f000059aff8)={r17}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={r8, 0x1000, 0x3ff, 0x8, 0x5, 0x6000, 0x7ff, 0x6, {r17, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x81, 0x9, 0x1965, 0xca, 0x1}}, &(0x7f00000000c0)=0xb0)

13:18:51 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f00000001c0)='./bus\x00', 0x5, 0x0, &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@nointegrity='nointegrity'}], [{@smackfsdef={'smackfsdef', 0x3d, '['}}]})
socket$inet6(0xa, 0x80000, 0x9)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x35240, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x7ff, 'Ztf'}, 0x6)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x1, 0x9, 0x4, 0x70000, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xff, 0x0, 0x8, 0x4, "674456a6"}, 0x80, 0x2, @fd, 0x9, 0x0, <r3=>r2})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000400)="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", &(0x7f0000000500)="08d9e3fe12291319f7699d690586b9f3bb26d8ca19f1dc02bec58bbfb12dd7569d4df9a2d177f55c75a477bbd101bc265ff44b4eb9ab74896c74dae30c8dac302e29315ed7295ca82bdf1b07f1911acf296646a6237934fbadda7e65fcf0a46a0f6dd42db08ff367699402b527a5c4a798145c0af5aba974dbcfda88ae60e22d05fba2314a6087af2037718c128488338ae82093cc28fafdaf36451e2d8f873587d5670d1d6c6cb5cf72f6ee"}, 0x20)

13:18:51 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)

13:18:51 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
close(r1)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0xaf9d]}, &(0x7f00000000c0)=0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:18:51 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24e, 0x0)

[  622.222993][T23361] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:18:52 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0)

13:18:52 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0xff, 0x80000001, <r2=>r1, 0x0, &(0x7f0000000100)={0x9d0001, 0x3, [], @p_u8=&(0x7f00000000c0)=0x4}})
mkdirat(r2, &(0x7f00000001c0)='./bus\x00', 0x100)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x24f, 0x0)

[  622.568937][T23386] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:52 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0)

13:18:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x41, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x4e)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [<r8=>0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r10 = socket$inet(0x2, 0x4000000805, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = dup3(r10, r11, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r13 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r14 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r14, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r14, 0x7)
r15 = accept4(r14, 0x0, 0x0, 0x0)
close(r15)
bind$inet6(r15, &(0x7f0000ef8cfd)={0xa, 0x4e22, 0x6, @empty}, 0x1c)
listen(r13, 0x7)
r16 = accept4(r13, 0x0, 0x0, 0x0)
close(r16)
sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="528610090000009e902301e01a836ec9762098cd76819ade49513dfa95c78754c3cf26e3473e5e4f2cb43dbff977fc95b6a8ff8ae606ea19d1666e9d09eff84cd75861fa9300ff07c6abb88273f87d52b7d54ed2c51fb97c6342964fc3fbfe77732dda6000d939d5d417db74d009408b0bbba60349f5daf01f4bdaffce9b7a0548f1b142a66039af2fe11f827dc59f57be127df5a8831a36cf5338d4eb313625b554492deeb32703fd607fa06e848813c9c77c26bcf98d300926e7145ffa2016d08f36e2a6b05f6c3502fdcccda602282c0300000040000000007bf0920d6fe0356e7802708343c966fcf0", @ANYRES32=0x0, @ANYRES32=<r17=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x70, &(0x7f000059aff8)={r17}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={r8, 0x1000, 0x3ff, 0x8, 0x5, 0x6000, 0x7ff, 0x6, {r17, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x81, 0x9, 0x1965, 0xca, 0x1}}, &(0x7f00000000c0)=0xb0)

[  622.824928][T23396] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x250, 0x0)

[  622.974872][T23404] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r5=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000340)="2ef30f013ee9900f01cb66b9800000c00f326635008000000f30660f1ad00f00110f20d86635200000000f22d8f0871af30f063e360f01c3baf80c66b8e8737d8666efbafc0ced", 0x47}], 0x1, 0x0, &(0x7f00000003c0)=[@cr0={0x0, 0x2007001c}], 0x1)
r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
dup3(0xffffffffffffffff, r9, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e22, 0x8, @local, 0x8000}}, [0x7, 0x3, 0x0, 0x8, 0x5, 0x8, 0x3, 0x9, 0x100, 0x0, 0x5, 0xa79, 0xffffffffffffff1f, 0x1ff, 0x3]}, &(0x7f0000000140)=0x100)

13:18:52 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0)

13:18:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x251, 0x0)

[  623.443599][T23431] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:53 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

13:18:53 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r2 = gettid()
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x30, r1, 0x175)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x128, 0x2, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0xf64}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x24}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0x7}}]}, 0x128}}, 0x24000000)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000580)={0x4, [0x0, 0x0, 0x0, 0x0]})
clone3(&(0x7f0000000500)={0x800200, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)=<r6=>0x0, {0x2d}, &(0x7f0000000400)=""/222, 0xde, &(0x7f0000000240)=""/91, &(0x7f00000002c0)=[r2], 0x1}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x2, 0x7f, 0x6, 0x8, 0x0, 0x6, 0x2, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0x7}, 0x24228, 0x7, 0x7, 0x6, 0x1, 0x81, 0x81}, r6, 0x5, 0xffffffffffffffff, 0x2)

13:18:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x252, 0x0)

[  623.784995][T23444] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x41, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x4e)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [<r8=>0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r10 = socket$inet(0x2, 0x4000000805, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = dup3(r10, r11, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r13 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r14 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r14, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r14, 0x7)
r15 = accept4(r14, 0x0, 0x0, 0x0)
close(r15)
bind$inet6(r15, &(0x7f0000ef8cfd)={0xa, 0x4e22, 0x6, @empty}, 0x1c)
listen(r13, 0x7)
r16 = accept4(r13, 0x0, 0x0, 0x0)
close(r16)
sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="528610090000009e902301e01a836ec9762098cd76819ade49513dfa95c78754c3cf26e3473e5e4f2cb43dbff977fc95b6a8ff8ae606ea19d1666e9d09eff84cd75861fa9300ff07c6abb88273f87d52b7d54ed2c51fb97c6342964fc3fbfe77732dda6000d939d5d417db74d009408b0bbba60349f5daf01f4bdaffce9b7a0548f1b142a66039af2fe11f827dc59f57be127df5a8831a36cf5338d4eb313625b554492deeb32703fd607fa06e848813c9c77c26bcf98d300926e7145ffa2016d08f36e2a6b05f6c3502fdcccda602282c0300000040000000007bf0920d6fe0356e7802708343c966fcf0", @ANYRES32=0x0, @ANYRES32=<r17=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x70, &(0x7f000059aff8)={r17}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={r8, 0x1000, 0x3ff, 0x8, 0x5, 0x6000, 0x7ff, 0x6, {r17, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x81, 0x9, 0x1965, 0xca, 0x1}}, &(0x7f00000000c0)=0xb0)

13:18:53 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

[  624.312625][T23458] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  624.370151][T23465] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000240))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="660f01fcbaf80c66b8dcc69d8666efbafc0c66b80000000066efb8f1008ec8baf80c66b8d0bac58366efbafc0c66b83300000066ef2e0fc71a360fdadb0f01b005000f22230f20d86635200000000f22d82e0f01ca", 0x55}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:54 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x253, 0x0)

13:18:54 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x6)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:54 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

13:18:54 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x250, 0x0)

[  624.999955][T23491] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:54 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x84000)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
connect$rds(r6, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:18:54 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0)

[  625.177475][T23495] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:54 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x254, 0x0)

13:18:55 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd4000021}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="740000000c0603090000000000000000070000000500010007000100000000000000000005000100070000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a310000000005000100070000000900020073797a3100"/116], 0x74}, 0x1, 0x0, 0x0, 0x4000050}, 0x40)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  625.429259][T23509] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:55 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0)

[  625.733838][T23517] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:55 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x250, 0x0)

[  625.974527][T23525] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:55 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
setreuid(0x0, r3)
mount$9p_unix(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='9p\x00', 0x1001, &(0x7f0000000400)={'trans=unix,', {[], [{@smackfsroot={'smackfsroot', 0x3d, 'bfs\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'bfs\x00'}}, {@obj_user={'obj_user', 0x3d, '}md5sum$'}}, {@seclabel='seclabel'}, {@euid_gt={'euid>', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'bfs\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0xc2, 0x34, 0x30, 0x64, 0x33, 0x63], 0x2d, [0x34, 0x35, 0x65, 0x33], 0x2d, [0x1, 0x36, 0x67, 0x62], 0x2d, [0x32, 0x66, 0x35, 0x61], 0x2d, [0x61, 0x34, 0x37, 0x64, 0x33, 0x31, 0x62, 0x38]}}}, {@obj_type={'obj_type', 0x3d, 'selinux-user%wlan0]ppp0selfcpusetnodev'}}]}})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4)
close(r2)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0xe5b, 0x4)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x83000000)

13:18:55 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x255, 0x0)

[  626.279160][T23536] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
bind$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:56 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0)

13:18:56 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0)

[  626.756654][T23555] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  626.766104][T23557] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:56 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x1)

13:18:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x256, 0x0)

13:18:56 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x400, 0x6, 0xa3, 0x5}, {0x1, 0x0, 0x5}, {0xfcc, 0x2, 0x0, 0x1}, {0x1, 0x0, 0xeb}, {0xce, 0x0, 0x8, 0x2}, {0x37a, 0x1, 0x2, 0x2}, {0x5, 0x80, 0x2, 0x8804}]})
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x7)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x3, <r7=>0x0}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000400)={r7, 0x46, "c6ba3c85d32e0c5824dc5785c36dad8a3323c6cfc95b736dab80bdc0a4b1caa19cb562a213884a5b08301cc38c283e30e5952bfadb86a07effbe274e71fd737617f9a03df0cf"}, &(0x7f00000002c0)=0x4e)
r8 = accept4(r3, 0x0, 0x0, 0x0)
close(r8)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200)=[r2, r0, r8, r9], 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:56 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0)

[  627.241373][T23574] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  627.435796][T23583] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  627.451605][T23584] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:57 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x5)
write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1392], 0x57e)

13:18:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x257, 0x0)

13:18:57 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0)

[  627.879561][T23609] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
[  627.954040][T23604] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:57 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0)

13:18:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x258, 0x0)

13:18:57 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000280)=0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
close(r7)
getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000140)=0x80, &(0x7f0000000240)=0x2)
fchdir(r5)
setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x3, 0x5, 0x380000, 0x40, "ae2e4e295cbb60aae055de6dd90c5adf82dcdc15d9757cd717f6a023b43a3beff630d010a8ced60fbef5e24f649fb279471b1488caeac0739b00ba7941e71729"}, 0x4a, 0x1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:57 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@remote={[], 0x2}, 0x9, 'batadv0\x00'})
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
fanotify_init(0x8, 0x0)

13:18:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='nodev&#lo)md5sum]keyringvboxnet0\x00', 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r3, 0x5e, 0x27}, &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f00000002c0)="cc0e2d109be500df5090ce6d9eac9927346b5b2fe6efc98aaed83446d3374c72cc44c6253cc165eb11961e3ebadca5ad584bd0c20118cc3fcb86800ffc5a2f2bb05db20d3652ee5d329bac5026c6b8ad9c64da7cc2f07fe3a2e0a11af9a2", &(0x7f0000000340)="3275e690b396b181f9a03bd87c93db973dd25f0e4370625906d29349ca9718e48ff5c7aeca2ddf")
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x20, 0x1, 0x3}, 0xfff}}, 0x18)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f0000000380)={<r4=>0xffffffffffffffff}, 0x8c800)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000003c0)='raw', &(0x7f0000000400)='./file0\x00', r5)

[  628.408530][T23625] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x2000006)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:58 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0)

[  628.707626][T23644] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  628.834183][T23652] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:18:58 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0)

13:18:58 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x259, 0x0)

[  629.255395][T23670] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:18:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="26470f01df0f38f6b0090000000f35c421655899d0000000410f3248b800000000000000000f23c80f21f8350c0000000f23f80fc79f000000800f009b00000100646442d112c441b9d0d1", 0x4b}], 0x1, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
socketpair(0x0, 0x0, 0x0, 0x0)
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x3c)
ptrace$cont(0x18, r9, 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x14)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r9, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x10a21, 0x0, 0x800000, 0x0, 0x0, 0x7fffffd}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

13:18:59 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0)

[  629.494201][T23632] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:18:59 executing program 3:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x87, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  629.546398][T23632] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2
13:18:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000140)={{0x6, 0x7}, {0x1}, 0x5, 0x0, 0x3})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mlockall(0x0)

[  629.783883][T23688] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
[  629.842206][T23698] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:18:59 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000280)=0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
close(r7)
getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000140)=0x80, &(0x7f0000000240)=0x2)
fchdir(r5)
setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x3, 0x5, 0x380000, 0x40, "ae2e4e295cbb60aae055de6dd90c5adf82dcdc15d9757cd717f6a023b43a3beff630d010a8ced60fbef5e24f649fb279471b1488caeac0739b00ba7941e71729"}, 0x4a, 0x1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:18:59 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./bus\x00', 0x7, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="5239a529f0f0f8ba9a59bc91adaf4fce00d3", 0x12}], 0x8010b8, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socket$bt_bnep(0x1f, 0x3, 0x4)

13:18:59 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x25a, 0x0)

13:18:59 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0)

13:18:59 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  630.465442][T23721] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:00 executing program 3:
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x7000)=nil)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:19:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x519000, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), r7, 0x401}}, 0x18)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r8 = accept4(r3, 0x0, 0x0, 0x0)
close(r8)
link(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00')
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={<r9=>0x0, 0x4d}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000240)={r9, 0x6, 0x87, "2d106329533aee45ed15765c4e00107fea75118a5278f80fc3853734b43731e7b8e4c269842554a30d68ff70e6381bf4b2c3a4d18f736f6c0a0914c1ed4f9154957250025351afaa8dabb3ad364890c8c2a619d683c0b08c80301a828d36a87babe8e9b4be3ec934f4a80b9ab62fc2673a0e2670f05fa05ac3da556153c57b627fa04744669942"}, 0x8f)

13:19:00 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0)

13:19:00 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x25b, 0x0)

[  630.929379][T23744] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  631.067853][T23716] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  631.097934][T23716] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2
[  631.165406][T23753] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:00 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/105})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xc9a, 0x10b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000580)={0xf000000, 0x80000001, 0xffff, <r7=>r2, 0x0, &(0x7f0000000540)={0x990905, 0x5, [], @p_u8=&(0x7f0000000500)}})
getsockname$netrom(r7, &(0x7f0000000100)={{0x3, @rose}, [@rose, @remote, @default, @netrom, @netrom, @bcast, @bcast, @netrom]}, &(0x7f00000001c0)=0xfffffffffffffddc)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r8 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r8)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$VIDIOC_ENUMSTD(r12, 0xc0485619, &(0x7f0000000480)={0x400, 0x7, "4b8595aa9c2686e3d1f97e9d0e2b6cf37302450f3565d99e", {0xfffff800, 0x1665}})
bind$inet6(r9, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r9, 0x7)
r13 = accept4(r9, 0x0, 0x0, 0x0)
close(r13)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000005c0))
getpeername$llc(r13, &(0x7f0000000400), &(0x7f0000000440)=0x10)

13:19:01 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0)

13:19:01 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x25c, 0x0)

[  631.614645][T23773] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:01 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
r0 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000280)=0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r6, 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
close(r7)
getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000140)=0x80, &(0x7f0000000240)=0x2)
fchdir(r5)
setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x3, 0x5, 0x380000, 0x40, "ae2e4e295cbb60aae055de6dd90c5adf82dcdc15d9757cd717f6a023b43a3beff630d010a8ced60fbef5e24f649fb279471b1488caeac0739b00ba7941e71729"}, 0x4a, 0x1)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:19:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:01 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r4=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x70, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={<r5=>r4, 0x6f, 0x20}, &(0x7f0000000100)=0xc)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$EVIOCGPHYS(r11, 0x80404507, &(0x7f0000000400)=""/240)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="ebffffff", @ANYRES32=0x0, @ANYRES32=<r12=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x70, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={<r13=>r12, 0x7fffffff}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={r5, 0xae, 0x4, 0x5, 0x7, 0xb9, 0x623, 0x5856, {r13, @in6={{0xa, 0x4e20, 0x2b, @ipv4={[], [], @empty}, 0x6}}, 0x9, 0x5, 0x7, 0x80, 0x5}}, &(0x7f00000002c0)=0xb0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:19:01 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0)

[  631.953645][T23783] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:19:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:01 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x25d, 0x0)

[  632.425618][T23800] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x7)
r4 = accept4(r3, 0x0, 0x0, 0x0)
close(r4)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, r8, 0x2f, r4}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:02 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0)

13:19:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x732, 0xa, 0x4, 0x44400000, 0x200, {0x77359400}, {0x3, 0x0, 0x9, 0x0, 0x60, 0x3f, "46b56c90"}, 0x86, 0x2, @planes=&(0x7f0000000000)={0x8, 0x5, @mem_offset=0x200, 0x5}, 0x8000, 0x0, <r6=>r0})
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:02 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x25e, 0x0)

[  632.980880][T23824] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
[  633.063941][T23817] device bridge6 entered promiscuous mode
13:19:02 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0)

[  633.364662][T23786] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:19:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  633.475805][T23840] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
[  633.544901][T23786] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2
13:19:04 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8, {0x10000}}, 0x18)

13:19:04 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x25f, 0x0)

13:19:04 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)="03c585416d1aa06d6931ead6d5a41e1bcc60c8a67dea1b745365b1d063e68d79094a60315ae3092981b7d0615afb8e7c6d5a25d82ae8e52bc253f510875fab118c70209e9a784c6c548b3af12fed028c83b6de50856731ea0e92fab59513760e6c406a2627b95afa694084f2a8db5582df01113efa95a6bfc0b0f083ff1d80b33ca7508f996a5e", 0x87}, {&(0x7f00000001c0)="d390393a7955ce87f917df285ae166884d20ca6492df1aad871f1d9b606639f41f2a005b5cf2f01f8c5665ecbc67e4361e9cf16ab38f7f8409311c09645af5a7d1c40240c545fceef136be23f9649c0f32b1c77b2290acde071b837cb57f9700cdd1326f0fcadb9023e3b26d14d135868ffada988c3ec6a5c6427ffe14cad72f664e233610d9d4775305b4a24ec067d53c25d69ebb45c91cdd3c13ac395cc6aeec081e4ca5ef4f35d2db43af34615f4e7c32d9fef971eb80b7089856fcb610d1928282fd67c05302c07aea712554cf8217dc66dae52252", 0xd7}, {&(0x7f0000000400)="82946d7d7368f9f741649356076cfec5c5f53ae203b17aa67fc3a3de365a464ea803e5af94edc828e716ba30dff40cc4efe5bf28d358d321f3db5fe3c4673fabff4aa88ce05cf2bef651c1eaa62cb2e1566a74581add24bf677360aa10989418d6f882aaa1d95abc9a2913205e2d1e", 0x6f}, {&(0x7f00000002c0)="83dc95fa551815b1c6d37726083209a12a127fb0469de4ad0ee4eb8f2c41ff7a14669b539cbcba4d418c3b73209418a9da1ca031d426", 0x36}, {&(0x7f0000000480)="41b5c886ab7f763db26a863f36c795b827a9a62a20a7ecd98cc6a3752cfada9fb4772b0dc9219b496ddc75401eedf16aef883407ef011bb81ce96829091626101ed2fcab300c778d944137aa762969846a86d8442e958bde8f85b959ed8084f5b2821a73d25a9e09c0e224395ddecfdd9da0679e58a9cf1fbb99d412d4a20d4011395b3370368d2ea7028afe4f87932847a00093a63d3b5213b30d49020ff668e299a3b8c5133134b61fdb1187d16d602e2b1153da9bb164de999fd0cd9abdf540ac22d68eae7db7425a915c5ada1bdc4fc7aebdb7c3ebe298b3688a8e538f06955b703de75a6382919bcdd01001768d299172ae49dc5fe04d5bbb7e9d18163f31acc8ca8680d510bf52bfcdc5909e1c5fc6bffaa2b5e4d1335a3b4b42778cdab4159adce943a151759cf9553da71d6a4c927f479046d71be16daa47728dfdbc467fab17b95c15ededa3786203a2a264d6c3983e2b2e214265c3a785ceac3a4259e2d9def8d0e34b4665c2de2f8b3bc9bfcf5f57867f94fad06fce2c57a984be2dd27342e108de307e091506ecd39c7e2b92f164ccc733433f79950c804cef537b4a617a7d1763902196cbeaafddf418bbafee133a5a80aea81f18d253eb64c3679b29d619d0d593688f13454f913e9c2c9bf2707e91932c4c3022ba4371954bbc43d373ad9d8313b5f0868a7e6ab272cbfc9a1c3d3203f062ee8d8bc762c3613356435405b450b8fb2b807ae51079c150ca40e1a17e037fb298ad7b68eea3be7a8ce41986d938c0662daf5461f43d6051db1ecce58a6eb4d025e2973aebb60156dbbfc0460a5b3db734096701c0ce8af7b9a040306337328e1e779e4d9082e41a9e4944bea26cd4acec03de4c636461ecff0df986e5a97012eadbeed9092bf041ebdc297922c801d745afec1a4914734662da6243fdc1fa19e6331f1c12e3ba51273e21714354c78576240b36ead15ada548e8f0f08f6f316dbefb86a34d3a79ad622c06dd9634190cc5975b122c90164ce3a8280e9ef912c3ca1e8e85cd150d587ce62a60cbf3b2fd62e7142d799ddecbcd67ab0e8ef97c7c339899974d3940c6eb5602f6e67b90f3dff155c34c2f28c45a91df0b6182e519afb4d15a305b96d72a1ce8f1e3545da43f5085683cbf386294a9cdc71bbd074cfb83ea7f0fad2bcc2190627490c004f9df6f399b178df93c88a099ca6eaa89972b2a68018ff0036c08426c10574f6854dec3d2fecade1abd998ecf9a2739f2ee8374555d93e197686dcf63d27361f0c0c3f1996f6747782c0326c70503daa6e828c227917055af3f27994bf59eaaf9d924836c1bf77b97eea6669509285ba8b2dfcf2b8702d2a3cb3328760f3543d58d8ba1f44a6fe9276fa2ea84001d433b15ef9b01f35e1f7d4d7101b8a5e1a6d9a42428dbb84dbfde2c6eb9a29da50feb4c4e2afbe312b15274d3754921379112d92ade9668e8c8e43fa81f0bab01c0fd928105300c1f7298db61cc3eec54a80bd65df4adf533f31555fe21f60234b8275fcfe3979ebcf88365a9cf739608471c1fb5a36a95963c5cf56df56382a396feedd29bd555c12ac36d71d8fbdec5fe6d319ed98b6f9d950ca76a125a5c484268f33c8542cd2ab276e90f21fc53163d9cddd3c9839923a90f59553c281abdc0744eea379044cf8cb5341807977cb8df5df77e98de248a2fd149332a9f8f68c78cd153196c744a49258c82e250bbc6632a68e0b49561dd1192949acb96c0a63662733c693296f963f7d5324a7cb0902ac78614b14fa34a82759af3a54194c583453cd615fa09e3e2c2520e85dde7ea2d675d9d019998f8b0569b6dd475c88068fed1d4a181e3a36276465bbefc91df2acdc329dc176cac25bf8c7389cacdd5677bc5f4dc7a6b1a415b923c2892c1f5e7a58a46e411013c8bb450dd44ce029f74c35fb84f3ab7ced703484b60ec49fe449adeef285f1184e9ef1e0f50d46d51bb080ce67023cbcb346c36c453144db095e6a843b1fd8f7c53251b82ccf908102d7a9851ce3893464f6530e9b7b0b8eab2ba53ae13c2a7c2c8b93dd4b1d1f62742768921e69a6e249d8bd99baf3ae6ced11c6ba52608374254f6bf0b428c87f5c951addd46123953648a00540e9e0a3296f73664c5c8a9ee71800b0c095f709b3712e0583c52cff8e9c1ad243f9ae04fbf6c69c04231e1857bc178c8a38ef64392d0372cc8889c6bac8b89c3d3d3bb1c65e68a73c8fbe1cccac22920efcf19d50a30bd5e3bdf657c1973209e3c3fac64af1b9ffed084b81ae86dca5beeb647c1e133e3a532c723b28f0097d626660593b25dee2e5eb82370b316bb57471bfe1aebd71bd41f347e842dc550da3e3d39056d8155f1946567bee08a5a68ca5558f5d7f5b68bdb50aa780fc8cedb0662f15f3c4d203bcc53dedfa334d3265d3a545fd9a09cef837993c286262b16c08097f484840552ad4637f33144f5fbf60b733937c448f0f7e332e9c93e05e107a5a2b58297257750ef35e262bddf4c8c295bdaa6e5e16e050a982693a5a8029376185fe92e81893660dcefda3304c7c3bf03a7dc80cf832cc68c3aaaf8445b296f45696dfbc0fbb23a55be0e3126555aa479f17ed922e3b66fe545b4a00473ada05f44ac90456e9ddf19f7e1b466c5dfd0f53fb9ebf1b5e8da68aaed4a7c4029c6a065293ed0f54edbcfe4092a6e7c4bfef66e9284229fa0325b85f709726a43d8eb18d8bf00f7fb7be0a443aa48daa50c0290812386327bff7fa91a72c6730b8c5b409b523caaacdc8d363c50a613a9090266128bf57f767422a5d2eb804412973898faa88fb54e94fe7db1a4357beb3de242fc817a857679016c6f7809491033cc192fd0180aee776f960ed4c0c2da0fc5c0301af8f3bfe435854793a796fd35041e94fa940520acdd60dfd17a59d4999d5ac66240681394956a6ba3ceb402ba8de4c43835e59b5418d1316a0396e7a1551ebb1bc9171dfb8dca380e9524f364d710e8b53df8bc504e66d5bfac0dc31e3b86578cf871b15dd803c99ed8a660c010a4ac13ac43f7da6fe46c56031fdf200a3345605b997ddb476c7f92fe424ff70b5c451d07fb8b91ff2658203a52395dbdf549860d3cc760e7fa177438750a4170a1bc112256b7341a6816d4dea539435e3c748f077f71d08f1c46d436cc89aeacb4b3f0ba442799f4e5bc8e32c75000a22470068caef9bd291c43028e63a914434fd452830efade37e1f6b9d0c3ae6929941ed66be35b98ff6f5eddbfc735db6ef21d6056b5578eb3d8ca2ab9f4c14194edbf21ea177eb47f63970ae84aea7c8e21dedbb4fdbe4b97c6af51afb4bf85f3b5b91d292dd8de4dd21f374b0b4c8a66e7a5e08329f653dde088174b114e5f3f8df6da1343035486d20c8dc23f73db6e14b4e9062ee28e3da246ce66ac657467ed356ba6d90a74050aecb0b13c8f2489782f166c1dc3d38945ad95f858e6c9e88a357800ce5b70d7a3d66c93d7f288925a959ef49b1be158d9ae8e4a18560f812a8dadd70b212fdef7b28324f87be9a8777b5574465b31b49846a54072bb800d3f48e6906a76832ffbef2ef886a04b298ad370fe881ada516cb68bed237fabb4c4635a84fefe6a874264bd3cdc4ff9a9c4f65b8108bfe8df2bcff4e168d03841717e02dfcd298a2496b44a7ecc9c09ea8f964ee728ac7d323107cc76c378cccf8aa349613b66cfb7f73ea8aabff87b9f1385c11807a538644cb6effa251b025aa7029ed4431e3bd925842fae3856526dd4888adf43efd0b566a386e7a6d911363487055129c377f8a95615726956e3592c256b51422d23553674f05798ddd4333483f82d7a09519dc15442baebbdcddad13f6360bd2e99d7bd63826a66f63e1ef9e78e10a5f8f3f512788724aad866a42d4e39f1cee591144b5db5a2f418761cfde7d6eef221a2ae242b34e78079c6dc525c50e21bfc65b9881c298121e45e307310d0bdc5e902d478e0ff00f774e05d60d595a14c3318d29e273352761fae362e440dcaf2d94f05160ff6c16b077ced0572284707572e6fe114f711cedd4e2e5a8622edd0e5d589854396201fe7bc0c93dd26585c199eb1bea11f7c4919121fadf9f1a473a0a4a7b31a76b7200079f4680759442bc1d204a3403e247f89fb302cf662924df86f344c618bc1c213573315104c030f755b4ea7fb05da31ff5aa902494e992a107b05746db00b941344cbd915172223cdd74215d89f64093afd4bc1bb42b67411a57be43b25c1ee425452c3d2edacf33436963be0df338a2f4053d988f5030c42fa9bf10c0ef22218a1fe4c0443e4b2c5aae84bba138dde5a624101da5d1f3d8cd4199fe4bff183aa86b8c602057bc9b741ec82f72b0756f6f60aeb1ebca0d27c120085215c3bce5fc815a173c85426349de74bcb40798cfb14bc35ec0292cd9a871a5f101d7db219f6c8f1db84ab08bb4742400120b99fcb9c807ffe622546c690e1166bedebcc42c2e715f97afa646c7fd077b80bef876841fb726ad7167da5f678c8fdbf0ab079647ac66bdd8b3ecb3a904c08d85f4a8ed2d1d66e717779cf2d428d50a5b5c2bd9e6e2ec351564e6284b7cc5467e526a67debce67f96a405fa6fcc64586d7ca6ba8c1c44c8a869644c70c1f6b22cc9aff8898d9d92407607b2cdffc4153489a7d787c7944ea37302f983100f153a7c0064bd6824421cdfe04636c4c9e750f4b9c254370754b1a3dd764817d125f26f7c1c970a05412ab74bdac64550a2bd5efcd9b135915007b8663805d6e4ac44054447cb60d8852ca75c8d2b21280b2d0f343c7770886de2e8f33441f2678a13f52104a69e9d2895a841b8fb0233f12283e8028fd5605afbe686f993f1859ce640b6a78e12b13c47dd3a36195d06e8976e70455476daab1de7d9c15e78db00f8dd7fea7cf00e949be711444bfe3d238f837069b76bf0cb6cd811870ebf39ccceedee4cd3c682067d4f6e30a47d2330b97e5909ad5e317bc252c12644a4d0469f651b59bc5c826ded88f0589136dab3ce4efe2329da915dc238ccbb9d4daf22b9537e5168ab5b7de0457ab250c9ec0fcf7cb04d224fba976559bd5568944ebf28e4a48d7e6fec32bbf2be34348cca2d43d695c148d438e0115efab53e845244db5f5201174ac4e280cce710f81697d3cf668f642b8ba517d159020b12e7c260e812b5584d94165a60bab534cd3f3e67a34e9d8d9106bef5e5311d5f802b75e46791f249b041c12a6722a7a602e5064959cb3c3802a54f367faa2618aad5110e806620bb08b33703d7f68f4a66507ab3db197dec7a9aa95945279b85694c1049bd8c3d3870b7521320d8421f99747d188992191cbd335d31acc3176b371ffee1292f0279c1d40ba3e29db229b2d380c1f2a7fc620622195b21d93c995d51c460a7773c2b418fc2a9d45f2aa0e472570b7ee42c643454e171e1c66ec62e16106b6139e38f0908cf503b6a532d21cdecbb3bce9e30a9c338959c1f3f2ef62a3ef7f6f2ce1e4fe66679571811c8b5039a86cd8237dac8ab98685582c56a21072bd150d0cb4dcc50cec1f6b19f39cfdbcf1355a1d40a9055e8c7fd3e31fe4c9f6430d61f6b35979748e9ac310ce3a5d1cd3242636ba47e4292c8e3ce5aad7de6924b4e9d120798da2b7bdedb37523ad2e03e1db4a3982c912019ecca2bd03dceda8ea9fc1e238a17c33f0286df96879d3e32cca58ecd0ed1114df9a6d1d6101f1064583f39a72f6f70a40fe7fa30c83e089550997457f09c7f298abc5e10a18dd3799f7291795314b7b542321e88979a7454", 0x1000}, {&(0x7f0000001480)="f497315a2e82e5e7385f1d3f26f86d30002ab65b5ec04ff712445146cae9bb4390ed3b8491a2fd9098d1f2138b2156285b8c2c31251d8c78d065d1dd0c45f515f7f9e14329b123d4ae16652553da4bd49f85232979aed03516340e16fa4d011ded9d86e7331bb40708cd1d9af8f7f92e537a7c88a3babb73658a16cca8076be0b309d0775947a7e64a67f815a992956483ef42241394cbde52c314ba62b1dd013e933ef1fcd4e0e74a3afd33c851d30df12d42eb81d4a1fff9107c367edd4789b02a490da8701fe660c1fc81a5c4bfee3f0ecffc7870a04dd4bc1768692f9477", 0xe0}, {&(0x7f0000001580)="a5f04e3600a505da4d88fc71557d0b27a057201a07c5601c41af921c5e0b14fc6efcdcddb787d4a8e331e0215051abe9457a06c50581addd35c8b91189ee3488e80822d7bb2f32423370f9ec350464f9de662e5526436c52b305321eb92e7da68852ff5a26d5222a32858482215687bb8a1888dcc3b8206e70a43706b008", 0x7e}], 0x7, &(0x7f0000001680)=[{0x48, 0x108, 0x3, "319027f56cd6229d6fe128d5b9d9d6c7962ad816b21125c3f9ea6a90c80dc39ad58a2f9a6f49ce72586f9c4e017ee32bc9702c"}], 0x48}, 0x4001)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setxattr$trusted_overlay_nlink(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='trusted.overlay.nlink\x00', &(0x7f00000017c0)={'U-', 0x6}, 0x16, 0x7)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:19:04 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)

13:19:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000003c0)="ba4000ecddcb66b8b91a00000f23d80f21f86635400000b00f23f80f01df362ef30fc777ae643e0fc75a05660f6b1e00006526156aa80f912e0d0066b8bd0000000f23c80f21f866350800e0000f23f8", 0xffffffffffffffca}], 0x11, 0x0, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0x1ff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f00000001c0)={0x7ff, 0x38414762, 0x5, 0x3f, 0x3, @stepwise={{0x8000, 0x7}, {0x1000, 0x2}, {0x80, 0xffffffde}}})
socketpair(0x0, 0x0, 0x0, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r10, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r10, 0x7)
r11 = accept4(r10, 0x0, 0x0, 0x0)
close(r11)
getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc)
ioctl$sock_x25_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@remote={[], 0x3}, 0x1, 'veth1_to_batadv\x00'})
ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000100)={0xfffffffc, "bffb4056bda2a48a22d9e0e6d2f25fec177c87fd30652d9940f63c6654a374d9", 0x1, 0x1})

13:19:04 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000000c0))
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x8, <r5=>0x0, 0x10000, 0x6})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r5, 0x1000})

[  635.289650][T23867] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000)
[  635.317813][T23873] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
13:19:05 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19f, 0x0)

[  635.349521][T23865] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  635.385915][T23866] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:05 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x260, 0x0)

13:19:05 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)

13:19:05 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f00000000c0)='./bus\x00', 0x519541, 0xc1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40602, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x22ed40f3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffe01}, 0x1c)

13:19:05 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19e, 0x0)

13:19:05 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x261, 0x0)

13:19:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x78b061, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
r5 = accept4(r4, 0x0, 0x0, 0x0)
close(r5)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00')
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r14, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_MASTER={0x8, 0xa, r14}]}, 0x28}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
r17 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r18, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb49d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037757d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce632f6ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707000000"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0xfc3c, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_MASTER={0x8, 0xa, r18}]}, 0x28}}, 0x0)
r19 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r19, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r19, 0x7)
r20 = accept4(r19, 0x0, 0x0, 0x0)
close(r20)
getsockopt$inet_mreqn(r20, 0x0, 0x24, &(0x7f00000004c0)={@multicast2, @remote, <r21=>0x0}, &(0x7f0000000500)=0xc)
r22 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r22, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$ifreq_SIOCGIFINDEX_team(r22, 0x8933, &(0x7f0000000b40)={'team0\x00', <r23=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r24=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d80)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000000e80)=0xe8)
accept4$packet(r3, &(0x7f0000000ec0)={0x11, 0x0, <r26=>0x0}, &(0x7f0000000f00)=0x14, 0x800)
sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f40)={0x248, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x95}}}]}}, {{0x8, 0x1, r14}, {0x80, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r23}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r24}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8001}, 0xc0)
r27 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r27, @ANYBLOB="10002bbd7000fbdbdf250e00000023003400c6a34f948471835495af0d0f5fbbeb5476763503bc28bd764479f8d589254e0d0400e20004001601"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
openat$cgroup_int(r1, &(0x7f0000000280)='memory.max\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r27, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10040)
r28 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r29 = ioctl$KVM_CREATE_VCPU(r28, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r28, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r29, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r29, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r30=>0xffffffffffffffff, <r31=>0xffffffffffffffff})
r32 = fcntl$dupfd(r31, 0x0, r30)
ioctl$PERF_EVENT_IOC_ENABLE(r32, 0x8912, 0x400200)
write$FUSE_GETXATTR(r32, &(0x7f0000000380)={0x18, 0x0, 0x2, {0xf8000000}}, 0x18)
ioctl$TIOCL_SCROLLCONSOLE(r32, 0x541c, &(0x7f0000000240)={0xd, 0x1})

[  636.056730][T23907] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  636.072103][T23904] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  636.233095][T23924] device bridge17 entered promiscuous mode
[  636.298299][T23924] device bridge18 entered promiscuous mode
13:19:06 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x41)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x5)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
accept4(r2, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum})

13:19:06 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)

[  636.396309][T23924] device bridge19 entered promiscuous mode
13:19:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:06 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x19c, 0x0)

13:19:06 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x262, 0x0)

[  636.622805][T23940] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  636.806828][T23947] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000)
13:19:06 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x261, 0x0)

13:19:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="b558e2e238c879fe0f22d8f24810d4d30f013266b8354b00000f23c80f21f866350c00d0000f23f83e26f7992a0067640fc7721566b95b0900000f01c253", 0x3e}], 0x1, 0x20, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:06 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)

13:19:06 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x263, 0x0)

13:19:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000240)={0x80000001, 0x0, "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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:07 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xf425000000000000)

13:19:07 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)
recvfrom$l2tp6(r2, &(0x7f00000001c0)=""/240, 0xf0, 0x23, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x20)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:19:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0)

[  637.693020][T23983] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:19:07 executing program 0:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xff0f0000)

13:19:07 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x264, 0x0)

[  637.849480][T23997] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
13:19:07 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x3f00000000000000)

[  637.912003][T23996] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:19:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x81, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="7033a182be18b0f34aff9d81a72a13167fc250df15f673019f67c16abdaf3dfca39f64a3b11a621f776e42c080e9c2337d8f5b70709066b964c13bb928865bda8ce0c099869d4d7fc701944f3560872d7a7cc81e3a899790ce756a2ac19f53b6d54b0353fb36d85bc1c3ecda6f61f4816e4307de9e", 0x75}, {&(0x7f0000000240)="ebdf5311dcad49d8e5f804b4fc5a66098130ba688c187bdb48e81c8c1040d508c7268f989f96318624bdad211e789b5c06883f579f50c0ba1cad18577ce89d4c02982e256c88324a6241bff5caa2be28acdc5e6cf3d4ba531d5d4a8ef930a68083260ae93617d2786961ad16dcf8e0b3", 0x70, 0x9}, {&(0x7f0000000300)="4ae0f62e39a24aab3fece77fd086d43b28831625730807763ee2e877654352eea267b4441db7d3d6045175413ce451aba0b56eb3b4c341395d06daea9fb7cedcf3388996324e83ae9355c2495d38f072ce9efdf47329f415d97b7009da7b807fc121aacc897d774a6e0504d45f9d5c53ccc31e30d2", 0x75, 0x4}, {&(0x7f0000000380)="09f6a6adc2e1fd348d64bc860eb0f893b9448fbf8e58cfdaf86300add49c9e18ad00227e853201c036f9a706eb869024a05fd9711d6ff60bcf243fabd62b2e701dfd5ff2ed61658583a6c719c99d4ff36b", 0x51, 0x7}], 0x800000, &(0x7f00000001c0)='self\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000480)='./file0\x00', 0x0, 0x10)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = perf_event_open$cgroup(&(0x7f00000005c0)={0x4, 0x70, 0x8, 0x7, 0x40, 0xb2, 0x0, 0x4, 0x20000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000580), 0x1}, 0x0, 0x4, 0x4, 0xc, 0x1, 0x7, 0x3}, r3, 0x1, r6, 0xd)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, &(0x7f0000017000/0x1000)=nil, &(0x7f000000d000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f00000004c0)="c582aea5ec322581e5b74d27e05fbd384c6537582f5eca37175d7b2863b806782236fefa6b52ecf1b992e57a0e1c023dd9d29d16881bf9f299191b5421ee3b69c23620cf3a145f13ff7387f5a85a495edd431dacfca67c06f7732c11499fff301ebf883eba9fb9d65af778a48ec0bb0422808087388ef73c4c0dbd9f1c28f8aba60787da458e6a6c767ee4466801b3ed2339c1474792a2892a91d161af987b1fe206c858e66c4a211404961df9b06a", 0xaf, r7}, 0x68)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x7ff, 0x1f, 0x7, 0x4, 0x4})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  638.095969][T24009] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:19:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
socket$packet(0x11, 0x2, 0x300)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r2, &(0x7f0000000380)=""/87, 0x1f7)
getdents64(r2, &(0x7f0000000080)=""/167, 0xa7)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x15}], 0x2, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:19:08 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x700000000000000)

[  638.326966][T24019] ceph: No path or : separator in source
13:19:08 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x265, 0x0)

13:19:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x711101, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  638.721900][T24042] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:19:08 executing program 4:
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setreuid(0x0, r0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, r0}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@mcast2}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x7)
r3 = accept4(r2, 0x0, 0x0, 0x0)
close(r3)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
socket$inet6(0xa, 0x4, 0x80)
fchdir(r1)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x40000, 0x0)
close(r7)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x4004010)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

13:19:08 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x200000000000000)

13:19:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={r6, @in={{0x2, 0x4e23, @multicast2}}, [0x7f, 0xfffffffffffffbab, 0xff, 0x0, 0xa000000, 0xb1, 0x9, 0x5, 0x1, 0x7fffffff, 0x20, 0xffffffffffff8000, 0x1000, 0x0, 0x4]}, &(0x7f00000000c0)=0x100)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:19:08 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x266, 0x0)

[  639.229147][    C1] net_ratelimit: 6 callbacks suppressed
[  639.229157][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  639.240868][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:19:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={r6, @in={{0x2, 0x4e23, @multicast2}}, [0x7f, 0xfffffffffffffbab, 0xff, 0x0, 0xa000000, 0xb1, 0x9, 0x5, 0x1, 0x7fffffff, 0x20, 0xffffffffffff8000, 0x1000, 0x0, 0x4]}, &(0x7f00000000c0)=0x100)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  639.433381][T24074] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
13:19:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xffff, 0x101000)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
r3 = perf_event_open(0x0, 0x0, 0x0, r2, 0x0)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x8, 0x70bd2a}, 0x3a3}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x40)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20400, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={<r8=>0x0}, &(0x7f0000000140)=0x8)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x3, 0x0)
getsockopt$inet_int(r9, 0x0, 0x31, &(0x7f0000000440), &(0x7f0000000480)=0x4)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000240)={r8, @in={{0x2, 0x4e23, @rand_addr=0xfffffe01}}}, &(0x7f0000000180)=0x84)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

13:19:09 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r3, 0x2}, 0x10)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x7)
r5 = accept4(r4, 0x0, 0x0, 0x0)
close(r5)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, 0x4, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081)

[  639.629102][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  639.635116][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:19:09 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x267, 0x0)

[  639.869111][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  639.874892][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  639.928614][T24093] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  640.509111][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  640.509130][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  640.514999][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  640.520771][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:19:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
socket$packet(0x11, 0x2, 0x300)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r2, &(0x7f0000000380)=""/87, 0x1f7)
getdents64(r2, &(0x7f0000000080)=""/167, 0xa7)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x15}], 0x2, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:19:11 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x4260000)

13:19:11 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x4000000)

13:19:11 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x268, 0x0)

13:19:11 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

[  641.885725][T24122] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  641.920232][T24121] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  641.942987][T24124] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
13:19:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f30f090f0766f2ccc4e2b1066ca0f7f30fc733660f38808eabc400000fc75e4b66660f38811e0f35b8aceee3ef0f23c80f21f835000040000f23f8", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = fcntl$dupfd(r5, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
mmap$perf(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, r12, 0xa3142ab)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000140)={0xf31, 0x4, 0x4, 0x8, 0x3, {0x0, 0x7530}, {0x5, 0xc, 0x5, 0x3f, 0x6, 0x1b, "723441f3"}, 0x49, 0x3, @userptr=0x2, 0x0, 0x0, <r13=>r9})
r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_RES_CTX(r14, 0xc0106426, &(0x7f00000002c0)={0x1ffffffffffffe96, &(0x7f00000005c0)=[{}, {<r15=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000300)={r15, 0x1})
ioctl$DRM_IOCTL_SWITCH_CTX(r14, 0x40086424, &(0x7f0000000000)={r15, 0x4})
ioctl$DRM_IOCTL_NEW_CTX(r13, 0x40086425, &(0x7f0000000040)={r15, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
r18 = fcntl$dupfd(r17, 0x0, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200)
ioctl$HDIO_GETGEO(r18, 0x301, &(0x7f00000000c0))

13:19:11 executing program 4:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x120000, 0x0, &(0x7f0000000080), 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./bus\x00', 0x143c00, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000140)=0x78)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000180)=0x258, 0x4)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000240))
fchdir(r0)
open(&(0x7f0000000100)='./bus\x00', 0x1010c3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000063000000ce08748fee5565d4c65025cbfc71d93bf068b25d329b16798f6cff6ef7ea0e160c0ce2634ce5daf862d089a7e3d469cd9cffc6f78548d650de00bf0034182999535e0e94cfd9acd4a438d1edd5f0b8c3a4ad6b74fcb14776735b4fc9ed99391a918228cfe223fd212dbbb7c8"], &(0x7f0000000580)=0x87)
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000280)={0x101, 0xfffffffb})
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x118, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="5657d6aa73461d2ea4a084fd91237abf"}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ca}]}, 0x118}, 0x1, 0x0, 0x0, 0x44}, 0x20048086)

13:19:11 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x269, 0x0)

13:19:11 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x200000)

[  642.527788][T24152] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000)
[  642.538448][T24153] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  642.607783][T24150] ==================================================================
[  642.616056][T24150] BUG: KCSAN: data-race in exit_signals / kthread_unpark
[  642.623081][T24150] 
[  642.625432][T24150] write to 0xffff888123495064 of 4 bytes by task 24154 on cpu 0:
[  642.633441][T24150]  exit_signals+0x13b/0x490
[  642.637964][T24150]  do_exit+0x188/0x18c0
[  642.642246][T24150]  kthread+0x17f/0x200
[  642.646443][T24150]  ret_from_fork+0x1f/0x30
[  642.650859][T24150] 
[  642.653199][T24150] read to 0xffff888123495064 of 4 bytes by task 24150 on cpu 1:
[  642.660837][T24150]  kthread_unpark+0x24/0xe0
[  642.665353][T24150]  kthread_stop+0xe0/0x390
[  642.669781][T24150]  __loop_clr_fd+0x3ad/0x740
[  642.674383][T24150]  lo_release+0x153/0x160
[  642.678720][T24150]  __blkdev_put+0x2cf/0x420
[  642.683237][T24150]  blkdev_put+0x89/0x2f0
[  642.687488][T24150]  blkdev_close+0x52/0x60
[  642.691952][T24150]  __fput+0x1e1/0x520
[  642.696044][T24150]  ____fput+0x1f/0x30
[  642.700049][T24150]  task_work_run+0xf6/0x130
[  642.704565][T24150]  exit_to_usermode_loop+0x2b4/0x2c0
[  642.709860][T24150]  do_syscall_64+0x384/0x3a0
[  642.714461][T24150]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  642.720354][T24150] 
[  642.723643][T24150] Reported by Kernel Concurrency Sanitizer on:
[  642.729935][T24150] CPU: 1 PID: 24150 Comm: blkid Not tainted 5.5.0-rc1-syzkaller #0
[  642.737826][T24150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  642.748148][T24150] ==================================================================
[  642.756317][T24150] Kernel panic - not syncing: panic_on_warn set ...
[  642.762923][T24150] CPU: 1 PID: 24150 Comm: blkid Not tainted 5.5.0-rc1-syzkaller #0
[  642.770816][T24150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  642.780984][T24150] Call Trace:
[  642.784293][T24150]  dump_stack+0x11d/0x181
[  642.788644][T24150]  panic+0x210/0x640
[  642.792557][T24150]  ? vprintk_func+0x8d/0x140
[  642.797160][T24150]  kcsan_report.cold+0xc/0xd
[  642.801770][T24150]  kcsan_setup_watchpoint+0x3fe/0x460
[  642.807166][T24150]  __tsan_read4+0xc6/0x100
[  642.811623][T24150]  kthread_unpark+0x24/0xe0
[  642.816256][T24150]  kthread_stop+0xe0/0x390
[  642.820696][T24150]  __loop_clr_fd+0x3ad/0x740
[  642.825305][T24150]  lo_release+0x153/0x160
[  642.829724][T24150]  ? __loop_clr_fd+0x740/0x740
[  642.834508][T24150]  __blkdev_put+0x2cf/0x420
[  642.839034][T24150]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  642.845286][T24150]  ? fsnotify+0x6a9/0x7d0
[  642.849638][T24150]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  642.855542][T24150]  blkdev_put+0x89/0x2f0
[  642.859799][T24150]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  642.866058][T24150]  ? ima_file_free+0x92/0x290
[  642.870749][T24150]  blkdev_close+0x52/0x60
[  642.875096][T24150]  __fput+0x1e1/0x520
[  642.879165][T24150]  ? blkdev_put+0x2f0/0x2f0
[  642.883693][T24150]  ____fput+0x1f/0x30
[  642.887691][T24150]  task_work_run+0xf6/0x130
[  642.892214][T24150]  exit_to_usermode_loop+0x2b4/0x2c0
[  642.897516][T24150]  do_syscall_64+0x384/0x3a0
[  642.902131][T24150]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  642.908033][T24150] RIP: 0033:0x7f07658fe2b0
[  642.912685][T24150] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24
[  642.933099][T24150] RSP: 002b:00007ffde830d3b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  642.941525][T24150] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f07658fe2b0
[  642.949648][T24150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  642.957630][T24150] RBP: 0000000000000000 R08: 0000000000000028 R09: 0000000001680000
[  642.965696][T24150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000235c030
[  642.973764][T24150] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005
[  642.983329][T24150] Kernel Offset: disabled
[  642.987687][T24150] Rebooting in 86400 seconds..